Information We Collect
We collect information you provide directly, information generated through your use of the Service, and data from third-party integrations. Below is a complete breakdown of everything we collect.
Account & Identity Data
- Email address (required for account creation and authentication)
- Password (hashed and managed by AWS Cognito — we never store plaintext passwords)
- First and last name
- Date of birth (optional for account creation; required for certain profile features)
- User type: athlete, coach, or business
- Email verification status
Profile Data
- Bio, personal description, and social media profile URLs (Instagram, YouTube, etc.)
- Phone number and mailing address (street, city, state, ZIP, county)
- School, academic year, or grade
- Sport associations with positions, skill level, years of experience, jersey numbers, and achievements
- Profile photo (uploaded images processed and stored on our servers)
- Physical attributes: height, weight, hat size, shoe size, and clothing sizes (top and bottom)
- Food allergies and dietary restrictions
Athletic Performance Data
- Sport-specific performance metrics (e.g., speed, vertical jump, golf handicap, esports stats)
- Development history and athletic milestones
- Recruiting-relevant statistics and profile highlights
Managed Player Data (Minor Athletes)
Parental & Guardian Notice: If you create a Managed Player profile for a minor, you are consenting on their behalf to the collection and processing of the data listed below. See Section 04 — Children's Privacy for full details.
- Minor's full name and date of birth
- Minor's sport associations and all athletic profile fields listed above
- Guardian information: name, email address, phone number, and relationship to the player
Team & Schedule Data
- Team names, sports, seasons, and associated metadata
- Event details: titles, times, descriptions, and opponent information
- Event locations, including GPS coordinates (latitude/longitude) when provided via location services
- RSVP and attendance responses
- Team and event photos
Financial & Payment Data
Payment Security: PlayerAid does not store your payment card numbers, CVV codes, or full bank account details. All sensitive payment data is collected and processed directly by Stripe, Inc., which is PCI DSS Level 1 certified — the highest industry standard.
- Expense records: amounts, categories, and descriptions
- Stripe Connect account identifiers and onboarding completion status
- Payment status records (paid, unpaid, pending)
- Booking transaction identifiers and history
- Marketplace earnings records
Communications & AI Conversations
- In-app message content and full conversation history between platform users
- AI assistant messages you send and responses you receive
- Profile field updates proposed by the AI assistant and whether you accepted or rejected them
Device & Technical Data
- Expo push notification tokens and device platform (iOS or Android)
- IP address and general geographic region derived from IP
- App usage patterns and feature interactions
- Calendar events created or accessed through the app (only with your explicit permission)
- Camera and photo library access (only with your explicit permission, for media uploads)
Location Data
- GPS coordinates (latitude/longitude) for event locations if you use location-enabled features
- Address and place data from Google Maps integration when you search for event locations
How We Use Your Information
We use the information we collect for the following purposes, all of which are necessary to operate, personalize, and improve the PlayerAid platform.
Operating & Delivering the Platform
- Create and maintain your account and player profile
- Enable team creation, roster management, scheduling, and event coordination
- Facilitate athlete-coach connections and team communications
- Generate QR player cards and public-facing profile pages
- Power the services marketplace including booking, availability, and provider earnings tracking
Personalizing Your Experience
- Tailor content and recruiting visibility based on your sport, position, and skill level
- Configure the AI assistant to understand your profile and provide contextually relevant suggestions
- Display sport-specific metrics and performance data on your profile
Processing Payments
- Facilitate team expense collection and payment flows via Stripe
- Enable service providers to receive marketplace earnings through Stripe Connect
- Track payment statuses for team expenses and bookings
Communications
- Send push notifications for schedule updates, team invites, booking confirmations, and messages
- Deliver in-app alerts and notifications
- Send transactional emails (account verification, password reset, important service updates)
- Respond to your support inquiries
Safety & Platform Integrity
- Verify accounts and prevent fraudulent activity
- Detect and prevent unauthorized access or misuse of the Service
- Enforce our Terms of Service
Platform Improvement
- Analyze aggregate usage patterns to improve features and performance
- Debug technical issues and resolve errors
- Develop new features informed by how users interact with the platform
Legal Compliance
- Comply with applicable laws and regulations
- Respond to lawful requests from government or regulatory authorities
- Establish, exercise, or defend legal claims
Children's Privacy
Important — Parents & Guardians
PlayerAid enables the creation of athletic profiles for minor athletes. Parents and guardians who create these "Managed Player" profiles consent to data collection on behalf of their children. Please read this section carefully before creating a profile for a minor.
Age Requirements
PlayerAid is designed for users who are at least 13 years old. Users between the ages of 13 and 17 may use the platform with the express consent and active supervision of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
Managed Player Profiles
PlayerAid allows coaches, parents, and guardians to create profiles for minor athletes who do not have their own PlayerAid accounts. By creating a Managed Player profile, the account creator:
- Represents that they are the legal parent, guardian, or duly authorized coach of the minor
- Consents on behalf of the minor to the collection, storage, and processing of the minor's information as described in this Privacy Policy
- Accepts responsibility for ensuring all submitted information is accurate and appropriate
- Accepts responsibility for any co-managers they add who have access to the minor's profile
Data Collected About Minors
Through Managed Player profiles, we collect the same categories of data described in Section 01, including names, dates of birth, athletic metrics, and guardian contact information. This data receives identical security protections as all other user data on our platform.
Parental & Guardian Rights
Parents and guardians have the right to:
- Review all information we have collected about their child
- Request correction of any inaccurate or incomplete information
- Request deletion of their child's Managed Player profile and all associated data
- Withdraw consent for ongoing data collection and processing at any time
- Restrict the visibility of their child's profile on the platform
To exercise any of these rights, contact us at privacy@playeraid.org. We will respond within 30 days and will require verification of your identity and your relationship to the minor before processing any request.
COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA). If we discover that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information. If you believe a child under 13 has provided information to us without parental consent, please contact us immediately at privacy@playeraid.org.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. The following schedules govern how long specific categories of data are kept after account deletion:
You may request deletion of your account and personal data at any time through the app settings or by contacting privacy@playeraid.org. Deletion requests are subject to the retention schedules above where law requires longer retention.
Security
We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.
- Authentication: AWS Cognito provides secure authentication with password hashing, email verification, and short-lived JWT access tokens
- Encryption in transit: All data between the app and our servers is encrypted via TLS/HTTPS
- Payment security: Card and banking data is handled exclusively by Stripe (PCI DSS Level 1 certified — the highest industry tier)
- Access controls: User data access is restricted to authorized personnel on a strict need-to-know basis
- Secure development practices: We follow industry best practices for secure software development and infrastructure configuration
No method of data transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security against all threats. In the event of a data breach that may harm your rights or freedoms, we will notify you as required by applicable law.
Your Privacy Rights
Depending on your location, you have the following rights regarding your personal information. We will never discriminate against you for exercising any of these rights.
Right to Access
Request a copy of the personal information we hold about you, including categories, sources, and how it is used.
Right to Correction
Request correction of inaccurate or incomplete personal information. Many fields can be updated directly in the app.
Right to Deletion
Request that we delete your personal information. Some data may be retained as required by law (see Section 05).
Right to Portability
Receive a portable copy of your personal data in a structured, machine-readable format.
Right to Objection
Object to certain processing of your personal information, including processing based on our legitimate business interests.
Right to Restriction
Request that we limit how we process your personal information in certain circumstances, such as while a dispute is being resolved.
Right to Withdraw Consent
Where we rely on your consent as a legal basis, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@playeraid.org. We will respond to verifiable requests within 30 days. We may ask you to verify your identity before processing a request in order to protect against unauthorized access to your data.
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Your CCPA / CPRA Rights
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, our business purposes, and the third parties we share it with.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA.
- Right to Limit Sensitive Personal Information: Limit our use of sensitive personal information — including health-adjacent data (food allergies, physical measurements), financial data, and precise geolocation — to the purposes permitted under the CPRA.
- Right to Non-Discrimination: We will not discriminate against you in price, quality, or access for exercising your CCPA/CPRA rights.
Submitting a Request
To submit a CCPA/CPRA request, email privacy@playeraid.org or submit a request through the app. We will verify your identity before processing. You may designate an authorized agent to submit requests on your behalf; the agent must provide proof of written authorization.
Shine the Light
Under California Civil Code Section 1798.83, California residents may request information about disclosures of personal information to third parties for their direct marketing purposes during the prior calendar year. PlayerAid does not share personal information with third parties for their direct marketing purposes.
Third-Party Services
PlayerAid integrates with third-party services whose privacy practices are governed by their own policies. We are not responsible for the privacy practices of these third parties. We encourage you to review their policies before interacting with them through our platform.
Changes to This Policy
We may update this Privacy Policy from time to time as our practices evolve or as required by applicable law. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via push notification or email for significant changes that materially affect your rights
- In certain cases, ask for your renewed consent before the changes take effect
Your continued use of PlayerAid after any changes to this Privacy Policy constitutes your acceptance of the updated version. We encourage you to review this policy periodically.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out through the appropriate channel below. We are committed to responding promptly.
PlayerAid · playeraid.org · This Privacy Policy is effective as of March 10, 2026.