# Privacy Policy **Projectory Athletes, Inc.** Last Updated: June 2026 Effective Date: [INSERT LAUNCH DATE] ## 1. Introduction Projectory ("Company," "we," "us," or "our") operates the Projectory mobile application (the "Service"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. **Please read this Privacy Policy carefully.** If you do not agree with our policies and practices, please do not use our Service. By accessing and using Projectory, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. --- ## 2. Information We Collect ### 2.1 Information You Provide Directly **Account Registration:** - Full name - Email address - Date of birth (for age verification; we require users to be 18 years or older) - University/College/School name - Athletic sport and position - Athletic year (Freshman, Sophomore, Junior, Senior, Graduate Student, Other) - Password (hashed and encrypted; we never store plain-text passwords) - Profile bio and training availability - Avatar/profile photo **Verification Documents (Optional):** - Student ID photo or school email (uploaded to secure cloud storage) - Team roster screenshot (showing your name) - School athletic department confirmation letter/email - These are processed and deleted after verification (within 7 days) **Communications:** - Training clips (videos you upload to the Service) - Chat messages with other athletes - Feedback, support requests, or reports you submit **Payment Information:** - If we introduce premium features in the future, payment data will be processed by a third-party payment processor (Stripe or equivalent); we do not store credit card information directly. ### 2.2 Information Collected Automatically **Location Data:** - When you grant permission, we collect your precise GPS location (latitude/longitude) to: - Calculate distance between you and other athletes - Show "athletes near me" in the Discover tab - Enable local training partner matching - You can revoke location permissions at any time in your device settings; Projectory will function without location data (distance matching will be unavailable) - We do not sell or share your location with third parties **Device Information:** - Device type, operating system, and version - Device identifier (IDFA, Android Advertising ID) - IP address - Browser/app version - Crash logs and error reports (via Firebase Crashlytics) **Usage Analytics:** - Pages/screens visited and time spent - Features used (e.g., "viewed athlete profile," "sent message," "posted clip") - Search queries - Connection requests sent/received - Account actions (login, logout, profile edits) - We use Firebase Analytics to track this data **Cookies & Similar Technologies:** - We do not currently use cookies, but may implement them for authentication and user preferences. Any use will be disclosed in an updated Privacy Policy. ### 2.3 Information from Third Parties - **NCAA Verification Services:** If we partner with the NCAA Eligibility Center or similar verification providers, they may share confirmation of your D1 athlete status (name, sport, school only) - **Social Media:** If you sign in via social media (future feature), we collect data per that platform's terms - **Other Athletes:** When users report, block, or interact with you, we may receive information about you in that context --- ## 3. How We Use Your Information We use collected information for the following purposes: ### 3.1 Service Delivery - Create and maintain your account - Optionally verify your college athlete status (verification is voluntary; unverified athletes can still use the app) - Match you with training partners based on sport, position, location, and availability - Enable real-time messaging with other athletes - Display your profile, clips, and training information to other athletes - Process account deletion requests ### 3.2 Communication - Send transactional emails (account confirmation, password reset, verification status updates) - Send service updates and feature announcements - Respond to support requests and safety reports - Notify you of messages, connection requests, and activity (with permission) ### 3.3 Safety & Compliance - Enforce our Terms of Service (block abusive users, investigate reports) - Prevent fraud, abuse, and misuse of the Service - Protect the rights, property, and safety of Projectory, our users, and the public - Comply with legal obligations and law enforcement requests ### 3.4 Product Development - Analyze how users interact with the Service to improve features - Identify bugs, crashes, and performance issues - A/B test new features - Generate aggregate statistics (e.g., "X% of users are soccer players from California") ### 3.5 Marketing & Growth - Send promotional emails about Projectory features (with opt-out ability) - Create targeted marketing campaigns for NCAA athletes - Share non-identifying usage statistics with potential investors - Feature user success stories (only with explicit consent) --- ## 4. How We Share Your Information ### 4.1 Data Shared With Other Athletes (Public) When you use Projectory, other verified NCAA D1 athletes can see: - Your name and athletic year - Your sport and position - Your school - Your distance from them (calculated from location) - Your training clips - Your training availability - Your profile bio - Your verification status (verified/pending/unverified) - Whether you've connected with them **You cannot hide this information from other athletes.** If you do not want to share it, do not use Projectory. ### 4.2 Data NOT Shared We **do not** sell, rent, or lease your personal information to third parties for marketing purposes. Specifically, we do not share: - Your email address (except with your explicit consent) - Your exact GPS coordinates (only distance calculations are shown) - Your date of birth - Your verification documents - Your chat message content (except with the recipient) - Your account password ### 4.3 Data Shared With Service Providers We share necessary information with third-party service providers to operate Projectory: | Service | Data Shared | Purpose | |---|---|---| | **Firebase (Google Cloud)** | Account data, messages, clips, analytics, crash logs | Authentication, database, storage, analytics, error tracking | | **Stripe (if payments added)** | Email, payment method | Payment processing (we do not store card data) | | **Twilio (if SMS added)** | Phone number | Account verification or notifications | | **AWS S3 or similar** | Verification documents, training clips | Secure file storage | | **Email provider (SendGrid/etc.)** | Email, name | Transactional and marketing emails | All service providers are contractually obligated to: - Use data only for the purposes specified - Maintain data security standards - Not share data with other parties - Delete data upon request or contract termination ### 4.4 Legal Disclosures We may disclose your information if required by: - Law, court order, or government request - Protect our legal rights or investigate violations of our Terms of Service - Respond to claims of illegal activity - Protect user safety or public safety We will provide notice of such disclosures unless legally prohibited. ### 4.5 Merger or Acquisition If Projectory is acquired, merged, or sold, your information may be transferred as part of that transaction. You will be notified via email and this Privacy Policy will be updated. --- ## 5. Data Security ### 5.1 Security Measures We implement industry-standard security practices to protect your data: - **Encryption in Transit:** All data sent to/from Projectory is encrypted using TLS 1.2+ (HTTPS) - **Encryption at Rest:** Sensitive data (passwords, verification documents) is encrypted in our database - **Password Hashing:** Passwords are hashed using bcrypt or similar; we cannot decrypt them - **Access Controls:** Only authorized employees can access user data - **Regular Audits:** We conduct security audits and penetration testing - **Incident Response Plan:** If a breach occurs, we will notify affected users within 30 days ### 5.2 Your Responsibility You are responsible for: - Keeping your password confidential - Not sharing your account credentials - Logging out after use, especially on shared devices - Reporting suspicious activity immediately **We are not responsible for unauthorized access resulting from your failure to secure your password.** --- ## 6. Your Rights & Control ### 6.1 Access & Portability You have the right to: - Access all personal data we hold about you - Download your data in a portable format (CSV, JSON) - Request this at any time via support@projectoryathletes.app ### 6.2 Correction & Updates You can update your profile information at any time within the app. If you identify inaccurate data, contact us to correct it. ### 6.3 Deletion & Account Closure You have the absolute right to delete your account. When you request account deletion: - Your profile is removed from Projectory within 7 days - Your chat messages are deleted - Your clips are deleted - Your personal data is removed from our database - Verification documents are securely deleted - Aggregate analytics (e.g., "1 soccer player from UNC") may be retained **You can delete your account any time from Settings → Delete Account.** No reason required; no questions asked. ### 6.4 Opt-Out of Marketing You can opt out of promotional emails by: - Clicking the "unsubscribe" link in any email - Changing notification settings in the app - Contacting us at support@projectoryathletes.app ### 6.5 Location Permission Control You can revoke location permission in your device settings (iOS: Settings → Privacy → Location; Android: Settings → Permissions → Location). Projectory will continue to work without location data. --- ## 7. Children & Age Requirement ### 7.1 Age Requirement Projectory is **for users 18 years and older only.** We enforce a strict 18+ requirement: - During signup, we verify date of birth - Accounts created by users under 18 are not permitted - We do not knowingly collect data from anyone under 18 ### 7.2 If We Discover a Minor If we discover a user is under 18, we will: 1. Immediately disable the account 2. Delete all personal data within 30 days 3. Notify the account holder **If you are under 18, please do not use Projectory.** --- ## 8. International Data Transfers Projectory stores data primarily in **United States (Google Cloud / Firebase).** If you access Projectory from outside the US, your data is transferred to the US and subject to US privacy laws. By using Projectory, you consent to: - Transfer of your data to the United States - Processing of your data under US law - Storage on US-based servers If you do not consent, do not use Projectory. --- ## 9. Data Retention We retain your data as follows: | Data Type | Retention Period | |---|---| | **Account Profile** | Until account deletion (then 30 days for backup purposes) | | **Messages** | Until account deletion or 180 days after last activity | | **Verification Documents** | 7 days after verification (then deleted) | | **Training Clips** | Until you delete or account is deleted | | **Analytics/Crash Logs** | 90 days (Firebase default) | | **Backup Data** | 30 days after deletion (for disaster recovery) | Once data is deleted, it cannot be recovered. Deleted backups are permanently destroyed after 30 days. --- ## 10. Third-Party Links & Services Projectory may contain links to external websites (e.g., NCAA.org, university websites). **We are not responsible for their privacy practices.** Review their privacy policies before providing information. --- ## 11. Do Not Track (DNT) Some browsers have "Do Not Track" (DNT) features. Projectory does not respond to DNT signals. We use analytics to understand user behavior; you can opt out via device settings or our Privacy Settings. --- ## 12. Updates to This Privacy Policy We may update this Privacy Policy at any time. Changes will be posted here with an updated "Last Updated" date. **Continued use of Projectory after updates constitutes acceptance of the new Privacy Policy.** We will notify you of material changes via: - In-app notification - Email (if we have your email on file) - Updated Privacy Policy link in Settings --- ## 13. Contact Us For questions about this Privacy Policy, data requests, deletion, or privacy concerns: **Email:** support@projectoryathletes.app **Mailing Address:** Projectory Athletes, Inc. [INSERT YOUR ADDRESS] [CITY, STATE ZIP] **Response Time:** We will respond to privacy inquiries within 30 days. --- ## 14. Specific Provisions by Jurisdiction ### 14.1 California (CCPA/CPRA) If you are a California resident, you have the right to: - Know what personal information is collected, used, and shared - Delete personal information (with limited exceptions) - Opt-out of "sale" or "sharing" of personal information - Non-discrimination for exercising your rights **Projectory does not sell personal information.** We do share data with service providers (Firebase, etc.), which may constitute "sharing" under CCPA. You can opt out via privacy controls in Settings or by contacting support@projectoryathletes.app. ### 14.2 European Users (GDPR) If you are in the EU/EEA, we process your data under the legal basis of: - **Consent:** You consent when you agree to this Privacy Policy during signup - **Contract:** We need your data to provide the Service - **Legitimate Interest:** We use data to prevent abuse and improve Projectory - **Legal Obligation:** We comply with law enforcement requests You have the right to: - Access, correct, or delete your data - Restrict processing - Data portability - Withdraw consent - Lodge a complaint with your data protection authority Contact us at support@projectoryathletes.app to exercise these rights. --- **END OF PRIVACY POLICY** --- *This Privacy Policy is effective immediately upon launch of Projectory. Last updated June 2026.*