Privacy Policy

1. Introduction

This Privacy Policy describes how Athlead.AI (“we,” “our,” or “us”) collects, uses, and shares information about you when you use our sports recruiting platform and related services (the “Services”). Because our platform serves minor athletes (ages 13–17) alongside adult coaches and guardians, this Privacy Policy includes specific protections for known minors and their families.

This Privacy Policy should be read together with our Terms of Use. Capitalized terms used but not defined here have the meanings given in the Terms of Use.

Data Minimization Commitment: We collect only the personal information that is reasonably necessary to provide our core recruiting and platform features. We do not collect personal information from known minors beyond what is needed for the purposes disclosed in this Privacy Policy and consented to by the user or their guardian.

2. Information We Collect

2.1 Information You or Your Guardian Provide

• Account Information: Name, email address, phone number, date of birth, graduation year, and parent/guardian contact information (for minor users).
• Profile Information: Academic information (GPA, transcripts, test scores), athletic achievements, sport and position, performance metrics, photos, and videos.
• Guardian Information: For users aged 13 to 15, the minor provides a parent or guardian’s name, email address, and relationship during onboarding so we can request Parent Approval; the guardian then provides their own account information when approving.
• Communication Data: Messages between users (including coach–athlete direct messages), feedback, and other communications with us or other users.
• Connected Account Information: When you (or your guardian) connect a social media account or an email account, we collect the account identifiers and authorization tokens needed to provide the sharing and email features described in the Terms of Use (Sections 4 and 8).
• Payment Information: Billing details for paid services (processed by third-party payment processors). For users under 16, all payment information must be provided by a guardian.
• Consent Records: An append-only record of each acceptance of the Terms of Use (including a guardian’s Parent Approval on a minor’s behalf), and the current state of each sharing control for users aged 13 to 15, including who last changed it and when.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and time spent on the platform.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Coarse Location Data: We may derive approximate location (state or region) from your IP address for regional recruiting relevance and legal compliance. We do not collect precise geolocation (GPS-level latitude/longitude) from known minors. See Section 9 for details.
• Cookies and Similar Technologies: See Section 3 below.

2.3 Information from Third Parties

• Social Media: Information from connected social media accounts (with your consent or, for users under 16, guardian consent).
• Educational Institutions: Academic records and transcripts, received only under a valid authorization such as a signed consent from the parent or eligible student, or through the school-official exception under 34 C.F.R. § 99.31(a)(1), as determined by the disclosing institution. See Section 10 for FERPA details.
• Recruiting Partners: Information shared by colleges, coaches, and recruiting services.

3. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to operate, secure, and improve our Services. We group these technologies into the categories below. Where required by law, we obtain consent before activating non-essential technologies and provide an in-product control that allows you to accept, reject, or later change those choices. Browser settings may also block or delete cookies, but doing so may not communicate a legally recognized opt-out preference or disable technologies that do not rely on browser cookies.

• Strictly Necessary: Required for core platform functionality, including authentication, session management, security, and load balancing. These cannot be disabled without breaking the Services. Lifetime: session or up to 12 months.
• Functional: Remember preferences such as language, theme, and recently viewed content. Lifetime: typically up to 12 months.
• Analytics and Performance: Help us understand how the Services are used so we can improve them. Lifetime: typically up to 24 months. You can opt out via your browser settings or, where applicable, by exercising the opt-out rights described in Section 12.
• No Behavioral or Targeted Advertising Cookies for Minors: We do not use cookies, tracking pixels, or similar technologies to deliver targeted or behavioral advertising to known minors. Our analytics tools (including PostHog) are configured to operate in a privacy-preserving mode for minor users and do not build behavioral profiles for advertising purposes.

We do not use cookies for cross-site advertising for any user. If that changes, we will update this policy and obtain any additional consent required by law.

4. Artificial Intelligence

4.1 AI-Powered Features and Third-Party AI Providers

We use artificial intelligence to power Alex, recruiting insights, matching, recommendations, and related features. These features run on OpenAI’s language models. To generate a requested output, we send OpenAI the minimum information reasonably necessary for that interaction, such as prompts, messages, selected profile fields, and relevant platform context. OpenAI processes the information under contract on our behalf, must apply appropriate confidentiality and security protections, and may not use it to train or improve generalized models except where we have obtained the consent described in Section 4.2 and the provider arrangement expressly permits that use.

AI Identification: Alex and other AI-powered features are automated systems, not human beings. When you interact with Alex or receive AI-generated content, the platform will clearly identify the content as AI-generated or AI-assisted.

4.2 Use of Your Information for AI Training

Use of your data to train Athlead’s AI systems is optional and consent-based. It is not a condition of using the Services.

• For users aged 13 to 15: AI training consent is not part of Parent Approval. Only the guardian may grant it, and it may be revoked at any time by contacting us at privacy@athlead.ai.
• For users aged 16 to 17: The user may grant or revoke AI training consent through account settings.
• For all users: You may opt out of AI training at any time by toggling the setting in your account or by contacting us at privacy@athlead.ai. Opting out will not affect your ability to use AI-powered features that operate on your data in real time (such as matching and recommendations), but your data will no longer be incorporated into training datasets.
• If you opt out, we will stop adding your identifiable or linkable personal information to future training datasets and training runs. We will also delete or de-identify retained training-source data unless an exception in Section 14 applies. Information already reflected in a trained model may not be technically capable of being isolated or removed; when that is the case, we will not re-ingest the source data and will apply reasonable measures to reduce future use or exposure of the information.

4.3 AI Limitations and Human Review

For known minors, Athlead may use profile information, stated preferences, prior interactions, coarse location, and relevant academic and athletic information to rank recruiting opportunities, profiles, reminders, and other content. We do not use sensitive personal information to infer characteristics unrelated to recruiting or rank content for targeted advertising. Guardians and users may request information about the principal factors affecting a recommendation.

AI-generated insights, matches, recommendations, summaries, and messages may be incomplete or inaccurate and are not guarantees of admission, recruitment, eligibility, scholarships, or athletic outcomes. Athlead does not intend AI features to make final decisions that produce legal or similarly significant effects. If an automated process materially affects access to an Athlead feature or opportunity, you may request information about the principal factors, correct relevant information, and request human review where required by applicable law.

4.4 AI Assistant Interactions with Minors

Alex may send clearly labeled automated messages to minor users, such as onboarding tips and recruiting reminders. For users aged 13 to 15, this outreach is covered by Parent Approval, and a guardian may ask us to disable it at any time at privacy@athlead.ai.

5. How We Use Your Information

We use your information to:

• Provide and improve our recruiting services;
• Match student-athletes with appropriate college opportunities;
• Process payments and manage accounts;
• Communicate with you about our services;
• Operate AI-powered features (as described in Section 4);
• Train AI systems (only with consent, as described in Section 4.2);
• Execute athlete-initiated sharing of content to the user’s own connected social media accounts (only with consent, as described in the Terms of Use Section 4.2);
• Facilitate Cross-Posting of athlete content to Athlead-operated social accounts (only with consent, as described in the Terms of Use Sections 4.3–4.6);
• Enable livestream features and coach viewing (only with consent, as described in the Terms of Use Section 5);
• Provide in-platform email features through connected email accounts (only with consent, as described in the Terms of Use Section 8);
• Maintain safety and security, including content moderation, message logging for minor-safety purposes, and fraud prevention;
• Comply with legal obligations, including COPPA, the Texas SCOPE Act, and other applicable youth-privacy laws; and
• Respond to and process guardian consent grants, revocations, and rights requests.

We do not use known minors’ personal information for targeted or behavioral advertising. We do not use known minors’ personal information for any purpose not disclosed in this Privacy Policy and consented to by the user or their guardian.

6. How We Share Your Information

6.1 With Your Consent (or Guardian Consent for Users Under 16)

• Colleges and Recruiters: Profile information shared with verified college coaches based on your preferences. For users aged 13 to 15, this sharing is enabled by Parent Approval (see Section 7.2). Sharing with anyone other than college coaches requires the guardian to turn on the relevant sharing control.
• Coaches and Schools: Academic and athletic data for recruitment purposes, subject to the same consent requirements.
• Your Own Social Media Accounts: When you (or your guardian) direct a share, we transmit the selected content and the athlete’s profile name to the destination platform you have connected. See the Terms of Use Section 4.2.
• Cross-Posting to Athlead Social Accounts: Athlete highlight content shared on Athlead-operated external social media accounts, only with the user’s (or guardian’s) affirmative opt-in consent. See the Terms of Use Sections 4.3–4.6.

6.2 Service Providers

We share information with third-party service providers who help us operate our platform, including: cloud hosting providers; payment processors; email service providers; analytics providers (operating in privacy-preserving mode for minor users); and OpenAI, our AI and large language model service provider (to operate Alex and AI-driven features, as described in Section 4.1). All service providers receive only the data necessary to perform their contracted services and are contractually prohibited from using the data for any other purpose.

6.3 Legal Requirements

We may disclose information when required by law or to protect our rights, safety, or property. This includes disclosures to law enforcement or the National Center for Missing & Exploited Children (NCMEC) as required under 18 U.S.C. § 2258A.

6.4 No Sale or Sharing of Known-Minor PII

Athlead does not sell, lease, or share a known minor’s personally identifiable information with third parties for purposes unrelated to the operation of the Services. We do not share known minors’ data for third-party advertising, marketing, or profiling purposes.

6.5 Business Transactions

We may disclose personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction. Any recipient may use the information only as permitted by this Privacy Policy unless it provides notice of materially different practices and obtains any consent required by law.

6.6 Google User Data and Limited Use

If you choose to connect a Google account (Gmail) to Athlead, we ask for access through Google’s OAuth consent screen and access your Google user data only to provide email features inside Athlead. Using the gmail.readonly and gmail.send scopes and your basic Google profile (email address and name), we let you read and display messages and compose and send recruiting emails from your connected mailbox directly within Athlead. Athlead does not modify messages, read state, or labels in your Gmail mailbox.

For minor users: Users aged 13 to 15 do not connect a Google account themselves; a guardian to whom the minor has delegated recruiting email may operate email features on the minor’s behalf from the guardian’s own account. Users aged 16 to 17 may connect their own Google account independently. See the Terms of Use Section 8 for email-connection consent requirements.

We access this data only while providing those features, store OAuth tokens and any cached message data using encryption and strict access controls, and let you disconnect your Google account at any time, which revokes our access. We do not sell Google user data, do not use it for advertising, and do not transfer it except as needed to provide these features to you.

No AI training on Google data: Notwithstanding Section 4.2, we do not use data obtained through Google APIs, including the content of your Gmail messages, to train, develop, or improve any generalized or non-personalized artificial intelligence or machine-learning models. Humans do not read this data except where you expressly allow it, where required for security or to comply with applicable law, or in aggregate and de-identified form.

Athlead’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Age Requirements, COPPA Compliance, and Youth Privacy Protections

7.1 Age Restrictions — No Users Under 13

Children under the age of 13 are not permitted to create an account, use, or access any part of our Services. We do not knowingly collect personal information from children under 13. Our registration process includes a neutral age gate: athletes must enter their date of birth, and anyone under 13 is blocked from creating an account. Coaches and parents or guardians must confirm that they are at least 18 years old. If we learn that a user is under 13, we will immediately suspend the account; delete or de-identify associated personal information from active systems within 72 hours, except information that must be retained for security, legal, or reporting obligations; isolate residual backup copies from further use and delete them through our ordinary backup-expiration process; and notify the parent or guardian if contact information is available.

7.2 Users Aged 13 to 15 — Parent Approval and Sharing Controls

A user aged 13 to 15 may create an account and begin onboarding, but the profile does not become active until a parent or legal guardian approves it. The minor provides the guardian’s name, email address, and relationship; we send the guardian an approval request. To approve, the guardian signs in to their own Athlead account, reviews a plain-language summary of our data practices and of the sharing controls, and affirmatively approves the account by checking an unchecked (never pre-selected) box. Approval accepts the Terms of Use and this Privacy Policy on the minor’s behalf.

Parent Approval enables the core recruiting use of the Services only: a profile visible to verified college coaches, messaging with verified college coaches, and the academic and athletic information on that profile. Every way the minor’s content or identity can reach an audience other than college coaches, or leave the platform, is a separate sharing control that is off until the guardian turns it on:

(i) Public profile;

(ii) Public posts and highlights;

(iii) Share links;

(iv) Cross-posting to the minor’s own connected social media accounts;

(v) Livestreaming; and

(vi) Messages from non-coaches.

The guardian may turn any control on or off at any time from the Athlete Controls screen in their own account, effective immediately for new sharing. The minor’s profile will not become active or visible until the guardian completes Parent Approval. See the Terms of Use Section 2.2.

7.3 Users Aged 16 to 17 — Self-Consent

Users aged 16 to 17 may create their own accounts and accept the Terms of Use and this Privacy Policy independently; no guardian approval or notification is required. Sharing controls a guardian set before the user turned 16 remain as set until the user changes them.

7.4 COPPA Compliance

We comply with the Children’s Online Privacy Protection Act (COPPA) and its implementing regulations at 16 C.F.R. Part 312. Because we block account creation by users under 13 and do not direct our Services to children under 13, our COPPA compliance posture is as follows:

(a) If we discover that personal information has been collected from a child under 13, including through edge cases such as roster imports, seeded profiles, or misrepresented ages, we will delete that information within 72 hours and suspend the associated account;

(b) We maintain a written information-security program and data-retention practices consistent with the 2025 COPPA amendments (compliance deadline April 22, 2026); and

(c) Parents and guardians may contact us at privacy@athlead.ai to report a suspected under-13 user.

7.5 Guardian Rights and Consent Management

Guardians of users aged 13 to 15 have the following rights, exercisable from their own account or by contacting us at privacy@athlead.ai:

(a) Review: View the current state of each sharing control for the minor;

(b) Sharing Controls: Turn any sharing control on or off at any time, effective immediately for new sharing;

(c) Delete: Request deletion of the minor’s account and all associated personal information;

(d) Correct: Request correction of inaccurate personal information; and

(e) Act on Behalf: Perform recruiting actions the minor has delegated to the guardian, recorded as done by the guardian on the minor’s behalf.

Guardians do not have access to the content of the minor’s messages through the Services. For users aged 16 to 17, a guardian’s authority over the sharing controls ends; the settings remain as last set until the user changes them, and the guardian may still request deletion where permitted by applicable law.

Terms acceptances are recorded in an append-only log, and the current state of each sharing control is retained with the identity of the last person to change it. These records are retained for a minimum of 3 years following account deletion for compliance and audit purposes.

7.6 State-Specific Protections — Florida Residents

To the extent the Services are a covered platform under Florida House Bill 3 (2024), Florida residents under 14 may not hold an account, and Florida residents aged 14 or 15 may use the Services only with guardian consent obtained through the Parent Approval described in Section 7.2. A Florida guardian may revoke consent at any time, in which case we will terminate the minor’s account and delete the minor’s personal information as required by that law. Where the law of another state imposes stricter requirements, we will apply those requirements to residents of that state.

7.7 Jurisdictional Applicability

Youth-privacy, age-assurance, and social-media laws vary by jurisdiction and may be subject to exemptions, regulatory guidance, or court orders. We apply requirements that govern the Services based on the user’s location, the features offered, and the law then in effect. Where a jurisdiction provides stronger protections than this Policy, we apply those protections to covered users.

8. Guardian Tools

A guardian exercises the rights described in Section 7.5 from their own Athlead account: the Athlete Controls screen for sharing controls and the guardian dashboard for delegated recruiting actions (Terms of Use Section 10). A single guardian account may be linked to multiple minor accounts. Guardians are authenticated when they approve a minor’s account.

9. No Precise Geolocation and No Targeted Advertising

No Precise Geolocation: Athlead does not collect precise geolocation data (latitude/longitude or GPS-level location) from known minors. We do not request location permissions from minor users’ devices. We have reviewed our livestream features, event check-in flows, and mobile SDK configurations to confirm that no precise geolocation is collected from minors. Coarse location data (such as state or region derived from IP address) may be used solely for regional recruiting relevance and geographic legal compliance.

No Targeted Advertising: Athlead does not display targeted or behavioral advertising to known minors. Our analytics stack (including PostHog) is configured so that no behavioral profiles are built for advertising purposes for minor users. Any advertising shown to minor users is contextual only (based on the page or feature being viewed, not the user’s personal data or behavior).

10. Academic Records and FERPA

The Family Educational Rights and Privacy Act (“FERPA”) protects the privacy of education records maintained by educational institutions that receive federal funding. FERPA’s disclosure-consent and access requirements apply directly to educational institutions, not to Athlead. However:

(a) Where we receive academic records directly from an educational institution, we accept them only under a valid authorization, such as a signed consent from the parent or eligible student, or through the school-official exception under 34 C.F.R. § 99.31(a)(1), as determined by the disclosing institution;

(b) We use academic records received from educational institutions solely for the recruiting and profile purposes for which they were provided;

(c) We will not redisclose academic records sourced from educational institutions to third parties beyond the coaches and institutions identified in the user’s or guardian’s consent, except as required by law; and

(d) We treat all academic information (whether institution-sourced or user-provided) as sensitive data and apply data-minimization and sharing restrictions.

11. Social Sharing, Cross-Posting, and Livestream Data Practices

Athlete-Initiated Sharing: When a user (or guardian) directs a share of athlete content to the user’s own connected social media account (pursuant to the consents described in the Terms of Use Section 4.2), we transmit the selected content and the athlete’s profile name to the destination platform for that share. Content posted to the user’s own account is thereafter governed by the destination platform’s terms and controlled through that account.

Cross-Posting: When athlete highlight content is Cross-Posted to Athlead-operated external social media accounts pursuant to the opt-in consent described in the Terms of Use Sections 4.3–4.6, we share the athlete’s first name, last initial, sport, graduation year, and the content itself with the external platform. We do not share the athlete’s direct contact information, school name, or precise location in Cross-Posts. Withdrawal of Cross-Posting consent stops new sharing. We will request removal of content from accounts we control within 30 days, but copies, re-shares, search results, archives, or content controlled by another person or platform may remain subject to that platform’s practices.

Livestream Appearance: When a livestream includes identifiable minor athletes and is shared with coaches, the following data may be visible to viewers: video/audio of the minor and (if the minor’s profile is linked) the minor’s first name, sport, and graduation year. Livestream Appearance consent is required as described in the Terms of Use Section 5, and Athlead confirms that consent is on file for tagged or linked under-16 athletes before enabling coach access. Recorded or clipped livestream content is retained subject to our data-retention schedule and may be removed upon guardian request.

12. Your Privacy Rights

12.1 General Privacy Rights

Depending on your location, you may have rights including:

• Access: Request a copy of your personal information;
• Correction: Update or correct inaccurate information;
• Deletion: Request deletion of your information;
• Portability: Request your data in a portable format; and
• Opt-Out: Opt out of certain data uses, including AI training.

12.2 Who May Exercise Rights for a Minor

For users aged 13 to 15: The guardian exercises all privacy rights on the minor’s behalf.

For users aged 16 to 17: The user may exercise privacy rights independently. The guardian may also exercise rights on the minor’s behalf, subject to verification. Where a conflict arises between a 16- or 17-year-old user and their guardian regarding a privacy request, we will resolve the conflict in accordance with applicable law and in the best interest of the minor.

Verification: We verify the identity of the person making a rights request using reasonable methods, which may include email confirmation, knowledge-based questions, or government-issued identification. Guardian requests are verified against the guardian account linked at onboarding.

12.3 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of personal information collected, the sources, purposes, and third parties with whom we share it;
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions;
• Right to Correct: Request correction of inaccurate personal information;
• Right to Opt Out: Opt out of the “sale” or “sharing” of personal information for targeted advertising (note: Athlead does not sell personal information and does not share known minors’ personal information for targeted advertising);
• Right to Limit: Limit the use of sensitive personal information;
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights; and
• Authorized Agents: You may designate an authorized agent to make requests on your behalf.

12.4 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws.

Legal Basis for Processing: We process your data based on: consent (for optional features like AI training, social sharing, Cross-Posting, email connection, and livestream appearance); contract performance (to provide our Services); legitimate interests (for platform improvement and fraud prevention); and legal obligations (for compliance requirements).

Your GDPR rights include: access; rectification; erasure (“right to be forgotten”); restriction of processing; data portability; objection to processing based on legitimate interests; and withdrawal of consent at any time (where consent is the legal basis). You also have the right to lodge a complaint with your local data protection authority.

12.5 Canadian Privacy Rights

If you are a Canadian resident, you have rights under applicable provincial and federal privacy laws, including: access to your personal information; correction of inaccurate information; withdrawal of consent for certain data uses; and the right to file complaints with the Privacy Commissioner of Canada or provincial privacy commissioners.

12.6 Other Jurisdictions

We respect privacy rights under applicable laws in other jurisdictions. If you believe you have additional rights under your local privacy laws, please contact us.

12.7 How to Exercise Your Rights

To exercise any of these rights: Email privacy@athlead.ai; use the online form available through your account settings; or write to Athlead.AI, Inc. We will respond to your request within the timeframes required by applicable law (typically 30 to 45 days). We may need to verify your identity before processing your request.

13. Data Security

We implement commercially reasonable security measures to protect your information, including:

• Encryption of data in transit and at rest;
• Secure data storage and transmission;
• Regular security assessments;
• Role-based access controls and authentication;
• A written information-security program consistent with the requirements of the 2025 COPPA amendments and applicable state youth-privacy laws; and
• Append-only audit logging for consent records.

However, no system is completely secure, and we cannot guarantee absolute security.

Security Incidents: If we determine that a security incident involving personal information requires notice under applicable law, we will notify affected users, guardians, regulators, or other parties within the required time and by the required method. Notices will describe the incident, the information involved, steps we have taken, recommended protective actions, and how to contact us, to the extent permitted by law and consistent with security and law-enforcement needs.

14. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, subject to the following retention schedule:

• Active Account Data: Retained while the account remains active. After deletion or deactivation, we delete or de-identify the data according to the category-specific periods below. Where two periods could apply, the shorter period governs unless retention is required for security, fraud prevention, legal compliance, dispute resolution, or an active safety matter.
• Minor Profile Information: Deleted within 90 days of account deletion or guardian-requested deletion, unless retention is required by law or for an active legal or safety matter.
• Direct Messages Involving Minors: Retained for 1 year after the last message in a conversation, or longer if required by law or for active safety reviews.
• Livestream Recordings and Clips: Retained for 1 year after creation, or until removed upon guardian or user request, whichever is sooner.
• Consent Records (Audit Logs): Retained in append-only format for a minimum of 3 years following account deletion, for compliance and audit purposes.
• Payment Records: Retained as required by applicable tax and financial regulations (typically 7 years).
• AI Training Datasets: If you opt out of AI training, your data will be excluded from future training runs. Data already incorporated into trained models cannot be individually extracted but will not be re-ingested.
• Connected Email (Google API) Data: OAuth tokens are deleted upon account disconnection. Cached Gmail message data is deleted within 30 days of account disconnection.
• Under-13 Data: If we discover that data has been collected from a user under 13, associated personal information will be deleted or de-identified from active systems within 72 hours, except information that must be retained for security, legal, or reporting obligations. Residual backup copies will be isolated from further use and deleted through our ordinary backup-expiration process.

Backups, De-Identification, and Legal Holds: Deletion from active systems may not immediately remove information from encrypted backups. Backup copies are isolated from ordinary use and deleted according to the backup-expiration schedule unless restoration is required for disaster recovery. We may retain information beyond a stated period when reasonably necessary for a legal hold, safety investigation, fraud prevention, dispute, or statutory obligation. When we de-identify information instead of deleting it, we maintain measures designed to prevent re-identification and do not attempt to re-identify it except to test those measures or as permitted by law.

We review our retention practices periodically to ensure compliance with applicable data-minimization requirements, including those under the Texas SCOPE Act.

15. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our platform at least 30 days before the changes take effect. For minor users aged 13 to 15, material changes that affect the sharing controls or data practices will require the guardian to review and re-affirm Parent Approval before the minor’s continued use.

17. Contact Us

If you have questions about this Privacy Policy, contact us at: Email: privacy@athlead.ai | Address: Athlead.AI, Inc. | Phone: Available upon request.