Privacy Policy

1. Who we are

TrackCruit is operated by Iron Will Digital LLC, a Utah limited liability company. The Service is intended for users in the United States. Read this alongside our Terms of Service.

2. What we collect

Account information. Your name and email address. If you sign in with Google, we receive your Google account identifier, name, email address, and profile photograph. We ask Google for nothing beyond what sign-in requires.

Date of birth. We ask for it so we can enforce our minimum age of 13 and know whether a parent or guardian needs to agree on your behalf. We keep it so we can continue to apply the right protections as you get older. It is never used for advertising and is never shown on your public profile.

Athlete profile. Graduation year, the category you compete in, high school, hometown, biography, photograph, and optionally your GPA and test scores.

Recruiting and performance information. Your marks and personal records, the colleges you are tracking, coach names and contact details you record, your outreach log, and your notes.

Billing information. If you subscribe, Stripe processes your payment. We store only a Stripe customer reference and your plan status. We never receive or store your card number.

Technical information. Standard server and error logs, and analytics if you have accepted analytics cookies.

3. What we do with it

We use your information to run the Service: to sign you in, keep your profile and performances, calculate star ratings and conference comparisons, produce the optional AI rankings you request, take payment if you subscribe, respond to your messages, keep the Service secure, and meet our legal obligations.

We do not sell your personal information, and we do not share it for targeted advertising. We do not use athlete information to build advertising profiles.

4. Your public profile

Your profile is private by default. Nothing is published until you choose to publish it, and you can unpublish or rotate the link at any time.

When a profile is published, it shows:

• always: your name, photograph, biography, graduation year, and high school;
• only if you switch on contact information: your email address, phone number, and head coach's name and email;
• only if you switch on academic information: your GPA and ACT or SAT scores;
• and, each behind its own switch: your personal records, recent performances, and ranked college list.

Your date of birth, your password or sign-in credentials, and your payment information are never published.

We serve published profiles with instructions telling search engines not to index, cache, or follow them. That keeps them out of search results, but a published link works for anyone who has it — so share it with coaches, not publicly.

5. Athletes under 18, and parents

You must be at least 13 to use TrackCruit. We do not knowingly collect information from children under 13. If we learn that an account belongs to a child under 13, we delete it and its information promptly.

If you are between 13 and 17, a parent or legal guardian must have reviewed and agreed to this policy and our Terms on your behalf. You confirm that when you create your account.

Parents and guardians: we do not currently offer a separate parent login. Email us at grigonometry@gmail.com and we will review your athlete's information with you, correct it, unpublish their profile, or delete the account entirely. We will verify that you are the parent or guardian before acting on a request.

6. Who we share it with

We share information only with the service providers we need to operate TrackCruit, and only so they can perform that work for us:

• Vercel — hosting
• Supabase — database and authentication (United States)
• Stripe — subscription payments
• Google — sign-in, and analytics if you accept analytics cookies
• OpenAI — only when you request an AI ranking, and only the information described below
• Sentry — error monitoring, configured not to collect personal information by default

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business — in which case this policy continues to apply until you are told otherwise.

7. AI features

When you ask for an AI college ranking, we send information about the college — its name, conference, division, location, and programs — together with any academic interests or notes you have written about it.

We do not send your name, date of birth, email address, phone number, GPA, test scores, or performance history. Because your notes are free text, please avoid putting personal or sensitive details in them, since those would be included.

AI outputs are estimates and can be wrong. They are not advice and not a prediction of any recruiting outcome.

8. Cookies and analytics

Cookies needed to keep you signed in are always set — the Service cannot work without them. Analytics cookies are only set if you accept them in the banner shown on your first visit. If you decline, Google Analytics is never loaded. We record your choice so we can honour it.

Where analytics are enabled we ask Google to anonymise IP addresses and we do not enable advertising features, cross-service tracking, or Google Signals.

You can change your mind by clearing this site's data in your browser, which brings the banner back.

9. Your choices and your rights

You can ask us to:

• tell you what information we hold about you;
• give you a copy of it;
• correct anything that is wrong;
• delete your account and its contents; or
• unpublish your profile.

Most of your information you can edit yourself from your profile page. For a copy of your data or a deletion, email grigonometry@gmail.com from your account's email address. We do not yet have a self-service export or delete button, so we handle these by hand and will respond within 30 days. A parent or guardian may make either request for their athlete.

We will not treat you differently for exercising any of these rights. If you are unhappy with how we handled a request, reply and say so, and we will look at it again.

10. How long we keep it

We keep your information while your account is open. When you ask us to delete it, we remove your account and its contents from the live Service within 30 days. Residual copies can remain in encrypted backups for a short period until those backups are overwritten in the normal course. We keep the minimum needed for legal, tax, or accounting obligations, and records of payments where the law requires it.

11. Security

Your data is encrypted in transit. Access is restricted at the database level so one athlete's records cannot be read by another. Administrative access is limited and logged. Payment card data never reaches our systems.

No service can promise perfect security. If you believe you have found a vulnerability, please tell us at grigonometry@gmail.com before disclosing it publicly, and we will work with you.

12. Changes

We may update this policy. If a change materially affects how we handle your information, we will give notice in the app or by email before it takes effect, and update the date at the top.

13. Contact

Iron Will Digital LLC — privacy questions and data requests: grigonometry@gmail.com. Anything else: grigonometry@gmail.com.