Privacy Policy
Last updated: October 17, 2026 · Version 2026-10-17
Draft for qualified legal review. These policies do not establish full legal compliance or protection from lawsuits.
Information collected
We store account email and account type; athlete information you submit; school/team history; statistics, achievements and media; coach applications and inquiries; follows; guardian connection requests; policy versions and acceptance times; and reports with review records. Avoid unnecessary identity documents, home addresses, live location or sensitive records.
Public and private information
A public eligible profile exposes its core biography, sport, school/team, achievements and media. Visibility switches limit selected measurements, birth date, GPA, coach contact, academic details and aspirations. Free-text fields can still reveal information you put into them. Career entries have their own public choice; hidden profiles and hidden academic history are excluded from the public Passport. Consent records, guardian links and reports are not public.
Purposes and providers
Lovable Cloud provides account authentication, database and private file storage; Lovable hosts the site and supports social sign-in, email services and the AI Gateway. Google or another chosen sign-in provider processes its own sign-in information. Human-approved AI scouting summaries use submitted profile statistics and highlight references, not an assurance of video analysis. Hosting, security and external-link providers may process technical information under their own terms.
Administrative use and disclosure
Authorized administrators review applications, reports and verification requests. Configured owner alerts may include signup email/account type, coach application information and aggregate activity. Delivery depends on email setup. Information may also be disclosed when reasonably necessary for operation, safety, legal obligations or dispute handling; we do not sell personal information.
Retention and deletion
Account/profile information remains while the account is maintained. You can edit and change profile visibility, and request access, correction, export or account/content deletion through support. Self-service account deletion is not implemented. Administrator account deletion removes linked database records, but storage objects, backups, provider logs and downloaded copies may remain pending operational cleanup or lawful retention. Specific retention schedules and processor terms require review; automatic full erasure is not promised.
Tracking and security
Basic page-view records contain a path and timestamp. Browser storage supports sign-in, theme, intro and account choices. Unfinished signup details and account-scoped profile edits are saved on the same browser/device for up to 30 days and removed when next accessed after expiry. Passwords, policy acceptance records, selected photo files and unfinished video uploads are not stored in these drafts. Clearing browser data removes them; drafts do not sync between devices. Optional usage measurement can be disabled through the tracking preference. Hosting may retain technical/security logs. Encrypted connections and access controls reduce risk, but no system is completely secure. Suspected incidents should be reported; assessment and legally required notifications need an operational response.
International users and rights
Athletes may use the service internationally; providers may process data outside their country. Transfer safeguards, legal bases, rights and required youth consent depend on the actual jurisdictions and provider terms and require specialist review. Contact athleticsturks@gmail.com for privacy requests or complaints; formal controller details remain to be provided.