1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account information (name, email, password)
• Athlete profile information (photos, videos, academic records, athletic statistics, contact details)
• Payment information (processed securely through Stripe)
• Communications with our support team
• Feedback, survey responses, and user-generated content

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage data (pages viewed, features used, time spent)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Log data (access times, error logs)

1.3 Information from Third Parties

We may receive information from:

• Payment processors (Stripe) regarding transaction status
• Authentication providers for login services
• Publicly available sources (social media profiles you link)

2. How We Use Your Information

We use collected information for:

• Providing, maintaining, and improving our Service
• Creating, managing, and sharing athlete recruiting profiles
• Processing payments and managing subscriptions
• Sending important updates, security alerts, and support messages
• Analyzing usage patterns to improve user experience
• Preventing fraud and ensuring platform security
• Complying with legal obligations

3. Information Sharing and Disclosure

3.1 With Your Consent

We share your athlete profile information with coaches and recruiters only when you explicitly choose to share your unique profile link with them. The app does not include an in-app messaging system, coach portal, or recruiter discovery board — all sharing is athlete-initiated via external links you control.

3.2 Service Providers

We share information with third-party service providers who help us operate the Service:

• Payment processing (Stripe)
• Cloud hosting and storage
• Analytics providers
• Email delivery services

3.3 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process or government requests
• Enforce our Terms of Service
• Protect our rights, privacy, safety, or property
• Prevent fraud or security issues

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4. Children's Privacy (COPPA Compliance)

4.1 COPPA Overview

We comply with the Children's Online Privacy Protection Act (COPPA). Our Service is primarily designed for users aged 13 and older. For users under 13 (and under 16 for enhanced protection), we implement the following safeguards:

4.2 Age Verification

Upon account creation, we collect the user's date of birth. Users who are under 16 years old are required to complete a parental consent flow before they can access the Service. Users under 13 are subject to additional feature restrictions even after consent is verified.

4.3 Verifiable Parental Consent (VPC)

For users under 16, we require verifiable parental consent before collecting personal information. Our consent flow works as follows:

• The child provides their parent or guardian's email address
• We send a verification email containing a unique, secure link to the parent
• The parent clicks the link and is taken to a consent page that describes exactly what data is collected
• The parent reviews the information, checks consent boxes, and types their full legal name as a digital signature
• Only after the parent completes this process is the child's account unlocked

The child cannot self-attest parental consent. The account remains locked behind an age verification screen until the parent's signature is received and verified server-side.

4.4 Feature Restrictions for Under-13 Users

Even after parental consent is verified, users under 13 have restricted access to protect their privacy:

• Public profile sharing: Disabled — share links cannot be created
• Photo and video uploads: May require parent approval

These restrictions are enforced at the application level and cannot be bypassed by the child user.

4.5 Parent Rights Under COPPA

Parents and legal guardians have the following rights regarding their child's data:

• Right to Review: Parents can view all data collected about their child through the Parent Dashboard
• Right to Edit: Parents can request corrections to their child's information
• Right to Delete: Parents can request deletion of their child's account and all associated data
• Right to Revoke Consent: Parents can revoke consent at any time, which disables the child's account
• Right to Refuse: Parents can refuse further collection of their child's information

To exercise these rights, parents can use the Parent Dashboard or contact us at theallinrecruit@gmail.com or 774.644.8818. We process deletion and revocation requests within 30 days.

4.6 Data Retention for Minor Accounts

Data for users under 13 is retained only while the account is active and consent is in effect. When a parent revokes consent or requests account deletion, we delete the child's personal information within 30 days, except where retention is required by law. Backup copies may be retained for up to 90 days for disaster recovery purposes, after which they are permanently destroyed.

4.7 Data We Collect From Children

For users under 13, we collect only the following information reasonably necessary for the Service:

• Basic profile information (name, school, sport, position)
• Athletic statistics and achievements
• Academic records (GPA, test scores)
• Photos and highlight videos (with parent oversight)
• Contact information for the parent/guardian

We do not collect geolocation data, behavioral advertising data, or sell personal information from users under 13. We do not condition participation on disclosure of more information than is reasonably necessary to participate in the Service.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information and profile data at any time through your account settings.

6.2 Data Deletion

You can delete your account and all associated data at any time, directly within the app — no need to contact support or wait for assistance. In your athlete dashboard, open the Support tab and tap "Delete Auth Account". This immediately and permanently removes your profiles, recruiting data, and access. Emailing theallinrecruit@gmail.com is available as a secondary fallback only if you cannot access the app. Note that some information may be retained for legal or legitimate business purposes.

6.3 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in our emails or updating your preferences.

6.4 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect functionality of the Service.

6.5 Do Not Track

We currently do not respond to Do Not Track signals.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We may retain certain information after account deletion for:

• Legal compliance and dispute resolution
• Fraud prevention
• Enforcing our agreements
• Backup and disaster recovery (typically 90 days)

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

Note: We do not sell personal information.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Your continued use after changes become effective constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: theallinrecruit@gmail.com
Phone: 774.644.8818

12. Cookie Policy

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

By using our Service, you consent to our use of cookies as described. You can manage cookie preferences through your browser settings.