Privacy Policy

Personal information you provide to us. We collect the personal information you voluntarily provide when you register, create a profile, or use the Services. Depending on your role, this may include:

• Name
• Email address
• Password
• Profile photo
• School, position, and graduation year
• Athletic measurables (height, weight, and timed or measured results such as 40-yard dash, bench, vertical, broad jump, and shuttle)
• A link to your athletic film (for example, a Hudl URL)
• Social media handles
• Documents you choose to upload, which may include academic documents such as transcripts or test-score reports
• For coaches: your coaching role and the school or program you are associated with

Payment information. When you make a purchase, payment is processed by Apple (for in-app athlete subscriptions) or Stripe (for program plans). We do not collect or store your full payment card number. Apple's and Stripe's privacy notices are at apple.com/legal/privacy and stripe.com/privacy.

Social login data. If you register using Google or Apple, we receive basic profile information (such as your name and email) from that provider, as described in Section 6.

Information automatically collected. When you use the Services, we automatically collect limited technical information needed to operate and secure them, including device information, app version, general log data, and crash and error reports. We use Google Firebase (including Firebase Crashlytics and Firebase Analytics) for this. This information is used to keep the Services running, diagnose problems, and understand general usage. We do not use it for advertising.

What we do NOT collect. We do not collect your precise geolocation or GPS location. We do not use advertising cookies or sell your information for advertising. We may request access to your device's photo library or camera solely so you can upload a profile photo or film; we do not access them otherwise.

We process your information to:

• Create and manage your account and authenticate you
• Provide the core recruiting features of the Services, including building profiles, managing rosters, and sharing athlete profiles with coaches as described in Section 3
• Deliver notifications about activity relevant to you (such as roster requests, connection requests, and when your profile has been shared)
• Respond to your inquiries and provide support
• Send you administrative information, such as changes to our terms and policies
• Process payments and manage subscriptions
• Keep the Services safe and secure, and prevent fraud and misuse
• Understand general usage so we can improve the Services
• Comply with our legal obligations

We process your information only where we have a valid legal reason to do so.

This section describes how athlete information moves through GRID. It is the most important section for athletes and their parents or guardians to understand.

Your profile. An athlete's profile contains the information listed in Section 1. Some of it is visible to coaches you are connected or rostered with; some can be made public as described below.

Rosters as consent. An athlete may belong to one high school program's roster at a time, and joins only after approving the request. By joining a roster, the athlete consents to have their profile shared by that program's coaches with college coaches and other third parties, without approving each recipient individually.

Public recruiting links. A coach on a paid program plan can generate a recruiting link that publishes an athlete's profile to a public web page. These pages require no account and no password — anyone with the link can view them. A public link may include the athlete's name, photo, school, city and state, position, graduation year, measurables, athletic film link, and social handles. It includes the athlete's email only if the athlete has enabled contact visibility. It includes an academic or other uploaded document only if the athlete has marked that specific document for sharing.

Documents on public links. Uploaded documents are the only way academic information (such as a transcript or test scores) can appear on GRID, and only the athlete can upload them and mark them shareable. When a document is included on a public link, it is served as a downloadable file through a temporary link. Two things to understand: a downloaded or screenshotted copy cannot be recalled; and a document's temporary download link can remain valid for up to seven days after it is issued, even if the recruiting link is expired or revoked in the meantime.

Expiration and revocation. Recruiting links are created with an expiration date and stop displaying a profile once expired. A coach or program administrator can also revoke a link before it expires. Neither expiration nor revocation can recall any copy, screenshot, or download a viewer already made.

Your Controls as an Athlete

You have direct control:

• You are notified when your profile is published to a recruiting link.
• You can remove yourself from all recruiting links at any time. Doing so hides you from every current and future link, on both the app and the website. Coaches who had you on a live link are notified that you have opted out. You can turn sharing back on later.
• You choose what to upload. Academic and other documents appear on a public link only if you upload them and mark them for sharing. If you do not want a document to be capable of appearing on a public link, do not upload it or do not mark it shareable.
• You can leave a roster at any time, which immediately ends that program's ability to share you going forward.

We share personal information in the following circumstances:

With coaches, through the Services. This is the core function of GRID and is described in Section 3. Athlete profiles are shared with high school and college coaches through rosters, connections, and recruiting links.

With service providers who help us operate the Services. We share information with vendors who process it on our behalf under contract, only as needed to provide their service to us:

• Google Firebase (Cloud Firestore, Cloud Functions, Storage, Authentication, Crashlytics, Analytics) — infrastructure, data storage, authentication, and diagnostics
• Google and Apple — authentication, when you sign in with those accounts
• Stripe — program-plan payments
• Apple — in-app subscription payments
• Resend — sending transactional email such as invitations and account notices
• Vercel — website hosting

With authorities, when required. We may disclose information where required by law, to respond to legal process, or to protect the rights, safety, or property of our users or others, including to protect the safety of a minor.

In a business transfer. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information, and we do not share it for targeted advertising.

GRID is used by minors, and much of the information on the platform belongs to minors. We treat it accordingly.

Age. The Services are intended for users at least 13 years of age. Users under 18 must have permission from, and be supervised by, a parent or legal guardian.

Parental consent. When an athlete under 18 creates an account, they are asked to affirm that a parent or guardian has reviewed and consented to their use of the Services, including the sharing practices in Section 3. We rely on that affirmation. We do not currently independently verify parental consent, and we do not collect a separate acknowledgment from the parent or guardian. Parents and guardians who did not consent, or who wish to withdraw consent, review what has been shared, or have the account deleted, may contact us at trose@louisrose.org, and we will act on the request.

Children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without the required parental consent, we will delete it as quickly as is reasonably practical, in accordance with the U.S. Children's Online Privacy Protection Act (COPPA).

You may register or sign in using your Google or Apple account. When you do, we receive basic profile information from that provider — typically your name and email address. We use it only to create and operate your account. We do not control, and are not responsible for, how Google or Apple process your information; review their privacy notices to understand their practices.

We keep your personal information for as long as you maintain an account with us, and as long as needed for the purposes in this notice, unless a longer period is required by law. When you delete your account, we delete your profile and your uploaded documents from our active systems. Some information may persist in backups for a limited time, or be retained where required by law or to resolve disputes. Information already shared with a coach, or downloaded from a public link, cannot be recalled.

We use reasonable technical and organizational measures designed to protect your personal information, including authentication controls and server-side rules governing who can access what. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Information that is shared through a public recruiting link is, by design, accessible to anyone who has the link.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent. To exercise any of these, contact us at trose@louisrose.org or gridscouting.com/contact_us.

You can also:

• Review and update most of your information directly in the app or website
• Delete your account at any time under Settings → Account → Delete Account
• Remove yourself from all recruiting links at any time (Section 3)
• Turn notifications on or off in your settings; note that some account and service messages are necessary and may still be sent

If you sign in with a social account and wish to disconnect it, you can do so through that provider.

Most browsers offer a Do-Not-Track ("DNT") setting. There is no finalized industry standard for recognizing DNT signals, and we do not currently respond to them.

If you are a resident of a US state with a comprehensive privacy law (including California, Colorado, Connecticut, Virginia, and others), you may have the right to confirm whether we process your personal information, to access it, to correct inaccuracies, to obtain a copy, to delete it, and to opt out of certain processing. We do not sell personal information or process it for targeted advertising.

Categories of personal information we collect. We collect: identifiers (such as name, email, and account identifiers); personal information such as contact and education-related information; protected classifications (such as age or date of birth, where provided); internet and device activity (such as log and diagnostic data); and education information (documents an athlete chooses to upload). We do not collect precise geolocation, biometric information, or information for the purpose of inferring characteristics about you.

Sensitive information. To the extent documents an athlete uploads contain student education records, we treat these as sensitive and process them only to provide the Services, and only as the athlete directs through the sharing controls in Section 3.

How to exercise your rights. Contact us at trose@louisrose.org or gridscouting.com/contact_us. We will verify your identity before acting on your request, typically by confirming information associated with your account. You may use an authorized agent where permitted by law. If we decline your request, you may appeal by emailing trose@louisrose.org.

Yes. We will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a revised "Last updated" date. If we make material changes, we will notify you by posting a prominent notice or by contacting you directly.

If you have questions or comments about this notice, contact us at:

You may review or update most of your information directly in the app or on the website. You may delete your account under Settings → Account → Delete Account, which removes your profile and uploaded documents from our active systems.

To request access to, a copy of, correction of, or deletion of your personal information — or, for a parent or guardian, to make a request regarding your child's account — contact us at trose@louisrose.org or gridscouting.com/contact_us.