Privacy policy

Coach Flag provides youth flag football learning resources and tools for adult coaches and parents. Coach Flag is operated by Get HR Elevated, Harbor Springs, Michigan. This policy describes information handled through our website and app. Contact us at the email below for privacy questions or requests.

A coach or team may separately decide what player information to collect and whom to invite. Ask your coach about those team practices; this policy describes Coach Flag, not every league or team’s policies.

Account information includes email addresses, optional display names, account identifiers, sign-in details and saved appearance preferences. Our authentication service manages password credentials; we do not display passwords to coaches or parents.

Information entered by coaches may include player names or nicknames, jersey numbers, age groups, positions, attendance, team and season names, schedules, game statistics, badges and shoutouts. Coaches may also create practice notes, lineup sheets, plays and field drawings.

Parent access records connect an invited adult account to a particular player. Invitations may include a parent’s email address, selected players, a label, an expiry and a code used to accept access. Information you send to our contact email is also handled to respond to your request.

Parents linked to a team, and the coach, may post to a private Team Feed: text updates, player stat highlights, photos, comments and emoji reactions, shared with the other families on that team. Each post and comment shows the author’s display name or email name. Photos may show children; upload only images you have the right and permission to share.

The program directory accepts adult organizer submissions: program details, a public contact email if supplied, and a private organizer email for manual verification and submission limiting. Approved program details are public; private organizer emails are restricted to authorized reviewers. No child information is requested in this directory. Search locations and browser geolocation are processed temporarily and are not saved by the directory. Browser location is requested only when you choose Use my location. External league finders and parks-and-recreation search links have their own privacy practices.

Hosting, authentication and request processing may generate technical records such as IP addresses, browser information, timestamps and errors. These can be needed to deliver the service, investigate failures and protect accounts.

We use information to sign adults in, organize teams, display schedules and player progress, save supported records, connect invited parents, generate requested exports or AI suggestions, respond to support requests and protect the service from misuse.

We do not sell personal information or use player information for targeted advertising. We have not added an advertising program to the app. External websites linked from Coach Flag have their own privacy practices.

Some team records are stored in your browser on your device, including the main roster, season calendar, games, practices, saved plays and drawings. They do not all automatically sync to another device. Clearing browser data or changing devices can remove access to these local records.

Accounts, supported lineup sheets, parent access records and published team or play shares use cloud storage. Lineup sheets have their own cloud sync; this does not sync every team record. A coach’s explicit team-sync action creates or refreshes the parent portal’s cloud snapshots, so parents may see an earlier version until the coach refreshes them. A locally deleted record may still appear in an earlier cloud snapshot or shared page until that copy is updated or removed.

Browser storage, preference cookies and sign-in session data keep accounts signed in and remember settings. Sign-in uses browser storage; preference cookies remember interface choices. We have not added a separate analytics tracker to the app, but hosting and service-provider logging may still occur. Sign out on shared devices; clearing local data does not by itself delete your cloud account or copies already shared with others.

Invited parents can view the player information made available through their child’s account link, along with relevant team schedules. Accepting an invitation requires a signed-in account and a valid, unexpired code; the selected players are then linked to that account. The code is not a one-use identity check, and acceptance does not independently verify that the person is the intended parent or guardian. Keep invitations private and verify the intended recipient before granting access.

Team Feed posts, comments, reactions and photos are visible to every parent linked to that team and to the team’s coach. They are not public web links, but any viewer can still save or re-share an image. The person who uploaded a photo, or the coach, can remove it.

When a coach publishes a team share, it can include player names, jersey numbers, age groups, statistics, badges, spirit values, schedules, notes and shoutouts. A play share can include actor names, positions, drawings and coaching notes. Anyone who obtains either link can view the content included in its shared snapshot. Links can be forwarded; they are not limited to parents or signed-in users. Turning off a link stops future access through that link but cannot recall screenshots, downloads or copies already made.

Service providers help us host the site, store supported records, authenticate accounts and process requested features. We may disclose information where necessary to comply with applicable law, respond to lawful requests, protect safety or investigate abuse. If operation of the service changes hands, applicable information may transfer with it, subject to required notices and safeguards.

Using an AI helper sends the information included in that request through Lovable’s AI service to a model provider: Anthropic for the practice planner and OpenAI for lineup suggestions. A practice request may include an age group, goals and coaching constraints. A lineup request may include player names, positions, availability and game constraints.

Use nicknames or position labels where possible. Do not submit medical details, contact information, full birth dates or other sensitive information in AI prompts. AI suggestions may be incorrect and must be reviewed by an adult before use. Provider processing and retention are subject to the applicable service arrangements; this policy does not promise that AI requests are never retained or used by providers.

If paid checkout is offered, the payment provider processes payment and billing information under its own terms and privacy notice. Coach Flag does not ask you to send full card details by email. An advertised paid feature does not mean checkout is currently available; the app presently displays a notice that billing is being set up.

The account tools are intended for adults, not for children to register or submit their own information. We do not knowingly seek account registrations directly from children under 13. Signup currently collects account details without an age-verification or verified-parent-consent step. The adult-only requirement is not an automated safeguard. Adults may enter information about children, so those records still deserve special care.

Coaches should have the appropriate authority and parent or guardian permission before entering or sharing a child’s records. An adult’s entry of information does not by itself establish that every legal consent requirement has been met. Prefer a nickname, avoid unnecessary identifiers and obtain permission before publishing a child’s information through an unrestricted share link.

A parent or guardian can contact us to ask what information we hold about their child, request a correction or removal, or report an account created by a child. We may verify identity and the relationship to the child before acting. Contact the coach as well for records stored only on that coach’s device.

Device records remain until removed through the app or browser. Cloud records can remain while an account, team link or share is maintained and until deletion is requested and completed. Limited records may need to be retained for legal obligations, security or dispute handling; backups and provider logs may not disappear immediately. We do not currently publish fixed deletion or backup-retention periods.

Account checks and access controls help restrict supported cloud records, but no storage or transmission method is risk-free. Keep your login and invitation links private. We cannot guarantee uninterrupted access or absolute security, and public shares intentionally make their included content accessible to link holders.

Use available app controls to correct local team information or disable supported share links. Removing a player locally does not necessarily remove every parent snapshot, lineup or published copy. There is not currently a complete self-service account-deletion tool.

Email us to request access, correction, deletion or help with a child’s information. Include only enough detail to identify the account or team; never email a password. We may verify the request and explain which records we can control, which require the coach’s action and any applicable retention limits.

Your location may provide additional privacy rights, such as portability or objection to certain processing. We will consider requests under applicable law; listing those possibilities does not claim that every regional law applies to this service. Service providers may process information in countries other than your own, where privacy protections can differ.

We will update the date when this policy changes and provide additional notice where required for material changes. A future privacy change is not permission to retroactively use children’s information in a materially different way without any consent or notice required by law.