PracticePlan AI — Privacy Policy

Last Updated: June 5, 2026

This Privacy Policy explains how [Your Legal Entity Name] ("PracticePlan AI," "we," "us," or "our") collects, uses, shares, and protects information when you use our website, mobile-installable web application, and related services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Who This Policy Applies To

PracticePlan AI is a tool for adult coaches and sports personnel. Our Services are not intended for, and not directed at, children under the age of 18.

Athletes do not create accounts, do not log in, and do not interact directly with the Services. Coaches use the Services on their own to prepare practice plans. Coaches agree, as part of our Terms of Service, not to submit personally identifiable information about individual athletes into the Services.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information. If you believe we have such information, please contact us at the email below.

2. Information We Collect

2.1 Information You Provide

Account Information: Your name, email address, password (stored as a secure hash, not in plain text), and, if applicable, your team or organization name.
Team Information: Information you enter about teams you coach, including team name, sport, age group, season, practice location descriptions, equipment availability, focus areas, and team logos (if uploaded).
Practice Plan Inputs: The details you provide when generating practice plans, including focus areas, time constraints, coach counts, opponent information (if you provide it), and edits or custom drills you describe.
Saved Plans and Edits: Practice plans you save, and any edits, remixes, or custom inputs you make to those plans.
Communications: Any messages you send through our contact form, customer support, or in response to our communications.
Payment Information: If you subscribe to a paid plan, you provide payment information directly to our third-party payment processor (Stripe). We do not store your full credit-card number; we receive only a token, the last four digits, and the card brand from Stripe.

2.2 Information We Collect Automatically

Usage Data: Pages visited, features used, plans generated, and similar information about how you interact with the Services.
Device and Log Data: IP address, browser type, operating system, device type, referring URLs, timestamps, and similar technical data.
Cookies and Similar Technologies: Small files placed on your device that help us authenticate you, remember preferences, and analyze usage. See Section 6.

2.3 Information We Do Not Collect

We do not collect personally identifiable information about individual athletes. Our Services are designed so that coaches plan practices at the team level, not the individual-athlete level.
We do not knowingly collect medical, biometric, or other sensitive personal data.

3. How We Use Information

We use the information we collect to:

Provide, operate, and maintain the Services, including authentication, plan generation, saving, sharing, and account management.
Process payments and manage subscriptions.
Communicate with you about your account, billing, service updates, and security issues.
Send you optional product updates, tips, or marketing emails (you can unsubscribe at any time).
Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
Comply with legal obligations, respond to lawful requests, and enforce our agreements.
Improve the Services, including by analyzing usage patterns and developing new features.

Use of inputs by AI Tools. When you generate a practice plan or other AI-generated content, your inputs (team setup details, generation prompts, custom drill descriptions, edits) are sent to our third-party AI provider (currently Anthropic) for the purpose of generating outputs. We do not use your inputs to train AI models, and our AI provider has contractually agreed not to use your inputs for training their general models.

4. How We Share Information

We share information only as described below. We do not sell your personal information.

4.1 Service Providers

We share information with third-party service providers that help us operate the Services. Each is contractually required to use the information only to provide services to us and to maintain reasonable security:

Anthropic, PBC — generative AI processing of your practice-plan inputs and outputs.
Supabase, Inc. — database hosting, authentication, and file storage.
Lovable AB — application hosting and infrastructure.
Stripe, Inc. — payment processing and subscription management.
Cloudflare, Inc. — bot prevention (Turnstile) and security infrastructure.
Resend, Inc. (or successor email provider) — transactional and notification email delivery.

We may add or change service providers from time to time. A current list of subprocessors is available upon request at the email below.

4.2 Legal and Safety

We may disclose information when we believe in good faith that disclosure is required to:

Comply with applicable law, legal process, or governmental request.
Enforce our Terms of Service or other agreements.
Detect, prevent, or address fraud, security, or technical issues.
Protect the rights, property, or safety of PracticePlan AI, our users, or the public.

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you (e.g., by email and/or notice on our website) before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share information for any other purpose with your consent.

5. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter, as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law (for example, tax records, fraud-prevention logs, or records of legal claims). Anonymized usage statistics, security logs, and audit trails may be retained indefinitely.

6. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

Authentication — keeping you logged in.
Preferences — remembering settings such as Field Mode toggle, last-used team, and similar.
Security — preventing fraud, bots, and abuse (including Cloudflare Turnstile).
Analytics — understanding how the Services are used so we can improve them.

You can disable cookies through your browser settings, though some features of the Services may not work without them.

We do not currently use cookies for cross-site advertising or behavioral tracking by third parties.

7. Security

We use commercially reasonable physical, administrative, and technical safeguards to protect your information, including:

Encryption of data in transit (TLS/HTTPS).
Encryption of stored data at rest by our infrastructure providers.
Hashed (not plaintext) password storage.
Role-based access controls and row-level security on our database.
Bot prevention and rate limiting.
Audit logging of authentication events and sensitive actions.

No system is perfectly secure. Despite our safeguards, we cannot guarantee absolute security of your information. If you become aware of a security issue, please contact us at the email below.

8. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate or incomplete information.
Deletion — request that we delete your personal information, subject to legal exceptions.
Export — request a portable copy of your data in a common format.
Restriction or Objection — request that we limit or stop certain processing.
Withdraw Consent — withdraw any consent you have previously provided.
Opt-Out of Marketing — unsubscribe from marketing emails at any time using the link in any marketing email.

To exercise these rights, contact us at the email below. We may need to verify your identity before responding. We will respond within 30 days, or as required by applicable law.

If you are a resident of California, the European Union, the United Kingdom, or another jurisdiction with specific data protection laws, you may have additional rights under those laws. To exercise those rights, contact us at the email below.

9. International Users

PracticePlan AI is operated from the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Services, you consent to such transfers. We take steps to ensure that any cross-border transfer of personal information is subject to appropriate safeguards.

10. Children's Privacy

The Services are not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under 18. As noted in Section 1, athletes do not use the Services directly; coaches use the Services on their own and are responsible under our Terms of Service for not entering athlete personal information.

If you believe we have inadvertently collected personal information from a child under 13, please contact us at the email below, and we will delete it.

11. Third-Party Links

The Services may contain links to third-party websites, services, or resources (for example, links to coaching organizations, drill resources, or shared plans sent by email). We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you visit.

12. Do Not Track

Some browsers offer a "Do Not Track" signal. We do not currently respond to such signals, because there is no industry standard for how to do so. We do, however, honor your other privacy choices as described in this policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy shows when it was most recently revised.

Your continued use of the Services after the effective date of any updated policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

[Your Legal Entity Name] Attn: Privacy [Your Business Mailing Address] [Your City, FL ZIP] Email: privacy@practiceplan.ai