legal

Children's Privacy Notice

Hoopstack is used by coaches and clubs to develop young basketball players, so we hold information about children. This notice is for parents and guardians: what we collect about a child, how it is used, who it goes to, and how you can see it or have it deleted.

Updated August 4, 2026

Need help, or want to reach a person? Support

Hoopstack is set up by adults

• Hoopstack is sold to and configured by adults: coaches, clubs and organizations.
• A child under 13 should not create their own Hoopstack account. Their profile should be created by their coach or club, with the consent of a parent or guardian.
• This is a rule we place on the adults who use Hoopstack, not a check the product runs at the moment a profile is created: a coach can record a player's profile without a parent's consent already being on record. What the product does enforce is the account gate described next — refusing to create, or attach, a login for a player under 13 without that consent.
• Creating an account requires a date of birth, and Hoopstack refuses to create one for anyone under 13 who tries to sign up directly — through the mobile app, or a web signup or invite-accept form. A parent or guardian's consent does not change that.
• A player under 13 can still exist in Hoopstack with no login of their own, as a profile created by their coach or club. Hoopstack also refuses to attach a login to that existing profile, unless a parent or guardian's consent for that player is already on record — that is what makes 'allow the profile, block the account' work.
• We do not verify that the date given is truthful. No consumer product does without identity checks; what the rule guarantees is that the question is asked and the answer is applied wherever an account is created.

What we collect about a child

• Identifying details entered by a coach or club: name, date of birth, jersey number, playing position, height, class year and competition level.
• A coach's evaluation of the player, and the player's own self-assessment if they complete one.
• The development plan generated from those evaluations, and coach notes about the player.
• Workouts assigned and completed, attendance at team events, and messages the player sends in team threads if they have an account.
• We do not ask a child for more than is needed to run the coaching workflow, and we never ask a child for information about anyone else.

How a parent consents

• A parent or guardian is linked to their child in the product and is asked to consent before they are given access to the child's information.
• The consent record stores who consented, when, and which version of the consent text they agreed to.
• Consent can be withdrawn, by two routes that do not have the same effect. In the mobile app a parent withdraws it themselves and it takes effect immediately: access to the child's information stops at once. On the web the withdrawal is made by e-mail to us, because removing the information behind it is done by hand.
• Be clear about what this consent governs: it controls a parent's access to their child's information, and whether a login can be attached to a child's profile. It is not a gate a coach passes through before recording a player, and we describe above why that is.

Where a child's information goes

• Evaluation answers about a player, and the player's self-assessment answers, are sent to OpenAI so that a development plan can be generated from them.
• This is the only place a child's information is sent to a third party for processing rather than storage.
• Storage providers hold it on our behalf, and we name them here as we do in the Privacy Policy: a virtual private server in the United States, with Cloudflare in front of it. A document uploaded by a coach or club is stored with Cloudflare R2. See the Privacy Policy for how backups are handled today.
• A child under 13 has no account, so no e-mail about them is sent and our mail provider never receives their information.
• A child's information is never sold, never used for advertising, and never used to build a profile for any purpose other than their own development plan.

What a parent can do

• Review: a consenting parent can see the information we hold about their child in the parent area of the product.
• Delete: a parent can ask us to delete their child's information. There is no automatic path for this today — a child's profile is not something the product can erase on its own, so we carry the request out by hand. We will complete it within 30 days and confirm to you when it is done.
• Refuse: a parent can decline consent, or withdraw it later, without the child losing access to anything they are otherwise entitled to.
• You do not have to give a reason, and we will not ask the child about it.
• Requests go to Hoopstack LLC at privacy@hoopstack.ai.

How long we keep it

• While the player is active with the club that recorded them.
• When a player's account is deleted, their own information is destroyed and the roster entry left behind is anonymised.
• See the Privacy Policy's 'How long we keep it' section for how backups of that information are handled today, and what changes once our off-site backup schedule is running.