← Back

Privacy Policy

Last updated: October 27, 2026

Overview

AthleteCreed® ("we," "our," or "us") is a strength and conditioning platform built for scholastic athletics. We take the privacy of our users — especially our student-athlete users who may be under 18 — seriously.

Information We Collect

Account Information

We store your full name, email address, school, and role (coach, athlete, parent, or administrator). Accounts are created in one of three ways: by school staff, by an athlete who registers on their own with the registration code the school shares, or by a parent who registers with a parent link code for their child. A coach or administrator at the school must approve each self-registered athlete before the athlete can sign in; until then the account cannot be used and does not appear on rosters or leaderboards. Before October 19, 2026 that approval was optional, so some older self-registered accounts were activated without review; school staff can see which ones and confirm or deactivate them. For every self-registered account we record the date and time the person accepted the Terms and Privacy Policy, which version of them, and that the account was self-registered; accounts that staff create are marked as created by staff. Parents link to a student-athlete with a parent link code that the athlete or the school creates; each code works once and expires after 7 days, and it only links to an active, approved athlete. The athlete and their coach are notified when a parent links, and the athlete or school staff can remove a linked parent at any time. An athlete who registers with the school code gives a date of birth (staff may add it for athletes they create). Optional profile details include gender, grade, and a profile photo. When a profile photo is uploaded we keep only the picture itself: location (GPS) and every other piece of hidden information in the file is removed. Profile photos are shown only to people signed in at the athlete's school, the athlete's linked parents, district and system administrators, and the school's own lift-station kiosk; they are not available to anyone else, even with the link.

Training Data

We collect workout logs, exercise performance data, personal records, body weight entries, readiness check-ins (sleep, soreness, energy, and stress ratings), performance test results, and attendance records entered by coaches and athletes during normal use of the platform. Coaches and administrators can also record injury and concussion information, coach notes, practice evaluations, and messages.

Form Check Videos

Athletes may upload photos and videos of exercise form for coach review, recorded with the device camera and microphone or chosen from the photo library. These are stored on our servers and can be viewed by the athlete, by coaches and administrators (school and district) at the athlete's school, and by AthleteCreed system administrators for platform support. A form check video is deleted automatically 365 days after it is uploaded, or sooner if the school sets a shorter period (at least 30 days) or the athlete's account or data is deleted. Videos submitted for a performance test follow a shorter schedule: they are deleted 48 hours after the result is approved, 24 hours after it is rejected, or 30 days after upload if nobody reviews them. Each time someone other than the athlete opens a video, it is recorded in the school's access log.

Device Information and Push Notifications

If you turn on notifications, we store a push token for your browser or device so we can deliver coach messages, announcements, and training updates. On the mobile app this token is issued by Firebase Cloud Messaging (Google), which delivers through Apple's push service on iPhones. The title and text of each push notification pass through those services, and through your browser vendor's push service for web notifications (web push payloads are encrypted). We do not collect advertising identifiers and do not use any advertising or cross-app tracking SDK.

Location (staff only)

For coaches and administrators, the app can use the device's location while the app is open to show the wet-bulb globe temperature (heat) conditions and practice rules for where they are standing. Location is requested only after you grant permission and is sent to weather data providers (Open-Meteo and the U.S. National Weather Service) as coordinates only. The live heat lookup itself is not saved. If a coach writes a heat response record, however, that record stores the coordinates of the position the coach attached, an optional location note, the coach's name, and the time. Coordinates can also appear in our server logs when a weather lookup fails. Separately, we use the school's address, city, or ZIP code to find the school's coordinates, and those coordinates are stored with the school and used for automatic heat alerts. We never request location from athlete or parent accounts.

Error and Usage Diagnostics

Server errors are reported to Sentry so we can fix problems. Sentry is set not to collect personal information by default; reports contain technical details and can include an internal account ID and role. Our public marketing pages (not the signed-in app) use Google Analytics. Cloudflare sits in front of our site and may collect basic traffic analytics. Typefaces are served from our own site, not from Google Fonts. Exercise demonstration videos play from YouTube (youtube-nocookie.com), so your browser contacts YouTube when you open one.

How We Use Information

Who Can See Your Data

Coaches and administrators at your school can view athlete training data, including injury and concussion records. District administrators can also see, for every school in their district, summary figures and lists that name athletes together with their recent personal records and their active injuries and concussions (body region, severity, onset date and return-to-play stage), and can download any of those athletes' compliance packets (attendance, injury and concussion records, readiness check-ins and non-private coach notes). When an athlete transfers to another school, their records stay with the school where they were made, except injuries that are still active: those move to the new school with their history (who logged, advanced, unlocked or cleared them), so that school's staff can manage them. Parents linked to a student-athlete can view that athlete's progress. Leaderboards are school-wide: athletes and staff at your school can see athletes' names and results on the school leaderboards (parent accounts cannot). An athlete, a linked parent, or school staff can hide the athlete from the leaderboards and the weight-room TV at any time; staff reports still include them. Two shared screens show athletes to anyone in the room: the TV display shows first names and last initials, and the profile photo (if the athlete added one) of each athlete in the middle of a workout; the lift-station kiosk shows the first name, last initial and profile photo of each athlete on the team it is showing. If a school allows public recruiting profiles and an athlete publishes one that school staff approve, anyone with its link can see the athlete's full name and school, the details they enter on the profile (such as graduation year, position, height, weight, GPA, highlight video and bio), their best personal records, and their performance test results. System administrators can access all data for platform support.

School staff can download reports and exports of their school's records. Student email addresses appear only in administrators' exports. Every PDF, export, athlete report card, athlete coach-notes page and injury list opened, every video opened by someone other than the athlete, and every change to roles, account status, passwords issued by staff, parent links, leaderboard visibility and the school's privacy settings is recorded in an access log that cannot be edited or deleted. School and district administrators can review it, filtered by athlete, under Admin → Access Log. The log holds account numbers, not names.

We do not sell, rent, or share personal data with third parties for marketing purposes.

Service Providers

We use the following service providers to run the platform.

Children's Privacy (COPPA)

AthleteCreed is used by middle school and high school athletes, some of whom may be under 13. Student accounts are created in one of two ways. School coaches or administrators can create them. Students can also register themselves with the registration code their school shares. For self-registration, the person registering confirms with a checkbox that the school has authorized the account, and we record that confirmation with the date and the version of these terms. Self-registration also asks for the student's date of birth. If the student is under 13, we also ask for a parent or guardian's name and email address, and we email that parent a notice describing what AthleteCreed collects, how it is used and who can see it, with a link to give or refuse consent. Until the parent consents, or a coach or administrator records that the school authorizes the account, the account cannot be approved; we record which of the two happened, when, and the name the parent signed with. If the parent refuses, or nobody answers within 14 days, we delete the registration, including the parent's email address. We do not collect optional details such as gender from a student under 13 before consent. A parent can review or delete their child's information, stop further collection, or withdraw consent at any time by contacting the school or [email protected]. A date of birth is self-reported, and AthleteCreed does not verify it. Every self-registered student account must be approved by a coach or administrator at the school before the student can sign in, and until then the student does not appear on rosters or leaderboards; staff can deactivate any self-registered account at any time. Parents cannot register with the school's code: a parent account is created only with a single-use link code for their child. Schools decide which students use the platform, and where a school authorizes an under-13's account instead of the parent, the school is responsible for any parental consent its policies and the law require. We collect from students only what the training program needs, never request their location, and do not show them advertising.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and role-based access controls. Training data is stored on secured servers with restricted access.

Data Retention

Most account and training data is kept until it is deleted: by you, by your school, or when the school leaves AthleteCreed. The following records are deleted automatically once they reach the age shown:

You can delete your own account at any time from Profile → Delete my account (web and mobile app), and a school or district administrator can delete an athlete's data on request from the athlete's page. Either way, your account and everything about you is deleted immediately: sign-in details, profile, workout and training history, attendance, evaluations, coach notes, injury and concussion records, test results, videos, AI summaries, notifications, parent links, team memberships, and your conversations. We keep a record that the deletion happened (without your name or email), the access log entries that mention your account number, records other people wrote about someone else even if they mention you (where a notification to someone else named you, the name is replaced), and backups until they expire. A coach or administrator who recorded information about athletes keeps an anonymous "Deleted User" account so those records stay intact. See Account deletion for the full list.

When a school leaves. A school or district administrator can download a full export of the school's records whenever they can sign in, including after the subscription ends (Admin → Full Data Export, or the Billing page): one file per kind of record, plus the school's videos and photos. Once the school's account is closed, we send the export on request until the data is deleted. When a school asks for all of its data to be deleted, or leaves AthleteCreed and asks us to, our team first gives the school its export and then deletes every account at the school and every record made there, including the videos, photos and logo. Records another school holds are that school's, so they stay: an athlete who transferred in keeps their history at the school they came from, and their account stays with that school under their name only (deactivated, with their sign-in, contact details, profile and everything recorded at the leaving school deleted); a parent who is linked to a child at another school keeps their account, which moves to that school. We keep only the access log, the record of each deletion, and the record of passwords issued by staff (account numbers, no names), and backups until they expire.

Your Rights

You may request access to or correction of your personal data by contacting your school administrator or emailing us directly. You can delete your account yourself from your Profile; if you can no longer sign in, ask your school administrator to delete it, or email us and we will handle the request.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform.

Contact

For privacy questions or data requests, contact: [email protected]

Install AthleteCreed®Add to home screen for the best experience
Offline