POWLAX - Practice Optimization for Winning Lacrosse

Welcome to POWLAX. Your privacy is important to us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our website, online coaching platform, and other resources (collectively, the "Services").

1. Information We Collect

We may collect and process the following types of information about you:

Personal Information:

Includes your name, email address, and any other information you provide when registering or using our Services.

Payment Information:

If you purchase services or products, we collect payment details via secure third-party processors.

Usage Data:

Information about your interactions with our Services, such as IP address, browser type, and usage patterns, which may be collected automatically.

Device Information:

Data about the device you're using, including device type, operating system, and device identifiers.

2. How We Use Your Information

We use the information we collect for various purposes, including:

Providing, maintaining, and improving our Services;

Processing transactions and sending you related information, including purchase confirmations and receipts;

Sending you updates, promotional materials, and other information related to our Services that may interest you;

Responding to your comments, questions, and customer service requests;

Monitoring and analyzing trends, usage, and activities to improve user experience and platform functionality;

Complying with legal requirements and enforcing our Terms of Service.

3. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share information about you in the following circumstances:

Service Providers:

We may share your information with third-party vendors, consultants, and other service providers who work on our behalf.

Legal Requirements:

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers:

If we undergo a merger, acquisition, or asset sale, your information may be transferred.

4. Your Privacy Choices

You may opt out of receiving promotional communications from us by following the instructions in those messages or contacting us directly. Please note that even if you opt out of promotional emails, we may still send you non-promotional communications, such as those about your account or ongoing business relations.

6. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to track the activity on our Services and hold certain information. You can set your browser to refuse all or some cookies; however, if you disable cookies, some parts of our Services may not function properly.

6.1 Analytics and Usage Tracking

POWLAX uses Amplitude Analytics to understand how users interact with our platform and improve the user experience.

What We Track:

Page views and feature usage patterns
Session duration and frequency of use
Device type, browser version, and screen size
Performance metrics and error reports
Practice plans created, drills viewed, workouts completed

What We Don't Track:

Form inputs, personal messages, or practice content you create
Passwords, payment information, or sensitive data
Activity on other websites or applications
Real-time location or precise geolocation data
Your real name (we use anonymized, hashed user IDs only)

How We Use This Data:

Improve application performance and fix bugs
Understand which features provide the most value
Identify and remove confusing or unused features
Make data-driven decisions about new feature development
Measure user activation and engagement to improve onboarding

Your Privacy Choices:

You can opt out of analytics tracking at any time by visiting your Profile Settings → Analytics & Usage Data. When you opt out:

We immediately stop collecting new analytics data from your account
Historical analytics data remains for past reporting only
You can opt back in at any time
All core features continue to work normally

Browser Privacy Controls:

We honor Global Privacy Control (GPC) browser signals. If your browser sends a GPC signal, we will automatically disable analytics tracking for you. You can enable GPC in privacy-focused browsers like Brave, Firefox (with extensions), or using browser extensions like Privacy Badger.

Children Under 13:

Analytics tracking for children under 13 is subject to the same parental consent requirements as other data collection. Parents can disable analytics tracking for their child's account in Profile Settings. This does not affect the child's ability to use POWLAX features.

Privacy Guarantees:

Your analytics data is never sold or shared with advertisers
All data is encrypted in transit (HTTPS/TLS) and at rest
Analytics uses anonymized, hashed user IDs (not names or emails)
Amplitude (our analytics provider) acts as a service provider only
We comply with COPPA, CCPA, and privacy best practices

For more information about Amplitude's privacy practices, visit amplitude.com/privacy

8. Children's Privacy (COPPA Compliance)

POWLAX is committed to protecting the privacy of children. We comply with the Children's Online Privacy Protection Act (COPPA) when collecting personal information from children under the age of 13.

Parental Consent Verification

For children under 13 years of age, we require verified parental consent before creating an account or collecting any personal information. Our verification process uses Stripe Identity to ensure the person providing consent is the child's parent or legal guardian.

How Identity Verification Works:

Government ID Verification: Parents must verify their identity by submitting a government-issued photo ID (driver's license, passport, or state ID).
Live Selfie Matching: Parents take a live selfie that is compared to their ID photo using facial recognition technology to ensure the person providing consent is the ID holder.
Age Verification: We verify the parent is 18 years or older from the date of birth on their ID.
Secure Processing: The verification is performed by Stripe, Inc., our trusted payment and identity verification provider. ID images are encrypted and automatically deleted by Stripe after verification.

What we store: We only keep the verification result (verified/not verified), the parent's name, and date of birth for compliance records. ID images are NOT stored by POWLAX. This data is retained for 90 days and then redacted, keeping only the verification status for legal compliance.

Information We Collect from Children Under 13

With verified parental consent, we collect the following information from children under 13:

Account Information: Username (not real name), first name, last initial, date of birth
Skills Progress: Workout completions, drill progress, skills assessments
Team Participation: Team membership, practice attendance, player position
Gamification: Points earned, badges achieved, rank progress

What we do NOT collect from children under 13: Last name (only initial), home address, phone number, photos or videos, or any information not necessary for providing our lacrosse skills training services.

How We Use Children's Information

To provide lacrosse skills training and coaching content
To track progress in drills, workouts, and skill development
To enable team participation and communication with coaches
To award points, badges, and ranks for achievements
To provide age-appropriate content and recommendations

Parental Rights

As a parent or legal guardian, you have the following rights regarding your child's information:

Review: You can review the personal information we have collected from your child by logging into your account and viewing your child's profile
Request Deletion: You can request that we delete your child's personal information by contacting us at privacy@powlax.com. We will complete deletion requests within 30 days.
Refuse Further Collection: You can revoke consent at any time, which will prevent any further collection or use of your child's information
Export Data: You can request a copy of your child's data in a machine-readable format

Important: If you revoke consent or request deletion of your child's account, your child will no longer be able to access POWLAX services. This action cannot be undone.

Data Security for Children

We take additional security measures to protect children's information:

All child data is encrypted both in transit (HTTPS/TLS) and at rest
Access to children's data is restricted to parent/guardian and authorized team coaches only
We maintain audit logs of all access to children's data
Children's accounts have enhanced privacy settings by default
We never share children's information with third-party advertisers

Third-Party Services and Children's Data

The following third-party services may process children's information as part of providing our Services:

Stripe, Inc. - Identity verification and payment processing (for parent verification only, not children's payment data)
Supabase - Secure database hosting with encryption
Vercel - Application hosting with enterprise-grade security
Vimeo - Video hosting for instructional content

All third-party services that process children's data are contractually required to maintain COPPA compliance and protect children's privacy.

Data Retention

We retain children's information only for as long as necessary to provide our services. When a parent requests deletion, we delete the child's account and personal information within 30 days. Some information may be retained in backup systems for up to 90 days for technical reasons, then permanently deleted.

Contact Us About Children's Privacy

If you have any questions about our children's privacy practices, want to review your child's information, or wish to request deletion, please contact us at:

Email: privacy@powlax.com

Subject line: "Children's Privacy Request"

We will respond to all privacy requests within 48 hours and complete data deletion requests within 30 days.

For more information about COPPA: Visit the FTC's website at ftc.gov/childrens-privacy