Privacy Policy

Effective date: July 19, 2026 · Operator: Pylon Coach LLC · Contact: pyloncoachai@gmail.com

PylonCoach, operated by Pylon Coach LLC, is an AI-powered American football training platform. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you and your parents have. It is written to satisfy the Children's Online Privacy Protection Act (COPPA, 16 CFR Part 312, as amended effective June 23, 2025) because athletes under 13 may use PylonCoach with verifiable parental consent.

1. Information we collect

• Account information: name, email address, and password credentials (managed by our authentication provider — we never see or store your password).
• Player profile: football position, birthdate, height, weight, experience level, and training goals — used only to personalize coaching.
• Training content: workouts completed, performance metrics you log, goals, achievements, and messages you send to the AI coach.
• Videos: training clips you choose to upload, stored privately and analyzed only at your request.
• Payment information: handled entirely by our payment processor; we store only your subscription status, never card numbers.
• We do not collect: precise location, contacts, advertising identifiers, or biometric identifiers, and we do not use third-party advertising or tracking.

2. How we use information

• To provide the service: AI coaching, workout generation, and video analysis.
• To operate accounts, subscriptions, and transactional email.
• To keep the service safe and enforce our Terms.
• We do not sell personal information, use it for targeted advertising, or use children's personal information to train AI models.

3. Who we share information with (service providers)

We share information only with the service providers that make PylonCoach work, each bound to use it solely to provide their service to us:

• Clerk (authentication) — account identity.
• Supabase (database and video storage) — profile, training data, videos.
• OpenAI (AI processing) — coaching conversations and video frames submitted for analysis.
• Stripe (payments) — billing details for paid subscriptions.
• Resend (email) — email address, for transactional messages only.
• Vercel (hosting) — technical request data required to serve the app.

We disclose no personal information to any other third parties except as required by law.

4. Children under 13 (COPPA notice)

• When a child under 13 creates a player profile, their account is locked until a parent or legal guardian links to it with the child's family code and provides consent.
• Direct notice: at consent time we show parents what we collect (Section 1), how we use it (Section 2), and the named service providers who receive it (Section 3), including this retention policy (Section 5).
• Parents may consent to our collection and use of their child's information without consenting to disclosure to third parties that are not integral to providing the service. Because our only disclosures are to the integral service providers above, declining them means the service cannot operate; parents may instead decline entirely and request deletion.
• Parental rights: a parent may review the child's information, revoke consent, and require deletion at any time from the Family page or by contacting pyloncoachai@gmail.com. We verify parent identity before honoring requests.
• We collect no more information from a child than is reasonably necessary for them to use the service, and we do not condition participation on disclosing extra information.

5. Data retention

• Account and training data are kept while the account is active and deleted within 30 days of a verified deletion request or account deletion.
• Uploaded videos are kept until you delete them or your account is deleted.
• Content submitted for AI processing is handled under our AI provider's API data policy, which does not use API inputs to train its models.
• Payment records are retained as required by tax and accounting law.
• We retain children's personal information only as long as necessary for the purpose collected, and delete it securely thereafter.

6. Security

Videos are stored privately and served only through short-lived signed URLs. Access to production systems is restricted and credentialed. No method of transmission or storage is 100% secure; we will notify affected users of any breach as required by law.

7. Your choices

• Edit or delete profile data, videos, and goals in the app at any time.
• Delete your account entirely by emailing pyloncoachai@gmail.com from your account email — we complete verified deletions within 30 days.
• If you live in a state with a comprehensive privacy law (such as California, Colorado, Connecticut, Texas, or Virginia), you may also have rights to access, correct, delete, and obtain a copy of your personal information. Exercise any of them via the contact email above; we will not discriminate against you for doing so.

8. Changes

We will notify account holders (and parents of consented children, where changes are material to children's data) by email before changes take effect. Continued use after notice constitutes acceptance — except for material changes to children's data practices, which require fresh parental consent.