Privacy Policy

PlayerFocus is operated by the company doing business as “PlayerFocus”, registered in British Columbia, Canada (the “Company”, “we”, “us”, or “our”). Our service helps youth sports academies capture coach evaluations, share development reports with families, and give players a free, shareable profile that travels with them.

For privacy questions, complaints, or data subject requests, contact our Privacy Officer at privacy@playerfocus.ca.

This policy describes how we handle personal information when you (a) use the PlayerFocus product as part of an academy that subscribes to our service, (b) sign up directly to create or manage a Player Resume, or (c) interact with our marketing site, demo forms, or sales process.

When you use PlayerFocus through a club or academy, that organization is generally the controller of the data they enter into the platform, and PlayerFocus is the processor acting on their behalf. When you sign up directly (a parent creating a Player Resume, a player aged 13 or older creating their own profile, or a coach signing up to verify a player), PlayerFocus is the controller.

We collect only the data we need to operate the service:

• Account data — full name, email, role, password hash (we never see your plaintext password), and optional phone number. For parents signing up directly, we capture an attestation that you are the parent or legal guardian of any child profile under your account.
• Player profile data — name, age or date of birth, position, team, optional photo, evaluations, ratings, focus areas, attendance, combine results (sprint times, vertical jump, agility, etc., where applicable), and notes entered by coaches or directors.
• Public profile (Resume) data — when a player has a public Resume at playerfocus.ca/p/{slug}, the data shown there is intentionally accessible to anyone with the link, including search engines and AI assistants. See Section 8.
• Coach verification data — when a coach verifies a player’s Resume, we store their name, email, the relationship they attest to (e.g., team coached, dates), and the timestamp of the verification.
• Billing data — for paying clubs, billing contact, billing address, and tax information. Card numbers are handled by our payment processor (Stripe); we never see or store full card numbers.
• Usage and product analytics — basic platform logs (requests, errors, performance) and product analytics events (page views, feature interactions) to keep the service running, debug issues, and improve the product. See Section 9 on cookies.
• Communications — content of emails you send us, demo request forms, and metadata about platform-generated emails (whether they were delivered, opened, or clicked).

We use personal information to:

• Operate the platform and deliver the features you expect (evaluations, reports, Season Story, Resume, moments, etc.).
• Authenticate you and protect your account.
• Send transactional communications (invitations, reports, password resets, billing).
• Send service announcements about meaningful changes to the platform or these policies.
• Improve the product through aggregated, de-identified analysis. We do not use individual player or family records to train third-party machine learning models.
• Comply with legal obligations, enforce our Terms, and respond to lawful requests from authorities.

We do not sell your personal information. We do not share it with advertisers or data brokers. We do not use player data for marketing without explicit, per-parent consent.

Under Canadian privacy law (PIPEDA federally and BC PIPA provincially) and the EU’s GDPR, we rely on the following bases to process personal information:

• Performance of a contract — to provide the service to you, your club, or the player you’re responsible for.
• Consent — for optional features (photos, marketing emails, public Resume sharing) and where required by law for any processing of children’s data.
• Legitimate interests — for security, fraud prevention, debugging, and modest aggregated product analytics, where these interests do not override your rights.
• Legal obligation — when we must retain or disclose information to comply with applicable law.

PlayerFocus is intentionally designed for youth sports. Many of the people whose data appears in the platform are minors. We take the following position:

• Direct signup is restricted to adults and players aged 13 or older. Self-signup includes an age question. If you indicate the profile is for someone under 13, we require that the account be created and managed by the child’s parent or legal guardian, and you must affirmatively attest to that relationship before we accept any data about the child.
• Parent-as-account-holder model. For under-13 children, the parent is the account holder. The parent agrees to these policies on the child’s behalf. We do not collect personal information directly from a child under 13 without first obtaining the parent’s consent through this attestation.
• Club-managed children. When a child’s data is entered into PlayerFocus by a club or academy, the club is responsible (as the controller) for obtaining appropriate parental consent before doing so. PlayerFocus surfaces this responsibility in the club’s setup flow and provides tools for parents to view, correct, or request deletion of their child’s data.
• COPPA (United States). If a child whose data appears in PlayerFocus is a US resident under 13, we treat the parent’s attestation (or the club’s consent process) as the verifiable parental consent required by the US Children’s Online Privacy Protection Act, 16 CFR Part 312. Parents may review the child’s information, request deletion, or refuse further collection at any time by emailing privacy@playerfocus.ca.
• No advertising or profiling of children. We do not show ads, sell information about children, or build advertising or behavioural profiles of any user — adult or child.

We try to keep PlayerFocus focused on coaching and development. We do not ask for, and we ask coaches not to record, sensitive categories such as medical or health diagnoses, racial or ethnic origin, religion, sexual orientation, or political views. If a coach inadvertently enters such information, parents and clubs can request its removal.

A core part of PlayerFocus is giving each player a free, shareable Resume at a public URL of the form playerfocus.ca/p/{slug} or playerfocus.ca/r/{slug}. By default, this URL is public. The page is intentionally accessible to:

• Anyone with the link — including grandparents, recruiters, scouts, and other clubs.
• Search engines (Google, Bing, etc.) which may index the page so it appears in name- or sport-based searches.
• AI assistants and research tools (e.g., ChatGPT, Perplexity, Claude) which may surface the Resume when someone asks about the player.
• Social media link previews — when the URL is shared on iMessage, WhatsApp, Slack, etc., a preview card is generated showing the player’s photo, name, and key statistics.

The information shown on a public Resume includes: player name, age or birth year, sport, team affiliations (current and past, where applicable), ratings, combine results, coach observations, focus areas, and standout moments. Photos appear only if the parent or player has uploaded one and consented to sharing.

If you want a Resume kept private, made non-indexable, or deleted entirely, email privacy@playerfocus.ca. We will action the request promptly and confirm in writing. Search engines may take additional time to remove cached copies; we will request removal where possible.

Cross-academy continuity. Each player has a single canonical record at PlayerFocus that travels across academies. If a player switches clubs, evaluations from the previous academy remain on the Resume; the new academy’s evaluations layer on top. Parents and players can request export, partition, or deletion of any portion of this record.

We use the following categories of cookies and local storage:

• Strictly necessary — authentication tokens, session cookies, CSRF tokens. These cannot be disabled without breaking the service.
• Functional — view preferences (e.g., Story vs Data view on the parent home), recent player switcher state. Stored locally; not used for tracking.
• Analytics — we use PostHog (US-hosted) to understand product usage in aggregate. Analytics cookies are set only after you accept them via the cookie banner. You can change your choice anytime.

We do not use third-party advertising cookies. We do not embed advertising trackers from social networks.

We share personal information with the following service providers, each bound by a written agreement that requires equivalent or stronger privacy and security commitments:

• Supabase (US / global) — database, authentication, file storage. Encrypted in transit and at rest.
• Vercel (US / global) — application hosting, serverless functions, edge delivery.
• Stripe (US / Canada) — payment processing for paying clubs. We never see or store full card numbers.
• Resend (US) — transactional email delivery (invitations, reports, password resets).
• PostHog (US) — product analytics, gated by your cookie consent.
• Anthropic (US) — AI-assisted text generation for coach reports and parent summaries. We send only the minimum text needed; we do not enable the provider to use our data for training.

A current list of subprocessors is maintained at this page. If we add or replace a subprocessor, we will update this page and, where the change materially affects how your data is handled, notify clubs by email before it takes effect.

PlayerFocus is operated from Canada, but our subprocessors are located in the United States and other jurisdictions. As a result, your personal information may be transferred to, stored in, and processed in countries outside Canada or the EU. Where required, we rely on Standard Contractual Clauses, equivalent transfer mechanisms, or your explicit consent.

If you have questions about the safeguards in place for international transfers, email privacy@playerfocus.ca.

Every row in our database is tagged with the academy it belongs to. Every query enforces that boundary via row-level security policies at the database layer — not just in application code. A coach at Club A has no ability to see or modify data belonging to Club B, even by accident or through a bug in the UI.

We protect personal information using a combination of administrative, technical, and physical safeguards: TLS encryption in transit, encryption at rest at the database and storage layers, strong password hashing, principle-of-least-privilege internal access, audit logging of administrative actions, and regular review of permissions.

If we become aware of a security incident affecting personal information, we will (a) investigate and contain the incident, (b) notify affected clubs without undue delay and in any case within the timeframes required by applicable law (under PIPEDA, “as soon as feasible” if there is a real risk of significant harm; under BC PIPA and GDPR, comparable obligations), and (c) cooperate with relevant supervisory authorities.

Depending on where you live, you may have the following rights with respect to your personal information:

• Access — a copy of the personal information we hold about you.
• Correction / rectification — request that we fix incomplete or inaccurate information.
• Deletion / erasure — request that we delete your information, subject to limited exceptions (e.g., where we must retain a record for legal reasons).
• Portability — receive your information in a structured, commonly used, machine-readable format. Players can download a signed PDF transcript of their record at any time.
• Restriction / objection — limit or object to certain uses of your information.
• Withdraw consent — for any processing based on consent, withdraw it without affecting prior lawful processing.
• Complaint — lodge a complaint with the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC) or the Office of the Privacy Commissioner of Canada (OPC), or with your local supervisory authority if you reside elsewhere.

To exercise any of these rights, contact privacy@playerfocus.ca. We will acknowledge your request promptly and respond substantively within 30 days, or in the timeframe required by applicable law if shorter.

If you are a California resident, the California Consumer Privacy Act and CPRA give you specific rights about your personal information. The categories of personal information we collect, the purposes for which we use them, and the sources from which we collect them are described in Sections 3 and 4 of this policy. We do not sell or share personal information for cross-context behavioural advertising. California residents may exercise the access, deletion, correction, and limit-use rights described in Section 14 by emailing privacy@playerfocus.ca. We will not discriminate against you for exercising these rights.

We retain personal information only as long as necessary to fulfil the purposes described in this policy:

• Active accounts — for as long as the account or club subscription is active.
• After cancellation — operational data is deleted or anonymized within 90 days of the final billing cycle, unless a longer period is legally required.
• Self-managed Resume accounts — until the parent or player requests deletion. Inactive accounts (no login, no new evaluations) for more than 36 consecutive months may be archived after a written notice.
• Audit logs — retained for up to 12 months for security and compliance review.
• Billing records — retained for the period required by tax and accounting law (typically 7 years in Canada).

We will update this page when our practices change. If a change materially affects how your data is handled, we will notify affected clubs and direct-signup users by email at least 14 days before the change takes effect, and update the “Effective” date at the top of this page. Continued use of the service after the effective date means you accept the updated policy.

This policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict-of-laws principles.

For privacy questions, data subject requests, or to reach our Privacy Officer: privacy@playerfocus.ca.

For general support: hello@playerfocus.ca.

To file a complaint with a regulator: Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).