The Chalk Circle — Comprehensive Privacy Policy

1. Scope & Covered User Roles

This policy applies to all users interacting with our Services. Our platform operates across four primary account classifications:

• Student-Athletes: Minor and adult athletes competing in Level 9, Level 10, Elite, or NCAA gymnastics programs who create accounts to share workout footage, routine metrics, competition scores, and academic credentials.
• Parents & Legal Guardians: Verified adults who oversee, approve, and co-manage account permissions, communications, and media visibility for minor athletes.
• Institutional Recruiters: Active university coaching staffs and athletic department personnel verified via authenticated .edu email domains.
• Club Directors & Gym Owners: Verified gym owners, head coaches, and administrative staff managing team rosters and recruiting operations for an active gymnastics facility.

2. Information We Collect

We collect information directly from you, automatically through your use of the Services, and through verified administrative uploads.

A. Information You Provide Directly

• Account Registration: Legal name, email address, phone number, date of birth, home address, and password credentials.
• Athletic & Academic Portfolio Data: Graduation year, competitive level, home gym facility affiliation, apparatus scores, workout logs, height, cumulative GPA, standardized test scores, and academic interest areas.
• Media & Video Content: Practice video clips, routine highlights, competition footage, apparatus tags, and performance notes uploaded to athlete portfolios.
• Parental Verification Records: Verified parent/guardian contact details, electronic consent signatures, and identity confirmation logs required for athletes under age 18.
• Payment & Subscription Data: Credit card, ACH, or billing details processed securely via our PCI-compliant payment gateways (we do not store full credit card numbers on our servers).

B. Information Collected Automatically

• Device & Technical Identifiers: IP address, browser type, operating system, hardware model, mobile device advertising IDs (e.g., IDFA/GAID), and network connection specifications.
• Telemetry & Usage Data: Video playback analytics, page navigation paths, feature engagement logs, recruiter profile views, session duration, and error crash reports.

3. Children's Privacy, COPPA & SafeSport Compliance

Because our network serves youth athletes, we strictly comply with the Children’s Online Privacy Protection Act (COPPA), U.S. Center for SafeSport guidelines, and applicable student privacy laws.

• Verifiable Parental Consent (VPC): Minor accounts (under age 18) cannot publish video portfolios to collegiate recruiters or engage in platform networking until a verified parent or legal guardian completes our consent verification protocol.
• Mandatory Communication Mirroring: Every direct message, recruiter inquiry, or outreach notification involving a minor athlete automatically carbon-copies (CCs) the verified parent or guardian's email address.
• Zero 1:1 Unmonitored Adult Access: Direct, unmonitored private messaging between unverified adult accounts and minor athletes is programmatically restricted by database triggers.
• Parental Rights & Controls: Parents and legal guardians retain the right at any time to review, edit, restrict visibility, or request the permanent deletion of their child’s personal data by emailing Privacy@thechalkcircle.com.

4. Cookies, Pixels & Digital Tracking

We utilize essential, functional, and analytical cookies and local storage objects to maintain session security, remember preferences, and analyze system performance.

• Essential Cookies: Required to authenticate users, protect database sessions, and prevent fraudulent logins.
• Analytics Cookies: Help us measure video streaming performance, load times, and feature navigation across device types.
• Global Privacy Control (GPC): Our platform honors automated browser opt-out signals emitted via Global Privacy Control. We never deploy third-party targeted advertising cookies or commercial tracking pixels across minor athlete profiles.

5. How We Use Your Information

We process personal data strictly for platform operations and athletic recruiting facilitation, including:

• Generating active College Recruiting Resumes that aggregate daily gym footage, official scores, and academic stats.
• Verifying the credentials of university scouts (via .edu domain validation) and club directors before granting portfolio access.
• Delivering real-time analytics—such as Recruiter Heatmaps—to gym owners to show which collegiate programs are tracking their team's routine uploads.
• Enforcing our Community Code of Conduct, screening for toxic or harassing behavior, and maintaining SafeSport standards.
• Processing transaction billing for annual institutional passes and gym subscriptions.

6. How We Share Information

We do not sell, rent, or trade personal data or minor athlete media to third-party advertisers or data brokers. Information is shared only under strict operational parameters:

• With Verified Collegiate Scouts: When an athlete or parent sets portfolio visibility to "Public" or "Recruiter Only", verified NCAA/collegiate coaches can evaluate videos and academic records.
• With Home Club Directors: Authorized coaches and administrators from your registered training facility can view team roster metrics and engagement analytics.
• Essential Service Providers: Cloud infrastructure vendors (e.g., video streaming services, database hosting, email dispatchers) operating under binding data protection contracts.
• Legal & Safety Compliance: When required by law, subpoena, or to protect the physical safety of an athlete under SafeSport emergency reporting protocols.

7. Data Security & Retention

We enforce comprehensive technical and organizational safeguards to secure user data:

• Encryption: Data in transit is protected via TLS 1.3 encryption, and stored database records are protected using AES-256 standards.
• Role-Based Access: Database access is strictly restricted to authorized system processes and multi-factor authenticated administrators.
• Data Retention & Purge: Personal information is retained while the account remains active. Upon receipt of an account deletion request, user records and hosted video files are permanently purged from active servers within 30 days.

8. State-Specific Privacy Rights (CCPA / CPRA & US States)

State privacy statutes (including California, Virginia, Colorado, Connecticut, and Utah) grant residents specific rights regarding their personal data:

• Right to Know & Access: Request a report detailing the specific categories and pieces of personal data collected about you.
• Right to Deletion: Request the permanent removal of your personal information, subject to legal retention obligations.
• Right to Correct: Request corrections to inaccurate or outdated personal profile data.
• No Sale / Targeted Ad Sharing: We do not sell personal information or share minor data for cross-context behavioral advertising.
• Non-Discrimination: We will never penalize or discriminate against any user for exercising their legal privacy rights.

9. Policy Updates

We reserve the right to update this Privacy Policy to reflect changing legal mandates, COPPA/SafeSport updates, or new platform tools. When material updates occur, we will adjust the "Last Updated" date above and notify active account holders via email or in-app notification prior to the effective date.

10. Contact Us & Privacy Requests

To exercise your privacy rights, submit a parental inquiry, or report a compliance concern, please contact our Data Protection Office:

• Privacy Office: privacy@thechalkcircle.com
• SafeSport & Minor Protection: compliance@thechalkcircle.com
• General Support: support@thechalkcircle.com