Privacy Policy
Effective date: July 1, 2026
TrackCruit is operated by Iron Will Digital LLC (Utah, USA). This policy explains what we collect, why, and the choices you have. It is written for both athletes and their parents — most of our users are high-school students, and we take that seriously.
1. What we collect
- Account info: name, email address, and (if you sign in with Google) your Google profile photo.
- Athlete profile: date of birth (used only to verify age), graduation year, high school, hometown, GPA/test scores if you add them, headshot photo if you upload one.
- Recruiting data you enter: colleges you're tracking, athletic performances, communications with coaches, coach contact details.
- Usage data: standard logs (IP address, browser type) and — only if you accept analytics cookies — Google Analytics data about how the site is used.
2. How we use it
- To run the Service: your data powers your own dashboard and tools.
- To show your public profile — but only if you turn it on, and only the sections you choose to show. Public profiles are off by default.
- To generate AI rankings: when you request a ranking, relevant profile and performance data is sent to OpenAI to produce it. OpenAI's API does not train on this data.
- To notify us of new signups and to respond to your requests.
We do not sell your data. We do not show ads. We do not share athlete data with third parties except the service providers below.
3. Service providers
- Supabase — database, authentication, and file storage (hosted in the US).
- Vercel — web hosting.
- Google — optional sign-in (OAuth) and, with your consent, analytics.
- OpenAI — AI ranking generation, only when you request it.
4. Children and teens
TrackCruit is not for children under 13, and we block signups from anyone whose date of birth indicates they are under 13 (COPPA). If we learn we hold data on a child under 13, we delete it — parents can email us to report this.
For athletes 13–17, we require the athlete to confirm at signup that a parent or guardian has reviewed and agreed to our terms. Parents/guardians may contact us at any time to review, correct, or delete their athlete's data.
5. Cookies
We use essential cookies to keep you signed in — these are required for the Service to work. We use analytics cookies (Google Analytics) only if you accept them in the cookie banner; declining them does not change how the Service works. You can clear or change your choice by clearing your browser's site data.
6. Your rights and choices
- View and edit your data anytime from your Profile page.
- Turn your public profile off anytime — it's off by default.
- Request a copy or deletion of your data (or your child's data) by emailing grigonometry@gmail.com. We respond within 30 days.
7. Security and retention
Data is protected with encryption in transit, database-level row security, and role-restricted admin access. We retain your data while your account is active and delete it within 30 days of a deletion request, except records we must keep for legal reasons.
8. Changes and contact
If we materially change this policy we'll notify you by email or in-app notice first. Questions or requests: grigonometry@gmail.com. See also our Terms of Service.