Playbook is football coaching software operated by [LEGAL ENTITY NAME] ("we", "us"). This policy explains what we collect, why, who else touches it, and what you can ask us to do with it. It is written to be read, not to be survived.
The short version: we collect what the app needs to work and nothing else. We do not sell your data, we do not run advertising, and we do not use your plays or your roster to train anything.
What we collect
- Your coach account — email address, a password (stored only as a salted hash; we never see it), and your display name.
- Your team's content — the plays you draw, how you tag them, call sheets, practice scripts, scouting reports, quizzes, and any audio or video clips you record and attach to a play.
- Your roster — the player names you enter, and, for players who claim an account, their email address and password hash. Quiz attempts and whether a player has opened a delivery are stored against that player.
- Billing — if you subscribe, Stripe processes the payment. We store your Stripe customer and subscription identifiers, your plan, and its status. We never receive or store your card number.
- Technical data — IP address (used to rate-limit sign-in and invite pages against abuse), and diagnostic information when something errors, so we can fix it.
We do not ask for player dates of birth, addresses, phone numbers, grades, health information, or photographs, and there is nowhere in the app to enter them.
Children and student athletes
Playbook is used by youth and high school programs, so some players are minors. We designed the player side to hold as little as possible: a name, and an email address only if the player claims their own login.
Player accounts are created by invitation from a coach — nobody can sign themselves up as a player. If a player is under 13, the coach, school, or program inviting them is responsible for obtaining verifiable parental consent before sending that invitation, and for having the authority to share that player's name with us in the first place. If you are a parent or guardian and want your child's information removed, contact us and we will delete it.
We do not knowingly collect personal information directly from a child under 13 without that consent. If we learn we have, we delete it.
Players cannot see each other's quiz results, and they cannot see your call sheets, practice scripts, scouting reports, or anything else on the coaching side. A player sees only the plays a coach has explicitly installed for players, plus their own results.
Why we process it
- To run the service you signed up for — storing your plays, showing them to the right people, and keeping teams separated from one another.
- To take payment and manage your subscription.
- To keep the service secure and available — rate limiting, abuse prevention, and fixing errors.
- To send you service email: confirming your address, invitations you asked us to send, and notices about your account or your plan.
We do not send marketing email to players, and we do not use your content for advertising.
Who else processes it
We use a small number of vendors to run the service. They act on our instructions and only for the purposes above.
- Supabase — database, authentication, and file storage for recorded clips.
- Vercel — application hosting and delivery.
- Stripe — payment processing and subscription management.
- Sentry — error diagnostics, so a crash can be found and fixed.
- Upstash — rate limiting on the sign-in and invite pages.
- Resend — sending service email.
We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information if the law requires it, or to protect the rights and safety of our users.
How it is protected
- Every team's data is separated at the database level, not just in the app. The database itself refuses to return one team's plays to another team's coach.
- Traffic is encrypted in transit.
- Recorded clips live in a private storage bucket and are served only through short-lived signed links.
- Passwords are stored as salted hashes by our authentication provider. Nobody here can read them.
No system is perfect. If we become aware of a breach affecting your information, we will tell you.
How long we keep it
We keep your account and content while your account is open. Delete something in the app and it goes; delete your account and we remove your personal information and your team's content, except where we must keep records — billing history, for instance — to meet legal and tax obligations. Backups age out on their own schedule.
Your choices
- Access and correction — most of your data is editable in the app directly. Ask us for anything that isn't.
- Deletion — ask us to delete your account and we will.
- A copy of your data — ask and we will provide it.
- Removing a player — coaches can remove a roster entry at any time; parents and guardians can ask us directly.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR. We honor those requests regardless of where you are. Write to privacy@playbook.example.
Cookies
We use cookies to keep you signed in and to remember which team you are currently working in. That is all. There are no advertising cookies, no third-party trackers, and no cross-site profiling.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell account holders. Continuing to use Playbook after a change means you accept it.
Contact
Questions, requests, or concerns: privacy@playbook.example.