Privacy Policy

1. Introduction

Spatrian ("we," "our," or "us") is committed to protecting the privacy of our users, particularly the children who train with it: players aged 13 to 18 at school, in a club or homeschooled, and the younger brothers and sisters a parent keeps on the record. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Our platform is directed by parents: a parent or guardian holds every family account, except a player aged 18 or 19, who may hold their own. We comply with the Children's Online Privacy Protection Act (COPPA) and implement practices aligned with the Family Educational Rights and Privacy Act (FERPA), although as a supplementary curriculum tool we are not a FERPA-covered educational institution.

2. Information We Collect

2.1 Information You Provide

• Account Information: Parent/guardian name, email address, state of residence
• Student Information: Student name, age group designation (e.g., U14, U16)
• Consent Records: Digital signatures, waiver acceptances, dates of agreement, COPPA verifiable parental consent
• Educational Records: Lesson completion data, quiz scores, rubric assessments, journal entries, progress tracking
• Assistant Messages: What you or your child type to Coach Spatrian in the app, and what a visitor types to the assistant on our public pages
• Survey Answers: Your replies to the short in-app surveys we may show from time to time — typically one to three questions about how the product is working for your family. Answering is voluntary, and they are shown to the parent or guardian on the account, never to a child
• Reports: If you report something another family, child or coach showed you, we keep the report: the reason, any words you add, a short excerpt of what you saw and which item it was, so our team can look at it. The person reported is never told who reported them. If a child blocks another child on Friends, we keep that the two are blocked, so neither can ask again
• Payment Information: Processed securely through Stripe — we do not store credit card numbers. A minute pack bought in the iPhone or Android app is paid to Apple or Google, and we receive only the store's signed record of the purchase

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and which videos on our public pages were played and how far (a count by day, with no cookie and nothing that links a play to you)
• Device Information: Browser type, operating system, screen resolution
• Notifications: If you switch on notifications, the address your browser or phone gives us to deliver them to, kept until you switch them off or sign out
• Spoken numbers: Where a page lets you say a number instead of typing it, your phone or browser turns the speech into text itself, using its own speech service; we receive only the number
• Uploaded Content: Videos, images, and documents uploaded to the file repository or video journal
• Session Photos: A photo a parent attaches to a logged session as a dated work sample. It is re-encoded on arrival, so the location, camera and other details a phone writes into a photo are removed, and it can be opened only by that family
• How you found us: When you give us your email address on one of our public pages, or create an account, we store with it the campaign tags in the link you first arrived by (for example utm_source), the address of the site that sent you, if your browser reports one, and the first page of ours you opened on that visit. They are read by our own page and kept only on that sign-up or account record; no third party sees them

2.3 The Microphone and the Camera

On four drills the Audio Coach can listen for the ball, if you turn it on. The microphone is opened on your device and no sound is recorded, stored or sent. What leaves the phone is a list of moments: the time of each touch, how loud and how short it was, and a sixteen-number outline of its tone, from which no sound can be rebuilt. A small sound classifier also runs on the phone to check that a counted touch was the ball and not a voice; it is given about a second of sound around each touch, decides on the device, and discards it. You can switch that check off in the Sound check.

With each listened session goes a short tally of how the phone listened: how many sounds it counted, how many it refused and for which of a fixed list of reasons, whether the on-phone check ran, the same sixteen-number outline averaged over your ball's touches, and the phone's operating-system and browser family (for example “Android, Chrome”) — never a device model, a sound or a name. What the phone learns about each of your balls is kept in that phone's browser. If you press Send this to Spatrian after a Sound check, its numbers and your answers reach us the same way, with any headset reduced to a yes or no rather than its name.

Where a feature uses the camera, the picture stays on the device. Seeing a drill laid out on real grass, on phones that support it, is drawn by your browser over the camera view and nothing from the camera is sent to us. Any feature that measures movement from the camera does so on the device and keeps only a handful of position coordinates, never an image or a video. The camera and microphone are asked for only when you start the feature that needs them, and your browser shows when either is in use.

2.4 Performance and Movement Data

• Biometric Patterns: Movement speed, acceleration, and activity patterns derived from uploaded video
• Spatial Tracking: Position coordinates relative to the playing field during video analysis
• Health & Fitness Indicators: Estimated exertion levels, fatigue indicators, and activity intensity metrics
• Performance Analytics: Skill scores, session metrics, badges, and progression data
• Growth: If a parent uses the Growth tab: the child's height, sitting height, weight, sex and date of birth, and, if the parent chooses, the parents' own heights. They are used to estimate how far the child is through their growth spurt and nothing else; weight is never shown back as a verdict, and the tab is the parent's only. No AI service reads them
• College Pathway: If a parent uses it, the year your teen finishes high school, the levels of college sport you are planning for, the schools, coaches, camps and visits you note on the recruiting desk, and the core courses and grades a parent enters to see how they count against the NCAA. All of it is kept for your family alone: it is never shown on a profile link, to a coach, or to anyone outside your family, and no AI service reads it. The one exception is a practice call with a college coach, which your teen starts: once a parent has allowed the AI features, what they type in it, with the school’s name and level and the position they enter, is sent to Google’s Gemini to write the practice coach’s replies. The conversation is not kept; we keep only a count of the day’s practice turns.

2.5 Co-ops and Park Day

A co-op is a group of families doing PE together, run by one of its parents, the director. Joining one adds a few things to what we hold, each entered by a parent or the director and each kept to its purpose:

• The roster: Each enrolled child's first name and age band, which the director and the other member families can see, and the sessions each child attended. No family sees another family's hours, scores or record.
• Safety details: If you choose to write them, one short line about an allergy or medical need, one emergency contact (name, relationship, phone), and the names of the adults besides you who may collect your child. You write them for one co-op at a time. Only that co-op's director and co-director can read them, and only on the day's safety sheet and the printed sign-in sheet. No other family ever sees them, and they are deleted when your child stops taking part, when your family leaves the co-op, or when you delete your child's data.
• Check-in and pick-up: On a Park Day the director records the time your child arrived, the time they were collected and the name given for the collecting adult, and emails you when your child is signed out. You can see those times; other families cannot.
• Dues: If the director tracks the term's fee here, we hold the fee, its due date, how the co-op takes payment, and whether your payment has been recorded. No money moves through Spatrian. You see your own line only; the director sees every family's.
• Notes, invitations and replies: A note the director sends to every family, the term's agreement and your acceptance of it, an invitation to the showcase day and how many of you are coming (the director alone sees the count), and a line the director writes about your child for the term report you download.
• A clip you choose to share: A parent may share one Skill Journal clip of a child aged 13 or over with the co-op's director, for 14 days or until they stop sharing it, so the director can watch it and leave the family a note. Nobody else in the co-op can see it. Clips of a child under 13 are never shared.
• Guest links: For one Park Day the director may give an adult without an account a link that shows that day's plan, its stations and the groups by first name and age band, and stops working at midnight after it. It shows no child's record and nothing about any family.

2.6 Teams a Coach Keeps

A club or school coach who uses our team pages types in what they need to run a squad. None of it comes from a family's account, and none of it is added to one:

• The squad: Each player's name as the coach types it, shirt number and position; results, lineups, minutes played and training attendance; and goals the coach sets for a player.
• Injuries and load: What the injury is, where, when it happened, when the player is expected back and the coach's note, beside the minutes each player was asked to play or train. It is a coach's planning record, not a medical one.
• Tryouts: For a player the coach is watching, a name, a birth year, a position, where they were seen, the coach's notes and the ratings the coaching staff give. If a family signs a player up by a link the coach shared, we also keep the family's name, email, any phone and message they give, and, for a player under 13, that they said they are the parent or guardian. These are for the team's coaches only, we never email the family, and they are deleted with the player's place on the tryout board, or 180 days after sign-up.
• Self-review: If the coach sends a player a self-review link, what the player writes there about their own game.
• A Touch Drive: If the coach runs a fundraiser on the phone’s measured touches and a parent joins their child to it, the team’s total counts that child’s heard touches on the drive’s drills. The coach sees the total and how many joined, never one child’s number. A sponsor who pledges on a link the coach or a parent shared gives us their name, email, pledge and an optional note, which the coach (and, on a family’s link, that family) can see. We email a sponsor only once the coach or the parent confirms them: the thank-you, the total and what they owe, and a thank-you when the coach marks them paid. No money moves through Spatrian; sponsors pay the team directly.

Only the coach who keeps the team and the coaching staff of their club on Spatrian can see it. Deleting a team deletes everything kept for it. Taking a player off a squad deletes that player's injuries, goals, self-review and attendance. Section 6 says what the Team Assistant sends to Google.

2.7 Players a Personal Trainer Keeps

A personal trainer who coaches players one to one can keep each player's training record on Spatrian. The player and their family do not need an account, and the record is the trainer's, kept for them:

• The player: Their name, age, position, level and stronger foot, the goals the trainer sets, the fitness tests the trainer records, and the trainer's private notes.
• Sessions: The drills, reps and scores, the time and place, any video the trainer attaches, and what the phone counted on a drill it listened to. As on a family's phone, no sound is kept: only the times of the touches.
• The family: A parent or guardian's name, email and phone, if the trainer adds them, so the trainer can send reports and session reminders. What the family sends back: a reply to a report, and the touches their phone counts on a homework link the trainer sent. No sound is kept there either.
• Agreement: The trainer can ask the parent or guardian by email to agree to the record. We keep their answer, the name they typed and the date. A trainer can also record that they were told yes in person; the record says which.
• Health and emergency details: If the trainer asks, an emergency contact, anything the family tells the trainer about the player's health, and any current injury, written by the family or the trainer. If the trainer has a waiver, the family can sign it by typing their name; we keep the trainer's exact words, the name and the date. These are for the trainer only and are never put in a report.
• Packages and payments: The packages of sessions the trainer sells and whether each was paid. A family who pays by card pays on Stripe's own page into the trainer's own Stripe account. We never see the card number and never hold the money.

Only that trainer can see the record, and, if the trainer works in a business on Spatrian, the trainer who runs it. A family sees only the reports the trainer sends them by private link, which show the player as a first name and an initial and never the trainer's private notes, the player's age, a video (at most a still frame the trainer marks up and chooses to add), or anything about another player. A parent who connects their own Spatrian account to a trainer, with the trainer's code, lets the trainer see their child's first name and initial, age group, the figures their phone measured and the targets they are working on, never their hours, grades, notes or videos. Only the parent connects, and the parent can disconnect at any time. To get a copy of the record or have it deleted, ask the trainer; the trainer can download it or delete it at once, and deleting the trainer's account deletes every record they keep. If a trainer cannot be reached, write to us (Section 11). A trainer may publish a public page about themselves. We read it before it is listed on Find a Trainer, and it holds only what the trainer writes there, never anything about a player.

3. Children's Privacy & COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA), including the Rule amendments effective April 22, 2026. We do not collect personal information directly from a child under 13: a child under 13 has no account or sign-in of their own here, and everything about them is entered by their parent.

3.1 Parental Consent

• All accounts are created and managed by the parent/guardian, until a player turns 18. From the year they turn 18 the player, or their parent, may make the player's sign-in the player's own account: an email address and password of their own, with their record, clips and profile. From then the player holds that record, not the parent: the parent no longer sees it on their account, and we email them when it moves. Nothing moves until the player opens the link we email them and agrees to our terms in their own name
• A player aged 18 or 19 at school or in a club may also create their own account directly, with their own email address and password and no parent. They give us the month and year they were born, which we keep on their record to check that they are 18 or 19, and they agree to our terms in their own name
• A child under 13 is kept on the record only. They have no sign-in of their own, their parent logs their sessions, we accept no video of them, and nothing about them is sent to an AI service. Children 13 and over may have a sign-in their parent sets up
• A teen under 18 may ask us to email a parent an invitation. For that we keep the parent's address, the teen's first name, their age group and whether they are at school or in a club, until the parent signs up or the link expires after 14 days, and then delete them. The teen gets no account; the parent creates it
• A player aged 13 to 17 at school or in a club may instead start a sign-in of their own and name a parent, who finishes the account by opening the link we email them and agreeing to our terms as its holder. Until then the sign-in is held: nothing is shared, nothing about them is sent to an AI service and nothing can be bought. While it is held we keep the player's email address, first name, month and year of birth, the parent's address and the training they log; if no parent finishes it within 14 days we delete all of it
• Photos on logged sessions need their own consent, given by a parent the first time one is added and withdrawn at any time under Your sign-in; withdrawing it deletes every photo the family holds

3.2 Parental Rights

• Parents may review all data collected about their child at any time
• Parents may request complete deletion of their child's data
• Once a player of 18 has made their account their own, these rights are the player's: they download their record and delete their account from their own sign-in
• After that handover the parent keeps read-only access to the transcript, portfolio and hours for the school years that ended before it, and nothing after, and keeps their own notes about the player and any IEP/504 plan unless they chose to send them with the player

3.3 Limitations

• We do not require children to provide personal information beyond what is necessary for the educational program
• We do not share children's personal information with third parties for marketing purposes
• We do not serve behavioral advertising to children
• We do not enable children to make personal information publicly available
• A child's conversation with Coach Spatrian is stored under that child's own record, and is deleted by the same request that deletes the rest of it
• Coach Spatrian proposes activity hours; a parent presses the button that logs them

3.4 Records a Personal Trainer Keeps

A personal trainer who uses Spatrian keeps a record of each player they coach one to one. The player and their family do not have a Spatrian account for it; the record belongs to the trainer’s account, and no other trainer, coach or family can see it.

• What it holds: the player’s name, and their age, position and stronger foot if the trainer adds them; the trainer’s sessions with them, drill scores, goals, fitness test results and private notes; videos the trainer uploads and frames marked from them; the homework the trainer sets and what the family’s phone counted for it; a family email address the trainer saves for sending reports; and packages of sessions paid for
• What a family sees: only what the trainer sends them by a private link: a session report, a monthly report, a homework page or a pay page. Each shows the player as first name and initial, never the trainer’s private notes, and can be withdrawn by the trainer at any time
• Homework counted by the phone: the family’s phone notes when each touch of the ball happened, and only those times are sent. No sound, picture or video is recorded or sent
• Players under 13: the trainer must record that a parent or legal guardian agreed to the record before sending homework or putting a video frame on a report; the grown-up who opens a homework link confirms they are the parent or guardian before anything is saved; and only a parent or guardian may ask for a session on a trainer’s page. Nothing about a player under 13 is sent to an AI service
• AI, for players 13 and over: if the trainer allows it, a player’s name, goals and scores are sent to Google’s Gemini to suggest a session or draft a note, which the trainer reads and edits
• Payments: a family pays the trainer through the trainer’s own Stripe account. Card details go to Stripe and never to Spatrian
• Asking for a session: the name, email and message on a trainer’s booking form go to that trainer only. Spatrian does not write to you, and deletes the request after 90 days
• Signing up for a camp or clinic: the name, email and message on a trainer’s camp form go to that trainer only. Spatrian does not write to you, and deletes the sign-up 90 days after the camp ends
• Your rights: the trainer can correct or delete a player’s record, and it is deleted with everything in it when the trainer deletes the player or closes their account. A parent who wants a record seen, corrected or deleted can ask the trainer, or contact us and we will act on it

4. How We Use Your Information

• To provide and maintain the homeschool PE curriculum and tracking services
• To generate progress reports, transcripts, and compliance documentation
• To perform AI-powered video analysis and coaching feedback (see Section 6)
• To process payments and manage subscriptions
• To send essential service communications, and, only where you asked for them when you signed up, a small number of product emails you can stop in one click
• To improve and optimize the platform
• To comply with legal obligations

5. Data Storage and Security

Your data is stored on secure cloud infrastructure hosted in the United States (Amazon Web Services). We implement appropriate technical and organizational measures to protect personal information, including:

• Encrypted data transmission (TLS/HTTPS) for all connections
• Secure authentication mechanisms with hashed credentials
• Regular data retention reviews with automatic purging of expired records
• Role-based access controls limiting data visibility
• Immutable audit logs for all consent and data deletion operations

5.1 Where Spatrian Is Offered

Spatrian is offered to people who live in the United States and its territories, and in Canada outside the province of Quebec. Other countries may open one at a time, and this section will name each one when it does. We can’t accommodate families in Quebec, the European Union, the European Economic Area, the United Kingdom or Switzerland at this time.

Our sign-up and waiting-list forms ask which country you live in, and in Canada which province. If you choose one of the places above that we can’t accommodate, the form stops and nothing you typed is sent to us. If the details reach us anyway, our server refuses them and stores nothing. If we learn that we hold personal information about someone who lives there, we delete it. If you think we hold yours, write to privacy@spatrian.com and we will delete it.

Someone in another country that is not open yet may join the waiting list. We keep their email address, name and country so we can tell them when Spatrian opens there, and nothing more.

If you live in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to the personal information we hold about you. It is stored and processed in the United States (Section 5), by us and by the service providers named in Section 6, and may be accessible to courts and authorities there under United States law. You can ask us for access to it or to correct it, and withdraw your consent, as Section 8 describes. If you are not satisfied with how we handle a concern, you may complain to the Office of the Privacy Commissioner of Canada.

6. Data Sharing & Third-Party Services

We do not sell, trade, or rent personal information to third parties. Information may be shared only in the following circumstances:

• AI Features (Google Gemini): Nothing from your family is sent to Gemini until a parent allows the AI features, once for the household, when first asked or under Your sign-in, where it can be withdrawn at any time; a child cannot allow it. Until then, and after it is withdrawn, the features that need Gemini wait, and the drill note and the spoken greeting are made without it. Google's Gemini API processes these things for us: video you submit for analysis or the form check, together with its metadata; the messages exchanged with Coach Spatrian in the app, which for a student account are a child's messages; the note Coach Spatrian writes to a parent after a drill the phone listened to, for which it is given the child's first name, the drill and that session's counts and timings; a photo a parent chooses to have read for a suggested record entry, which we first shrink and re-encode so no location or camera details leave our server, send once inside the request, and do not keep (the parent attaches it to the record afterwards only if they choose to); a capstone project and the season's results, for suggested scores and the season write-up; the progress narrative on the portfolio, for which it is given the age group, lessons completed, hours, attendance, badges, recent rubric scores and up to three of the parent's own notes; the structure and numbers of a drill a child designed, without their name, for a tip; and the messages typed to the assistant on our signed-out public pages. For a child under 13 kept on the record only, nothing is sent: the drill note and the progress narrative are written from the numbers alone, no drill tip is asked for, and no photo is sent for a suggestion unless the parent has consented to video and AI. Google acts as a data processor on our behalf. For video analysis, Google does not use the content to train their general AI models. See Google's AI Terms of Service.
• The Team Assistant, for a team's coaches (Google Gemini): When a coach asks the Team Assistant about their team, the question is sent to Google's Gemini with the team's record written out in plain lines, so it can answer from it: the players' names as the coach typed them, their positions, minutes, attendance and load, any injury with its expected return date, the goals set for them, results, coming matches, scouting notes and planned sessions. Birth years and tryout ratings are not sent. The question and the answer are kept for the team's staff, the latest 50 a team. A set-piece briefing is written by Gemini from the play the coach drew, and a short clip a coach adds to a drill session is sent to Gemini to be read and then deleted.
• A personal trainer's AI features (Google Gemini): Nothing a trainer keeps is sent to Gemini until the trainer allows the AI features. Then, when the trainer asks: a suggested next session is written from the player's name, age, position, level and stronger foot, their goals, recent sessions and scores; a draft note to the family is written from the player's name, the session's drills, scores, what the phone counted and the trainer's own notes on the session; and a reading of a session's video sends that video, with the trainer's question and how it was filmed, for Gemini to describe. The video stays on our server and the reading is kept for the trainer only.
• Coaches' and trainers' AI tools (Google Gemini): A coach's AI match report, live analysis, questions about a match and drill suggestions send the match video and the match's event record to Gemini; the Personal Trainer's recommendations and session summaries send a player's name, age, goals, session scores and the trainer's notes. Each is sent only after that coach or trainer has allowed the AI features for their own sign-in, under Your account, where it can be withdrawn at any time.
• The Audio Coach's Voice (Google Gemini text-to-speech): The coach's spoken lines are made by Google's text-to-speech service from our written script. Most lines are the same for everyone. A line that greets your child by name, or mentions their best score on that drill, is sent to the service with that first name and that number, so it can be spoken, and only once the family has allowed the AI features; a child under 13 is never greeted by name; the recording is kept on our server and played again next time. Nothing else from your child's record is sent.
• Suggesting an entry from a photo (Google Gemini): Only when a parent presses Suggest from a photo on the activity ledger, and only once the family has allowed session photos. The photo is first re-encoded as a small JPEG with its location and camera details removed, then sent to Google with the list of activities and subjects, and Google returns a suggested activity, subject and short title. The photo travels in the request itself, so Google's file store keeps no copy, and we do not keep the copy we sent. It never suggests how long anything took, and nothing is recorded until the parent checks the suggestion and presses Record.
• Reference Videos (YouTube): Many of the curriculum's reference clips are YouTube videos. They play in YouTube's privacy-enhanced player (youtube-nocookie.com), and their preview pictures load from YouTube's image servers. When a clip is played, YouTube's own privacy policy applies to that viewing. We send YouTube nothing about you or your child.
• Weather (Open-Meteo): The weather suggestion asks your browser for its position, rounds it to about a kilometer, and sends it straight from your browser to Open-Meteo for the forecast and the air quality (US AQI). It never reaches our server and is not stored. See Open-Meteo's terms.
• The rain and lightning map (NOAA and USGS): In Referee HQ, the map of rain and recent lightning opens only when it is pressed. It asks your browser for its position, rounds it to about a kilometer, and centers on it; your browser then fetches the map pictures for that area itself, straight from the U.S. government: the radar and lightning from NOAA, the map underneath from the U.S. Geological Survey. Those requests carry the area of the map, nothing about you or your child, and your position never reaches our server and is not stored.
• Apple Health and Health Connect (the phone app only): A player using their own sign-in in our phone app can choose to save each finished training session to their phone's Health app, as a soccer workout with its start and end time. This happens on the phone itself; it sends nothing to us that the session log did not already send, and we never read anything from the Health app. It can be switched off on My Settings, and anything already saved is removed in the Health app.
• Team calendar links: If a coach or a family subscribes to a team's calendar by link, our server reads that link every few hours from the calendar service it belongs to (Google Calendar, Apple iCloud, Microsoft Outlook, TeamSnap, GameChanger or GotSport), to keep the schedule current. The request carries nothing about you or your child; the link itself is stored encrypted, shown back only in part, and removed when you remove it.
• Shopping Assistant (Anthropic): The pre-purchase assistant on our marketing pages runs on Anthropic's Claude API, which receives the messages typed to it. It is available before sign-in only, answers questions about the product, and is never given access to a family's records. See Anthropic's Privacy Policy.
• Payment Processing (Stripe): Stripe receives payment information necessary to process transactions. See Stripe's Privacy Policy.
• Email Delivery (Brevo): Account email — verification, password resets, reports you ask us to send — is delivered through Brevo, which receives the recipient address and the message. See Brevo's Privacy Policy.
• Your co-op's director: If your family joins a co-op, its director and co-director, who are parents in other member families, see what Section 2.5 says they see: the roster, your child's attendance at the co-op's sessions, the safety details you chose to write, check-in and pick-up times, whether your dues are recorded as paid, and any clip of your child aged 13 or over that you chose to share with them, while you share it. They never see your family's lessons, hours, scores, photos or anything else in your record.
• A coach you send a profile link to: A parent may make a link to their teen's verified player profile for one named coach or tryout. It shows the teen's first name and last initial, age group, position, graduation year and the figures the phone measured or a parent timed, never hours, grades or the family's state. Only if the parent chooses it for that link, it also plays up to six Skill Journal clips the parent kept, with the captions the parent wrote. A link lasts at most 90 days and can be stopped at any time, and a clip stops playing the moment the link stops, the clip is taken off the film, or it is no longer kept. Clips of a child under 13 are never shared. If a parent asks a coach they connected to vouch for their teen, and the coach signs, every link also shows the coach's name, their team, the fixed sentence they confirmed, any note they added and the date. A coach who signs agrees to that, and the coach or the parent can take it down at any time. A parent may also ask a coach who has no Spatrian account, by the coach's name, team and email address: we email that coach one link, keep the name, team and address the parent gave, and what the coach signs through it shows as confirmed by email, because we can check only that the link sent to that address was opened. From 16, a player may make and stop these links, save the résumé and ask a coach themselves, unless a parent switches that off, and the parent is emailed each time.
• People who thank a young referee: A player who referees, or their parent, may make a link for one game they refereed and share it with the people who were there. The link shows the game's date, age group and role, never the referee's name. Someone who opens it picks who they are (a parent, a coach, a player or someone watching), taps what the referee did well and may write a short note; we keep only that, never their name, email or address. A parent reads each note before the referee sees it (from 16, the player may, if a parent allows it), and may keep any note out. The family may print a few on the referee résumé, marked as left by link and checked by nobody.
• Legal Requirements: When required by law, subpoena, or court order
• Safety: To protect the rights, property, or safety of our users

We do not use third-party analytics services, advertising networks, or social media tracking pixels.

7. Cookies & Local Storage

We use browser local storage to maintain your login session and application preferences. Two kinds of first-party cookie are set as well: spatrian_media, an HttpOnly copy of your session limited to /uploads, which lets your own videos play, since a video player cannot send the session any other way; and, only for someone given a preview link, site_access, site_visitor and site_scopes, which remember that link and the pages it opens for 90 days. We count how often our public pages are opened without any cookie and without storing your IP address or browser details. We do not use third-party tracking cookies or advertising cookies. No information is shared with advertising networks through cookies or similar technologies.

8. Your Rights

You have the right to:

• Access the personal information we hold about you and your child
• Correct inaccurate information
• Delete your data. A parent deletes a child's record themselves, from that child's settings, and closes the whole account themselves under Your sign-in → Delete my account, in the app or on the website. That deletes every child's record and the household with it, and cancels a paid plan at the same moment; you can also ask us to do it (contact us as in Section 11)
• Export your data in a portable format
• Withdraw consent at any time, including for specific data categories
• Opt out of AI-powered video analysis while continuing to use other platform features

8.1 California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us using the information in Section 11.

9. Data Retention

We retain personal information only as long as necessary to provide our services or as required by law. Specific retention periods by data category:

• Your Family's Record and Account: The hours, lessons, photos and documents you keep with us, and the account they belong to, are kept for as long as the account exists, including after a paid plan is canceled, until you delete them or ask us to close the account
• Performance Analytics: Up to 3 years (to support long-term progression tracking)
• Biometric & Spatial Data: Up to 1 year
• Video Recordings: Up to 6 months
• Session Photos: Until you remove them, remove the session, delete your child's data, or withdraw photo consent. They are not deleted on a timer, because some states ask families to keep a portfolio for two years
• Health & Fitness Data: Up to 1 year
• Coach Spatrian Conversations: The most recent 40 turns per child, so the coach can remember last week's session; older turns fall off as new ones arrive
• A Coach's Team Records: Kept while the team exists, until the coach deletes the team, takes the player off the squad, or asks us to close the account
• A Touch Drive's Sponsors: Deleted, with the drive, 90 days after the drive ends, or sooner if the coach removes it. A child's part in a drive, and the pledges made on their family's link, are deleted with the child's data
• A Personal Trainer's Player Records: Kept while the trainer keeps the player, until the trainer deletes the player or closes their account. Requests to book a trainer are deleted after 90 days
• Co-op Safety Details: Deleted the moment your child stops taking part in that co-op or your family leaves it, and with your child's data on request. Check-in and pick-up times, dues records and the director's term notes stay with the co-op's record of the term; a child's lines are deleted with the child's data

Expired data is automatically purged or anonymized. You may request earlier deletion at any time. Upon account closure, all personally identifiable data is deleted within 30 days, with anonymized aggregate data retained only where necessary for platform improvement.

During beta: these are the periods we retain data for, and they are ceilings rather than guarantees that data will still be there. A release may reset or lose records, as the Beta Terms of Service say in full — so export anything you need to keep. Deletion on request works as described above either way.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For material changes affecting children's data, we will re-obtain parental consent where required by COPPA.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights regarding personal data, or need to submit a COPPA-related request, please contact us:

• Through the Contact Us page on our platform
• By email at: privacy@spatrian.com

We will respond to verified requests within 30 days.