Privacy Policy

Applies to: PlayOS Coach, PlayOS Game, PlayOS Ops, PlayOS Player, and PlayOS Tournament.

Effective Date: May 17, 2026 · Version 1.0

1. Who We Are

PlayOS Sports, LLC ("PlayOS Sports," "we," "us," or "our") is a Texas limited liability company that operates the PlayOS Sports application suite. You can reach us at brett@playossports.com.

2. Scope of This Policy

This Privacy Policy applies to all five PlayOS Sports applications — Coach, Game, Ops, Player, and Tournament — as well as the playossports.com website, our checkout and account-management flows, and any related services we operate.

3. What Data We Collect and How

3.1 Data you enter directly into the apps

Depending on which app you use, you may enter data such as:

• Player names, ages, positions, and development notes (Coach, Game, Player)
• Roster, formation, substitution, and playing-time data (Game)
• Team names, opponent names, scores, and season records (Game, Tournament)
• Club audit responses, sponsor details, board contact lists, and season planning notes (Ops)
• Skill ratings, journal entries, reflections, and photos attached to player profiles (Player)
• Tournament brackets, team lists, schedules, and game scores (Tournament)

By default, this content is stored in your browser's local storage on your own device.

3.2 Data transmitted to our servers when you use cloud features

Several features require server-side processing. When you use them, the following information is transmitted to and stored by our infrastructure (Netlify, including Netlify Functions and Netlify Blobs, operating under our configuration):

• Subscriptions and account management. When you purchase or manage a subscription, we receive and store your email address, your Stripe customer and subscription identifiers, your chosen plan and billing interval, your trial and renewal dates, and the per-app access codes we issue to you (for example, COACH-BX7K9). We do not receive or store your payment card number — Stripe handles that directly.
• App Sync (optional). If you choose to create or join a Coach Sync, Game Sync, Ops Sync, or Player Sync code, the corresponding app data (rosters, audit responses, archives, and related content listed in Section 3.1) is uploaded to a per-app Netlify Blobs store keyed by your sync code, so that other devices using the same code can read it back. If you do not create or join a sync code, nothing is uploaded.
• Ask PlayOS (AI). When you submit a query in the Coach, Game, Ops, or Player app, the query text and a structured context summary (such as app name, age group, session type) are sent through our server (a Netlify Function) to Anthropic's Claude API, which generates the response. We do not deliberately include player names, photos, or personally identifying information in the context we send.
• Tournament access. Tournament organizers authenticate with a subscription code; spectators and participants use a short public tournament code (for example, SC2026). Tournament metadata (bracket, teams, schedules, scores) is stored server-side so that participants can see live updates.

3.3 Data processed automatically when you use the apps or website

When you access our apps, website, or API, our hosting provider (Netlify) and our functions necessarily process certain technical information, including:

• Your IP address, for the limited purposes of abuse detection, rate-limiting, and routing.
• HTTP request metadata (timestamp, request path, user agent, origin).
• A hashed identifier derived from your subscription code (SHA-256), used solely to count distinct users for analytics without storing the code itself.

We do not retain raw IP addresses or user-agent strings in our own analytics store. Our hosting provider may retain request logs under its own policies.

3.4 Analytics we collect about product usage

We collect lightweight, privacy-safe analytics so that we can improve the product. Our analytics are designed around the following principles:

• No names, emails, phone numbers, or addresses are stored in analytics.
• No third-party analytics are used — no Google Analytics, no Facebook Pixel, no Mixpanel, no advertising trackers.
• Subscription codes are hashed with SHA-256 before being stored, so we can count unique users without identifying them.
• All data is aggregated. Dashboards show counts and trends, not individual user activity.

The events we log include application opens, subscription gate displays and successful unlocks, AI query counts (with token counts and cache-hit status, but not the query text), subscription lifecycle events (trial started, converted, canceled, resumed), and sync code creation and join events.

3.5 What we do not collect

We do not collect, and our apps are designed not to transmit:

• Payment card numbers, bank details, or CVV codes (Stripe processes those directly and we never see them).
• Precise location data or GPS coordinates.
• Contacts lists, calendars, or files from your device outside of what you intentionally enter.
• Data from users who are not actively using the app.

4. How Data Is Stored

Our server-side data is hosted in the United States on Netlify's infrastructure. Payment processing is performed by Stripe in the United States. AI inference is performed by Anthropic in the United States.

5. How We Use Information

We use the information described in Section 3 only to operate, maintain, and improve the apps. Specifically:

• To authenticate your subscription and grant access to the apps you've paid for.
• To deliver the features you interact with on screen (rosters, playing-time reports, session plans, audits, tournaments, and so on).
• To sync your data across the devices you connect using a sync code.
• To route your Ask PlayOS queries and enforce daily usage limits.
• To process payments, apply coupons (including Founding Member pricing), and handle cancellations and resubscriptions.
• To detect abuse (for example, unusual traffic patterns that indicate bot activity) and to protect the service.
• To understand aggregate usage and improve the product.

We do not use your data for advertising, profiling, data brokering, or any purpose other than delivering and improving the service.

6. Children's Privacy (COPPA)

PlayOS Sports apps are used by and for youth athletes, some of whom are under 13. We take the Children's Online Privacy Protection Act (COPPA) and analogous state laws seriously and apply the following practices:

• We do not knowingly allow children under 13 to subscribe or enter payment information. Subscription purchase is restricted to users age 18 or older.
• Data about youth athletes (names, positions, skill ratings, photos, journal entries) is entered into the apps by a coach, parent, or legal guardian acting on the child's behalf — not by the child directly.
• We do not display advertising of any kind in any PlayOS app, including to children.
• We do not knowingly use third-party trackers, advertising SDKs, or behavioral-profiling tools in any app.
• In PlayOS Player, a parent or guardian is expected to set up the app on behalf of a younger child and to review any content before it is shared.
• Photos added to player profiles in PlayOS Player are stored locally on the user's device and, if Player Sync is enabled, in our Netlify Blobs store for the purpose of cross-device access. They are not shared externally.

If you are a parent or legal guardian and you believe that information about your child has been entered into a PlayOS app in a way you do not consent to, please contact us at brett@playossports.com. We will work promptly to delete the relevant data from our systems, including any synced copies.

7. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share information only with the service providers we use to operate the platform, and only to the extent necessary:

• Stripe (payment processing): processes your payment, stores your payment method, and manages your subscription on our behalf. Stripe's processing is governed by its own privacy policy at stripe.com/privacy.
• Anthropic (AI inference): processes Ask PlayOS queries on our behalf via the Claude API. Anthropic's processing is governed by its own privacy policy at anthropic.com/privacy.
• Netlify (hosting, Netlify Functions, and Netlify Blobs storage): hosts the website, runs the server-side functions, and stores subscription, sync, and analytics data we configure. Netlify's processing is governed by its own privacy policy at netlify.com/privacy.
• Google Workspace (email): handles email communication sent to or from brett@playossports.com.
• Kit / ConvertKit (email list, if you opt in): delivers our marketing and product update emails if you sign up to the email list.

We may also disclose information if we are required to by law, legal process, or a valid governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

8. Payments and Subscriptions

PlayOS Sports offers paid subscription plans for the Coach, Game, Player, Tournament, and Ops apps, along with bundled Club plans. Payments are processed by Stripe.

• We do not store payment card numbers, bank account numbers, or CVV codes.
• We store your email address, Stripe customer and subscription identifiers, plan, billing interval, trial and renewal dates, and the per-app access codes we issue to you.
• You can manage, pause, or cancel your subscription at any time at playossports.com/account, which links to the Stripe customer portal.
• If you cancel and then resubscribe within 90 days, your existing access codes are reactivated and your synced data remains intact.
• Founding Member rates (for subscriptions created between May 17, 2026 and July 25, 2026) are locked for the life of the active subscription. See Terms of Service Section 7.4 for the full rate-lock commitment.

See the Terms of Service (Part 2, Section 7) for our refund policy and pricing-change rules.

9. Data Retention and Deletion

We retain the different categories of data we hold as follows:

• Locally stored app data remains on your device until you delete it. We cannot access it, and we cannot recover it.
• Subscription and account data is retained for the life of your subscription plus a reasonable period (generally up to 7 years) to comply with tax, accounting, and Stripe recordkeeping obligations.
• Sync data is retained while you are an active subscriber and for a 90-day grace period after cancellation so that resubscribing restores your data. After that, sync data associated with the canceled subscription may be deleted.
• Analytics events are retained in aggregate form. We do not identify individuals in analytics data.
• AI query rate-limit counters are reset daily and retained only as long as needed for rate-limit enforcement.

You may request deletion of your account and all server-side data associated with you by emailing brett@playossports.com. We will confirm receipt within a reasonable time and process the request promptly, subject to the recordkeeping exceptions noted above.

10. Security

We implement the following safeguards:

• All traffic between your device and our servers is encrypted in transit using TLS.
• Server-side data (subscriptions, sync data, analytics) is stored in Netlify Blobs under our account's access controls.
• Our Anthropic API key, Stripe secret key, and other credentials are stored as environment variables and are never exposed to the client.
• AI requests are subject to server-enforced daily rate limits (15 queries per day for paid tiers; 3 per day for Player Free) and origin checks (CORS) to prevent abuse.
• We avoid storing personally identifying information in our analytics, and we hash subscription codes before storing them.

Despite these measures, no system can be guaranteed fully secure. You should avoid entering highly sensitive information — government ID numbers, financial account numbers, medical records, or similar — into any PlayOS app. We recommend keeping your device physically secure and exporting your data periodically.

11. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the information we hold about you.
• Correction — update or correct inaccurate data. Most content can be edited directly in the app.
• Deletion — delete your data from your device (via app controls) and request deletion of server-side data (by emailing brett@playossports.com).
• Portability — request your data in a portable format.
• Objection — object to certain processing activities.
• Withdrawal of consent — withdraw consent where processing is based on consent.

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right not to be discriminated against for exercising these rights. We do not sell personal information as defined by these laws.

To exercise any of these rights, email brett@playossports.com. We will respond within the time required by applicable law.

12. International Users

PlayOS Sports is operated from the United States and our servers are located in the United States. If you access the apps from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the apps, you consent to that transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the Effective Date at the top and post a notice on the website and within the apps. Your continued use after the change takes effect constitutes acceptance of the updated policy.

14. Contact Us

Questions, concerns, or requests relating to this Privacy Policy: