Privacy Policy

1.Information we collect

You give us:

• Account: email, password (stored hashed), display name, date of birth, optional phone, optional avatar.
• Athlete profile: graduation year, gender, GPA, city and state, club affiliation, competition level, height, weight and dominant foot, SAT/ACT scores, a contact email and phone, a social handle, a bio, and the photos and game film you upload.
• Coach, club and agency accounts: your program or organization, title, and the contacts you choose to share.
• For prize or merchandise fulfillment only (for example a Top-100 shirt): a shipping address, used solely for fulfillment and never shown to coaches or on any public surface.
• For minors: a parent or guardian email and the consent records described in section 8.
• If you subscribe: your plan, billing interval and the amount billed. Card details go to our payment processor (section 5); we never see or store full card numbers.

We generate as you use Ambition:

• Profile-view records: which coaches and programs viewed an athlete's profile, and when.
• Content-view records for clips, streams and Explorer posts, including how far into a clip or recording a view got, and — while a game is streaming live — a count of who is watching. Signed-in viewers count under their account; anyone else counts under a random identifier that lives only in that browser tab.
• Recruiting-outreach records: the messages sent through our relay and any replies to it, plus, for outreach emails only, whether the email was opened (a 1×1 pixel that records the open, the user agent and the IP address) and which links in it were clicked (a redirect that records the destination, the user agent and the IP address). Account and system emails carry no tracking.
• Product-usage events: which screens are used and which features are taken up (for example signing up, completing onboarding, sending outreach, starting a subscription). These are sent to our analytics processor (section 4) under your account's opaque identifier only — never your name, email, messages or any text you type, and page addresses are recorded without their query strings. We honour your browser's Do-Not-Track setting.
• Security and administrative logs, including an audit trail of staff actions on your account.

Cookies and local storage.We set one cookie, your sign-in session. Your theme preference and the analytics identifier above are kept in your browser's local storage. We use no advertising cookies.

2.How we use information

To run the recruiting platform: build athlete profiles and show them to the audiences you have consented to; let athletes and coaches contact each other; show you and your organization how your recruiting is going; maintain the college directory; process subscriptions; keep the Service safe and secure; understand how the product is used so we can improve it; and comply with the law. We do not use your information for advertising, and we do not sell it.

3.How information is shared

• With college coaches and recruiters:a consenting athlete's profile, film and stats — and, only once the contact-consent gate is satisfied, contact details. Athlete profile pages are marked not to be indexed by search engines, and a minor's profile is shown only to signed-in, verified coaches — and only after a parent or guardian consents to discovery (section 8).
• With your club, team or agency: if you are rostered on a team or represented by an agency, its staff see your profile, games and film in the tools they use to run the team, and can reach out to coaches on your behalf through the relay.
• Recruiting outreach:we transmit messages between athletes or clubs and coaches through a relay address and keep a record of the correspondence. Coaches' email addresses are never shown to athletes.
• Live streams and recordings:a game marked public can be watched by anyone with its link; footage of teams with players under 14 is limited to the team's families, club staff and Ambition staff.
• Service providers (processors) that handle data for us and may not use it for their own purposes: hosting and database infrastructure; Cloudflare R2 for file storage; Bunny Stream and Cloudflare Stream for video and live streaming; SendGrid for email delivery; Twilio for text messages a coach sends through the Service; Stripe for payments; PostHog for product analytics (the events in section 1 only); an error-monitoring service that receives technical error reports; and a child-safety screening provider that checks uploaded video against known abuse material (section 9). Automated services that read public college athletics websites to maintain our directory receive no user account data.
• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• Legal and safety: disclosures required by law or a valid legal process, and mandatory reporting of child sexual abuse material to NCMEC (section 9).

4.Analytics

We use PostHog to understand product usage. It receives the product-usage events described in section 1, keyed by your account's opaque identifier and your role (athlete, coach, parent, and so on) — never a name, email, birthdate, grade, message or anything you type. Screen views are recorded by page path only. It does not record sessions, capture what you click on, or read form fields. Browsers that send Do-Not-Track are not tracked at all.

5.Payments

Subscriptions are processed by Stripe. Card details are entered on Stripe's hosted checkout and billing pages and never pass through our servers; we keep your Stripe customer and subscription identifiers, your plan, billing interval and the amount billed. Stripe's own privacy policy applies to the payment itself.

6.Your choices and rights

• Export. You can download a copy of your account data at any time from your account settings, or ask us for one.
• Delete. You can ask us to delete your account.
• Anonymize. Alternatively we can anonymize it: your email, name, avatar, date of birth, phone, contact details, parent email, shipping address, bio and photo are removed, your sessions are ended and your profile is hidden.
• For a minor, a linked parent or guardian can make any of these requests, and can grant or revoke consent at any time (section 8).
• Send requests to privacy@playambition.com or from your account settings. We aim to fulfil them within 30 days and will verify that the request comes from the account holder or their guardian first.
• Coaches listed in our directory can ask us to correct or remove their entry, and any coach who unsubscribes from outreach is permanently excluded from it.

7.Data retention

• Recruiting-activity logs — profile views, outreach open and click records, live-viewer counts and per-view watch depth — are kept for 365 days and then purged.
• Game recordings are kept for 60 days after a game ends; we warn you 7 days before deletion so you can download a copy. Clips you have saved and one featured showcase game per athlete are kept beyond that.
• Consent records are kept as our legal record of consent.
• Billing records are kept as long as tax and accounting law requires.
• Other data is kept while your account is active and as needed for the purposes above.

8.Children's and minors' privacy

• Age gate. We ask for a date of birth before creating any account. The minimum age to create your own account is 13.
• Under 13. We place the signup on hold and keep only the date of birth, an optional parent email and a secure token until a parent or guardian completes the signup through a verified email link. No account or other data is created until then.
• Athletes 13–17. A minor is hidden from coach discovery — search, the Top 100, Explorer and the profile page — and their contact details are withheld, until a parent or guardian consents through a linked parent account or a verified email link. Discovery and contact are two separate consents; either can be given or withdrawn on its own.
• Parental controls.A verified parent or guardian can see their athlete's information, grant or revoke either consent at any time, and request export, deletion or anonymization.
• Consent records. We keep a permanent record of each consent and revocation — its scope, method, time, the policy version in force, and who gave it — as proof of consent.

9.Content safety

Video posted to the Service is screened against known child sexual abuse material before it can be published. A confirmed match is quarantined immediately and reported to the National Center for Missing & Exploited Children (NCMEC) as required by law. Report a child-safety concern to safety@playambition.com.

10.Security

Passwords and sign-in tokens are stored hashed; two-factor secrets are encrypted at rest; administrative access is restricted, rate-limited and audit-logged, including any support access to your account. No system is perfectly secure. If a security incident affects your information we will notify you and the relevant authorities as the law requires.

11.Where data is stored

[hosting region and cross-border transfer terms — to be finalized with counsel]

12.Changes to this policy

This policy is versioned and your acceptance is recorded. We will tell you about material changes in the app or by email, and where the law requires it we will ask for your consent again.

13.Contact

Privacy and data rights: privacy@playambition.com. Child-safety concerns: safety@playambition.com. Everything else: hello@playambition.com. See also our Terms of Service.