Plain-language beta policy
STRIDE OS Privacy Policy
This policy explains what STRIDE OS collects, why it collects it, and what choices coaches, teams, schools, parents, and athletes have.
Not legal advice. This is an operational beta privacy policy for launch comfort. It should be reviewed by qualified counsel before broad school or district sales.
1. Short version
- STRIDE OS is built for coaches and authorized staff, not direct child use.
- We use athlete data to provide the product: rosters, paces, forecasts, lineup tools, imports, exports, and support.
- We do not sell athlete data.
- We do not run ads or use athlete data for targeted advertising.
- We do not train outside AI models on identifiable athlete data without explicit permission.
- Coaches can export data, delete their account, and request help by email.
2. Information we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account information | Email address, display name, team name, login metadata | Authentication, support, account management, and security. |
| Athlete roster information | Name or identifier, age, grade, sex, event focus, roster status | Roster management and coach workspace features. |
| Performance and training data | Race results, times, race dates, workouts, notes, check-ins, imports | Pace calculations, forecasts, event fit, training groups, lineup tools, exports, and product improvement. |
| Billing information | Stripe customer ID, plan, subscription status, checkout history | Paid plans, trials, invoices, refunds, subscription portal, and fraud prevention. Stripe handles payment card data. |
| Technical information | IP address, browser/device metadata, logs, error diagnostics | Security, debugging, abuse prevention, and keeping the service working. |
| Optional integrations | Connection identifiers and activity data if you connect an integration | Only to provide the connected feature you choose to use. |
3. How we use information
We use information to provide STRIDE OS, save and sync rosters, calculate paces and forecasts, support paid subscriptions, secure the service, troubleshoot bugs, improve accuracy, respond to requests, and meet legal obligations.
4. Student data, schools, and FERPA posture
STRIDE OS may store student-athlete information entered by a coach or authorized staff member. If a school or district uses STRIDE OS, that school or district remains responsible for its own student-data privacy process and compliance decisions.
Our posture: STRIDE OS is built to support school review by limiting access by workspace, avoiding ads and data sales, supporting export/deletion, and using athlete data only to provide and improve the service. We do not claim blanket "FERPA compliant" status without the school/district review and any required written agreement.
For school or district purchases, a separate data processing agreement, student data privacy agreement, or district vendor terms may be needed.
5. Children under 13
STRIDE OS is intended for coaches and authorized adults. We do not knowingly collect information directly from children under 13. Before entering personal information for an athlete under 13, the coach must have parent/guardian permission or school/district authorization where legally permitted.
Parents or guardians may ask to review or delete information tied to their child by contacting us. We may need to verify the request with the coach, team, school, or account owner before acting on it.
6. Research, AI, and de-identified data
By default, STRIDE OS does not train outside AI models on identifiable athlete data. We may use de-identified or aggregate data to understand whether formulas, forecasts, or product workflows are working. We will seek explicit permission before using identifiable athlete data for external research, model training, publication, or data sharing beyond service operations.
7. How we share information
We share information only as needed to run STRIDE OS, comply with law, protect rights and security, or honor a written agreement.
- Service providers: hosting, database/authentication, billing, email, support, security, logging, and infrastructure providers.
- Within your workspace: authorized coaches or staff on the same team/program may see roster data according to product permissions.
- Legal requests: we may disclose information if legally required, and will try to notify the account owner first unless prohibited.
- Business transfer: if STRIDE OS is merged, acquired, or reorganized, data may transfer subject to this policy or a replacement notice.
8. Subprocessors
Current core subprocessors include Supabase for database/authentication, Vercel for hosting, and Stripe for payments. A working subprocessor list is maintained at docs/legal/SUBPROCESSORS.md.
Marketing measurement: the public marketing pages may use a Meta (Facebook) advertising pixel to measure how people find STRIDE OS. It runs for signed-out visitors only — it is disabled whenever a coach session exists, it never runs inside the coach workspace, and it never receives roster, athlete, or performance data. This does not change the commitments above: no ads inside the product, and no athlete data used for advertising.
9. Security
STRIDE OS uses HTTPS, Supabase authentication, row-level security, role-based access patterns, and service-side controls for sensitive operations. No security program can guarantee perfect safety, but the product is built to reduce unnecessary access and support account-level deletion/export.
10. Retention, export, and deletion
Coaches can export account data from the app's Data & Privacy screen. Coaches can also request account deletion in the app. Deletion removes the coach profile and associated athlete data from active use; some records may remain briefly in backups, logs, or legally required records before they age out.
Billing records may be retained through Stripe and accounting systems as required for tax, fraud, legal, or payment-dispute reasons.
11. Your choices
- Use initials or IDs instead of full athlete names where your program prefers that.
- Export your STRIDE OS data from the app.
- Delete your account and associated roster data from the app.
- Ask us to help with access, correction, deletion, parent requests, or school vendor review.
12. Changes
We may update this policy as the product changes. If a change materially affects saved athlete data or paid users, we will try to provide notice and may ask users to accept updated terms.
13. Contact
Privacy questions, school review requests, parent requests, and deletion/export help can be sent to thelabstrength@gmail.com.