1. Who we are
Athlete-X Inc. ("Athlete-X", "we", "us") operates the Athlete-X platform: the athlete-x.io website, the web application at app.athlete-x.io, and the Athlete-X mobile app for iOS and Android (together, the "Platform"). This policy explains what personal information we collect, why we collect it, who can see it, and the choices you have. It applies to everyone who uses the Platform: athletes, parents and guardians, coaches, scouts, organization staff, and visitors.
The person responsible for the protection of personal information at Athlete-X is its President. You can reach them at privacy@athlete-x.io.
2. Information you provide
Account
First and last name, email address, and a password. Passwords are handled by our authentication provider (Clerk) and are never stored on our servers. You can sign in with Google or Apple instead of a password. If you turn on SMS two-factor authentication, your phone number is also held by Clerk. Athletes provide their date of birth. You can add a profile photo, and you choose a language and theme.
Athlete profile and portfolio
Athletes choose what to add. The portfolio can include:
- Sports: sport, positions, competitive category, team, league, jersey number, and links to external profiles.
- Physical details: gender, height, weight, and wingspan.
- Location: hometown and current city, at the city level, picked from a list.
- Academics: school, school year, grades or SAT scores, NCAA ID, fields of interest, and uploaded documents such as transcripts or report cards.
- Story: introduction, goals, motto, past performances, awards, and work experience.
- Highlights: links to YouTube videos. We never host the videos themselves.
- Contact persons: the name, email, and phone number of the people a scout should reach (the athlete, a parent, an agent, or a coach). If you add someone else's details, make sure they agree to appear on your portfolio.
Weekly check-ins
Athletes on a team with an active plan complete a short weekly check-in: a series of 0 to 10 self-ratings covering readiness, sleep, recovery, energy, training load, nutrition and hydration, mood, life outside sport, motivation, connection to the team, school (when the team enables it), and progress toward goals. The check-in also lets the athlete report an injury: body part, type of injury, pain level, and how it happened. This is health-related information, and section 5 describes exactly who can see it.
Identity test
Athletes can take the Identity test. We store the answers, the resulting profile scores, an AI-written summary intended for the athlete's coaches, and an audio version of that summary.
The Lab
Coaches on eligible plans can talk to the Lab, our AI assistant. We store the coach's conversations and the game plans the Lab produces.
Billing
Payments are processed by Stripe on Stripe's own pages. Card numbers never reach our servers. We store your subscription status, plan, and Stripe references.
Support and feedback
Messages you send through the support form or by email, and the reason you give if you cancel a subscription.
Parent or guardian email
For athletes under 16, we collect a parent or guardian's email address during onboarding. Section 6 explains how consent works.
3. Information collected automatically
Very little. If you allow notifications in the mobile app, we store a push token, your device platform (iOS or Android), and your device's timezone so reminders arrive at a sensible local hour. We do not run analytics or advertising trackers anywhere on the Platform, and we do not record your IP address or browsing history in our database. The providers that host and deliver the Platform (section 8) process technical data such as IP addresses as part of serving requests, under their own retention rules.
4. How we use your information
- Run the Platform: accounts, profiles, teams, check-ins, notifications, billing, and support.
- Show the right information to the right people, based on roles and your settings (section 5).
- Power AI features: generate Identity summaries and Lab answers, using profile, Identity, and check-in data as context (section 8).
- Send transactional email: verification codes, invitations, consent requests, reminders, and billing notices. Push reminders are opt-in.
- Keep the Platform safe, prevent abuse, and comply with the law.
We do not sell personal information, and the Platform shows no advertising. We do not use your information to make automated decisions that produce legal or similarly significant effects about you.
5. Who can see what
Athlete-X exists to connect athletes with coaches, scouts, and organizations, so controlled visibility is the point of the product. Here is the exact map.
Your coaches and organization
Coaches of your team see your profile, your check-in history including any injuries you report, and your Identity results including the coach summary. Check-ins and injuries exist for your coaches only: they never appear on public pages and are never shown to scouts.
Scouts
Scouts registered on the Platform, within the sport and gender scope their organization assigns them, can find athletes on the scouting grid if the athlete has an active Athlete plan or an organization-sponsored spot. The grid shows name, date of birth, gender, height and weight, sport and positions, team, school type and year, location, and Identity mask and grit scores. If your portfolio is set to private, scouts see a limited preview without your academic documents and must send you an access request, which you approve or deny. If your portfolio is public, scouts can view all of it.
Public share link
Athletes can generate a private share link to their full portfolio. Anyone who has the link, on or off the Platform, sees the athlete's name, date of birth, photo, sports, physical details, location, portfolio including academic documents, and Identity scores. The link never shows the athlete's email address, check-ins, or injuries. You can regenerate the link at any time, which cuts off every previously shared copy.
The sensitive Identity subscales (self-focus, performance anxiety, and coping) are never shown publicly or to scouts. They are visible to your coaches as part of your Identity results.
Uploaded files
Files you upload (photos, academic documents) and Identity summary audio are served from our content delivery network at long, unguessable URLs. The URLs are not listed anywhere, but anyone who has a file's exact URL can retrieve it. Treat a shared document as something the recipient may have kept.
Organizations
An organization's page shows the contact people the organization chooses to list, with the name, role, email, and phone number they provide.
6. Athletes under 16
The Platform is not intended for children under 13. When an athlete between 13 and 15 signs up, we collect a parent or guardian's email address and send them a link to review the request and approve or decline the athlete's participation. The link stays valid, and the parent or guardian can change their decision at any time using the same link. When a parent or guardian creates the account with their child, they can confirm their consent directly during onboarding.
Parents and guardians can write to privacy@athlete-x.io at any time to access, correct, or delete their child's information, or to withdraw consent. If we learn that a child under 13 has created an account, we will delete it.
7. How long we keep information
We keep your information for as long as your account exists. You can delete your account yourself in the web app under Account settings, or ask us at privacy@athlete-x.io. Deleting your account immediately removes your profile, portfolio and uploaded documents, check-ins, Identity results, Lab conversations, notifications, and push tokens, cancels any active subscription, and deletes your customer record at Stripe.
A few things are kept longer:
- Support messages and cancellation feedback are kept in anonymized form, with your name and email removed.
- Invoices and payment records are retained by Stripe as tax and accounting law requires.
- Lab game plans a coach has not opened in 12 months are deleted automatically.
8. Service providers
Running the Platform takes a small number of specialized companies. They process personal information on our behalf and on our instructions only, under agreements that do not let them use it for their own purposes. We do not sell personal information and we do not hand it to anyone for their own use. Here is every category, and what reaches it:
- Sign-in and account security: your email, name, date of birth, password, and the phone number you add for SMS codes.
- Payments: subscriptions run on Stripe, which we name because you are sent to Stripe's own pages to pay. Your card details go to Stripe, never to us; we send Stripe your name and email.
- Hosting, database, and file storage: everything the Platform stores, including the files you upload.
- Email delivery: the address we're writing to and whatever the message contains (an invitation, a consent request, a reminder).
- Push notifications: your device's notification token and the reminder text, relayed to your phone through Apple's and Google's notification services.
- Artificial intelligence: Identity summaries and the Lab's answers are generated by an external AI provider. To produce them we send the athlete's name, age, sport and position, height and weight, reported injuries, Identity scores, recent check-ins, and the coach's messages. The provider returns the result to us and is not permitted to use any of it for its own purposes, including training its models.
- City lookup: when you type your hometown, the text you type goes to a mapping service that returns matching cities.
- Error monitoring: technical diagnostics when something breaks on our servers, so we can fix it.
We keep an up-to-date list of the specific companies in each category. Write to privacy@athlete-x.io and we will send it to you.
One third party is not ours: when a portfolio shows video highlights, the previews and the player are loaded from YouTube, so Google receives the viewer's IP address under Google's own privacy policy.
We may disclose information when the law requires it, or when disclosure is necessary to protect the rights or safety of our users, the public, or Athlete-X. If Athlete-X is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction under the same protections.
9. Where your information is processed
We are based in Québec, Canada. Our providers process data in the United States and other jurisdictions, so your personal information may be transferred, stored, and processed outside Québec and outside Canada. We use providers with contractual and security commitments appropriate to that processing.
10. Your rights
Subject to applicable law, you can:
- Access the personal information we hold about you and get a copy.
- Correct inaccurate or incomplete information.
- Delete your account and personal information (section 7).
- Receive computerized personal information you provided in a structured, commonly used format.
- Withdraw consent where processing relies on it.
Write to privacy@athlete-x.io and we will respond within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your local data protection authority.
11. Cookies and local storage
We use only what sign-in and your settings need: Clerk sets session cookies so you stay signed in, and the apps use local storage on your device for your theme, language, and in-progress forms. There are no analytics cookies, no advertising cookies, and no third-party tracking on any part of the Platform. The marketing site at athlete-x.io sets no cookies at all. If you block cookies in your browser, sign-in will not work.
12. Security
All traffic is encrypted in transit (TLS). Access to data is scoped by role, API access uses short-lived signed tokens, passwords are hashed and managed by Clerk, and payment details stay with Stripe. No system is perfectly secure, so if we ever learn of a confidentiality incident that creates a risk of serious harm, we will notify the affected people and the authorities as the law requires. To report a security concern, write to privacy@athlete-x.io.
13. Changes to this policy
When we change this policy, we update the effective date at the top. For material changes we will tell you by email or with a notice on the Platform before the change takes effect.
14. Contact
Privacy questions and requests: privacy@athlete-x.io. Anything else: support@athlete-x.io.