Privacy Policy

This Privacy Policy explains what information Baalrcollects, why, and how it's handled — including information about children under 13, since Baalr is used to manage youth sports rosters. It applies to Staff, guardians, and adult athletes.

1. Information we collect

• Account information — name, email address, and optionally a phone number and password, for the adult who holds the account.
• Athlete information, entered by a Club or guardian — a child's name, birthdate, team/roster assignment, attendance, emergency contact, and any medical or document uploads a Club requests (e.g. a physical form).
• Payment activity — invoice and payment records processed through Stripe. We do not store full card numbers; Stripe handles card data directly.
• Communications — messages, announcements, and photos shared within the app.
• Usage data — basic technical logs (sign-in activity, error reports) used to keep the service secure and working.

2. Children's data and guardian consent

Baalris not directed at children, and children do not create their own accounts. Information about a minor athlete is entered by their Club or guardian, who is responsible for having the legal authority to do so. By registering a minor — including through the public tryout registration form — a guardian confirms they are that child's parent or legal guardian and consents to Baalr processing the child's information as described in this policy, consistent with COPPA (the Children's Online Privacy Protection Act) and applicable state youth-data laws. A guardian can request that their child's information be corrected or deleted at any time — see Section 6.

3. How we use information

• To operate the scheduling, roster, messaging, and payment features a Club has configured;
• To process payments and share the minimum necessary information with Stripe and, where a Club has connected it, QuickBooks Online;
• To send account-related email (sign-in codes, payment receipts, notifications a user has opted into);
• To detect and prevent abuse, fraud, and security incidents;
• To comply with legal obligations, including financial record-keeping.

We do not sell personal information, and we do not use athlete data for advertising.

4. Who we share information with

Within a Club, information is visible according to that Club's configured roles and permissions — for example, a coach sees their team's roster, and a guardian sees only their own child's information unless a Club grants broader access. Outside the Club, we share information only with the service providers needed to run Baalr (see the Subprocessors page) and when required by law.

5. Data retention

We retain account and roster information for as long as an account is active, and financial records (invoices, payments, refunds) for the period required by applicable tax and accounting law even after an account is closed. [Specific retention periods pending counsel review.]

6. Your rights: access, correction, export, and deletion

You can download a copy of your own account data at any time from Settings → "Your data." You can also request deletion of your account from the same place. Because financial records tied to an account with payment history must be retained for accounting purposes, deletion anonymizes your personal information (name, email, phone) rather than removing the underlying payment records — the on-screen deletion flow explains exactly what happens before you confirm. A guardian can request correction or deletion of their child's information at any time through the same flow, or by contacting us directly.

7. Security

We use industry-standard measures to protect information, including encrypted connections, hashed passwords, and access controls scoped to each Club and role. No system is perfectly secure; see Section 9 for how to report a concern.

8. Cookies

See our Cookie Policy for details on the cookies Baalr uses to keep you signed in and remember your device.

9. Contact us

Questions, correction requests, or security concerns can be sent to [privacy@baalr.ai — pending mailbox setup].