Privacy Policy

Privacy Policy (template — review with counsel before launch)

Last updated: {{DATE}}

ForgeTeams ("we") provides team-management software to sports organizations ("Organizations"). This policy explains what we collect and how we use it.

Who controls your data

Each Organization is the data controller for its members' data; ForgeTeams is the data processor acting on the Organization's instructions (see the Data Processing Agreement, DPA.md).

For one specific, separate purpose — improving our products and AI features — we act as a controller of a limited dataset, as described in "Product and AI improvement" below. That use is optional and consent-based for personal data.

What we collect

Account: name, email, role, and authentication identifiers.
Coaching Content: drills, practice plans, workouts, drill-designer

diagrams, recipes, and nutrition templates that coaches create.

Team activity: events, messages, documents, assignments, attendance.
Health-adjacent wellness data: self-reported energy/soreness/tiredness

check-ins and individual nutrition logs. This is sensitive; we collect it only to provide the readiness/nutrition features and never sell it.

Device/technical: push tokens, basic device/user-agent for security and

e-signature audit records.

How we use it

To operate the app for your Organization, send notifications you opt into, and maintain security and legal records (e.g., signed-document audit trails).

Product and AI improvement

We work to make our coaching, workout, and nutrition features better, including training and evaluating AI models. Two rules govern this:

Coaching Content created by coaches may be used to develop and train these

features, under the license in our Terms of Service.

Personal and health-related data (a player's individual nutrition logs and

wellness check-ins) is used to improve or train AI only when it has been de-identified or aggregated, and only for members who have given a separate, explicit opt-in ("Help improve ForgeTeams' AI" in Settings). This opt-in is off by default and can be withdrawn at any time. We do not sell this data.

Age

ForgeTeams is for users 13 and older. We do not knowingly collect data from children under 13. (COPPA/parental-consent support is not enabled in this release.) We do not use data from users under 18 to train AI unless it has been de-identified or aggregated and the applicable consent has been given.

Your rights

You may request access, correction, export, or deletion of your data. Use the in-app "Delete my account" control, or contact your Organization's admin. See data retention and deletion in DPA.md. Deleting your account removes your personal data going forward; it does not require us to rebuild AI models or aggregated datasets that already incorporated de-identified data, which no longer identify you.

Retention

Personal data is retained while you are an active member and deleted (or anonymized) on member removal or account deletion, except immutable e-signature audit records retained for legal compliance and de-identified or aggregated data used for product/AI improvement, which no longer identifies you.