Privacy Policy

Last updated: May 23, 2026

This Privacy Policy explains how Tryout Tracker, LLC("Tryout Tracker", "we", "us", or "our"), collects, uses, discloses, and safeguards information in connection with the Tryout Tracker website, web and mobile applications, APIs, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.

1. Scope & Our Role

Tryout Tracker is a multi-tenant SaaS platform used by schools, school districts, athletic departments, cheer programs, dance teams, gyms, and similar organizations (each, a "Program") to run tryouts, score athletes, and manage rosters. This Policy applies to:

• Account users - owners, admins, coaches, judges, and other staff who access the Service through an account or invitation.
• Athletes, parents, and guardians - whose information is uploaded by a Program or submitted through a public signup link.
• Visitors - anyone who interacts with our marketing pages, support channels, or public endpoints.

Controller vs. processor. When a Program uses the Service to evaluate athletes, the Program is the controller (and, where applicable under FERPA, the educational agency or institution) of athlete information and decides what to collect, why, and how long to retain it. Tryout Tracker, LLC acts as a service provider / processor on the Program's behalf for that data, and as a "school official" with a legitimate educational interest where designated under FERPA. We are the controller for account data of owners, admins, coaches, and judges, and for our own operational data (security logs, billing, support).

2. Information We Collect

2a. Information you or your Program provides directly

• Account information: name, email address, password (hashed), phone number (optional), Program / organization name, school or district, role, and avatar.
• Authentication data: email magic links, password reset tokens, OAuth identifiers (e.g., Google) if you choose to sign in via a third-party provider.
• Program & tryout content: rubric definitions, scoring scales, team configurations, schedules, notes, support tickets, feedback, and other setup data.
• Athlete information: name, grade, school, contact info, position, photo, and any custom fields the Program configures, which may include emergency contact, parent/guardian info, and a private code used to look up results.
• Judge / coach information: name, email, color/avatar, role, and scoring activity within their Program.
• Scores, comments, and feedback: numeric scores, written notes, peer comments, status updates, and feedback submitted through the Service.
• Billing information: billing contact, organization name, billing address, purchase order number, and last four digits / brand of payment card. Full card numbers are processed and stored by our PCI-compliant payment processor and are not visible to us.
• Communications: emails, in-app messages, support requests, and feedback you send us.

2b. Information collected automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, referring URL, pages visited, features used, timestamps, and crash / error reports.
• Cookies & similar technologies: session cookies and local storage used to keep you signed in, remember preferences (e.g., score input mode, theme), and operate the Service. We do not use third-party advertising cookies.
• Logs: server, security, and audit logs needed to operate, debug, and secure the Service.

2c. Information from third parties

• OAuth providers: if you sign in via Google or another supported provider, we receive your name, email, and profile identifier as permitted by that provider.
• AI processing: when you opt in to AI-assisted features (rubric extraction, athlete import, bias detection, etc.), the relevant inputs are sent to an AI provider for processing on our behalf.
• Payment processor: transaction status, payment-method metadata, and dispute / chargeback notices.

3. How We Use Information

• To provide, operate, maintain, secure, and improve the Service;
• To authenticate users, manage accounts, enforce access controls, and isolate tenants;
• To enable Program admins to evaluate athletes, build rosters, and communicate with judges and athletes;
• To send transactional emails (invitations, magic links, password resets, scoring status, billing receipts, tryout reminders) and important service notices;
• To process payments, send invoices, and recover overdue amounts;
• To respond to support requests, feedback, and bug reports;
• To detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• To comply with legal obligations, lawful requests, court orders, and to enforce our rights;
• To produce aggregated, de-identified analytics and product research that do not identify any individual or Program.

We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising as defined by California or similar laws. We do not use student data, athlete data, or judge scores to train AI models for other customers.

4. Legal Bases (EEA / UK Users)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing personal data include: (a) performance of a contract with you or your Program, (b) our legitimate interests in operating and securing the Service and managing our business, (c) compliance with legal obligations, and (d) your consent where required (for example, certain cookies and optional AI features). You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Share Information

• Within your Program: data uploaded for a Program is visible to authorized admins, owners, coaches, and judges of that Program based on their role.
• Service providers (sub-processors): hosting and database (Supabase / Lovable Cloud), email delivery, AI providers (when AI features are used), analytics, error monitoring, payment processing, and similar vendors that process data on our behalf under written contracts requiring confidentiality, security, and use limitations.
• Legal & safety: when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Tryout Tracker, LLC, our users, athletes, or the public.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case information may be transferred subject to standard confidentiality protections, with notice to affected Programs.
• With your direction or consent: in any other case where you direct us to share information (for example, exporting a roster).

We do not share information across tenants. Cross-Program access is restricted by application authorization and database row-level security.

Sub-processors. We engage a limited set of sub-processors that process personal information on our behalf, including cloud hosting and database, transactional email, AI processing (for opt-in AI features), error monitoring and analytics, and payment processing. Each sub-processor is bound by written terms requiring confidentiality, security, and use limitations consistent with this Policy. A current list of sub-processors is available on request at privacy@tryouttracker.org. We will give Programs reasonable advance notice of any new sub-processor that materially changes data handling.

Decisions are made by Programs, not by us. Tryout Tracker, LLC does not make admissions, eligibility, cut, ranking, or roster decisions about any athlete. Those decisions are made by the Program (the coaches, judges, and administrators using the Service). If you are an athlete, parent, or guardian and wish to appeal or question a decision, contact the Program directly.

6. Schools, Coaches & Student Data

For Programs operated by U.S. educational agencies or institutions subject to FERPA, Tryout Tracker, LLC acts as a "school official" with a "legitimate educational interest" under 34 CFR §99.31(a)(1) when designated by the Program. We use education records only to provide the Service to the Program, remain under the Program's direct control with respect to those records, and do not redisclose education records except as permitted by FERPA or as the Program directs.

Coaches and athletic directors uploading information about minors are responsible for confirming that the Program (and where required the school district or governing body) has obtained appropriate parental, guardian, and school consents. Programs serving athletes under 13 must collect and document verifiable parental consent where COPPA requires it; Tryout Tracker, LLC acts only as the Program's agent for limited information needed to deliver the Service.

Districts that need a separate data privacy agreement (DPA), student data privacy pledge addendum, or vendor questionnaire should contact us at privacy@tryouttracker.org before uploading student data.

7. AI Features

The Service includes optional AI-assisted features (for example, rubric extraction, athlete import parsing, judge bias detection, recommendations, summaries). When you use these features, the relevant inputs are sent to a third-party AI provider that processes them on our behalf under contracts that prohibit training their general models on your inputs, except where expressly permitted in their terms applicable to enterprise / API use. Outputs from AI features are recommendations only and are intended to support, not replace, human judgment by coaches and admins.

8. Children's Privacy

The Service is not directed to children under 13, and admin or owner accounts may not be created by anyone under 18. However, the Service is designed to be used by Programs to evaluate athletes who may be minors. The Program is responsible for obtaining all parental, guardian, school, and individual consents required by applicable law (including, where applicable, COPPA, FERPA, GDPR-K, CCPA/CPRA, and similar laws) before uploading information or photos about minors. If you believe we have collected information from a child without appropriate consent, contact us using the addresses below and we will take prompt steps to delete it.

9. Photos & Sensitive Information

Programs may upload athlete photos for identification during tryouts. Photos are stored in protected storage and are accessible only to authorized members of that Program. You should not upload sensitive personal information beyond what is necessary for tryouts - no Social Security numbers, government IDs, financial account numbers, or detailed medical records.

10. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including: encryption in transit (HTTPS / TLS), encryption at rest for the database, row-level security to enforce tenant isolation, principle of least privilege for staff, access logging, audit trails, regular dependency and security scanning, and incident response procedures. No security program is perfect, and we cannot guarantee absolute security. You are responsible for protecting your account credentials and notifying us promptly of any suspected compromise.

11. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Specifically:

• Athlete & Program data: retained until the Program deletes it or deletes the Program. Following Program deletion or subscription cancellation, data is preserved for at least thirty (30) days to permit export, then deleted.
• Account data: retained until you delete your account.
• Billing & tax records: retained for at least seven (7) years as required by U.S. tax and accounting rules.
• Security & audit logs: retained for up to two (2) years for incident response and abuse prevention.
• Backups: residual copies may persist in encrypted backups for a limited period before being overwritten.
• De-identified / aggregated data: may be retained indefinitely.

12. Your Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate data; delete your information; restrict or object to processing; data portability; and withdraw consent. To exercise these rights, contact privacy@tryouttracker.org or call (804) 464-3152. We will respond within the time required by applicable law. If you are an athlete, parent, or guardian and your information was uploaded by a Program, please contact that Program directly first; we will assist the Program in fulfilling the request.

You may also unsubscribe from non-essential emails using the unsubscribe link in those emails or via in-app preferences. Transactional and security messages cannot be turned off while you have an active account.

12a. California Residents (CCPA / CPRA)

California residents have additional rights, including the right to know the categories and specific pieces of personal information we collect, the right to delete, the right to correct, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising these rights. We do not sell or "share" personal information for cross-context behavioral advertising. To submit a verifiable consumer request, contact us at the address above. You may designate an authorized agent to make a request on your behalf; we will verify the agent's authority before responding.

12b. Virginia Residents (VCDPA)

Tryout Tracker, LLC is organized in the Commonwealth of Virginia. Virginia residents have the right under the Virginia Consumer Data Protection Act to confirm whether we process their personal data, to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, or certain profiling. We do not engage in targeted advertising or the sale of personal data, and we do not conduct profiling that produces legal or similarly significant effects (those decisions are made by Programs, not by us). To exercise these rights, contact us at the address above. If we decline a request, you may appeal that decision by replying to our response; we will respond to appeals within sixty (60) days.

12c. Other U.S. State Privacy Laws

Residents of Colorado, Connecticut, Texas, Utah, Oregon, Montana, and other states with comprehensive consumer privacy laws have rights similar to those described above, which may include the right to access, correct, delete, port, and opt out of certain processing. To exercise any such right, contact us at the address above. We will respond within the timeframe required by your state law.

12d. EEA / UK Residents (GDPR / UK GDPR)

You have the right to lodge a complaint with your local data protection authority. Where we transfer personal data outside your country, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum) where required. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; Tryout Tracker, LLC does not make such decisions about athletes - Programs do.

13. International Transfers

The Service is operated from the United States. By using the Service, you understand that your information may be transferred to, stored, and processed in the United States and other countries that may have different data-protection laws than your country of residence.

14. Cookies & Tracking

We use only strictly necessary cookies and browser local storage to keep you signed in, isolate tenants, and remember preferences (such as theme and score-input mode). We may use first-party, privacy-respecting analytics to understand product usage. We do not use cross-site advertising trackers, do not sell or "share" personal information for behavioral advertising, and do not require a cookie-consent banner under the ePrivacy Directive or comparable laws because no non-essential or third-party tracking cookies are set. Most browsers let you block or delete cookies, but doing so may break parts of the Service (you may not be able to stay signed in).

15. Third-Party Links & Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with information.

16. Data Breach Notification

If we become aware of a confirmed security incident that compromises the confidentiality, integrity, or availability of your personal information, we will notify affected Programs without undue delay and, where reasonably possible, within seventy-two (72) hours after confirmation, and in any event within the timeframes required by applicable law and our contractual commitments. The notice will describe the nature of the incident, the categories of data affected (to the extent known), the steps we have taken or are taking to contain and remediate it, and the information reasonably needed for the Program to meet its own notice obligations. Where required by law, we will also notify affected individuals and supervisory authorities directly.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or via email at least fourteen (14) days before they take effect (except for changes required by law, which may take effect immediately). The "Last updated" date above indicates when this Policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance.

18. Contact

Tryout Tracker, LLC
Commonwealth of Virginia, USA
Privacy: privacy@tryouttracker.org
Support: tryouttracker@gmail.com
Phone / text: (804) 464-3152

← Back to Tryout Tracker · Terms of Service · Refunds & Cancellation