Privacy Policy

The Service is built for adult coaches and program administrators. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected information from a child, contact us at hello@greatdayfor.com and we will delete it.

Athletes do not create accounts on the Service. Coaches may type athlete first names into rosters they manage; those names are stored as part of the coach’s own records and are not accessible to other organizations.

We collect two categories of information:

• Account information you provide. Your full name, email address, password (stored hashed), and team / program names you create.
• Content you create. Practice plans, drill notes, roster entries (typically first name + age group), invitations sent to teammates, and any other content you enter into the Service.
• Operational information. Server logs (request paths, timestamps, IP addresses) and basic error telemetry (browser, page, and stack-trace context) used to keep the Service reliable.
• Billing information, if you upgrade. Payments are processed by Stripe. Your card details go directly to Stripe and are never stored on our servers; we keep only your Stripe customer reference, subscription tier and status, and billing-period dates.

• To provide and operate the Service (signing you in, saving plans, sending invitations).
• To improve the Service (diagnosing bugs, prioritizing features, understanding aggregate usage).
• To send transactional emails such as welcome and invitation emails.
• To respond to your requests for support or feedback.

We do not sell your personal information, and we do not use Your Content to train machine-learning models.

We rely on the following infrastructure providers to deliver the Service:

• Supabase — authentication, database hosting, and file storage for logos.
• Vercel — application hosting and content delivery.
• Resend — transactional email delivery (welcome emails, team invitations).
• Sentry — error and crash telemetry.
• Stripe — payment processing for Coach Pro subscriptions. Card details are collected by and stored with Stripe; they never touch our servers.

Each subprocessor is bound by its own privacy and security obligations. This list will change as our infrastructure evolves; the “Last updated” date above will reflect any change.

We use a small number of strictly necessary cookies and local-storage entries to keep you signed in (set by Supabase auth) and to remember UI preferences such as your selected theme. We do not use third-party advertising or cross-site tracking cookies.

We share information only:

• With teammates and coaches you invite into your organization, scoped to your team and program.
• With subprocessors listed above, strictly to operate the Service.
• When required by law (subpoena, court order) or to protect against fraud or imminent harm.

We retain your account and content for as long as your account is active. When you delete your account we delete personally identifying information from our active systems within 30 days; encrypted backups age out on their own schedule (typically within 90 days). Anonymized aggregate metrics may be retained for product analytics.

For paid subscriptions: when you cancel, access continues to the end of the billing period, after which your organization returns to the Free plan with your content kept readable. Billing records (invoices and transaction history) are retained as long as required for tax and accounting purposes, even if you later delete your account. Stripe retains payment records under its own retention policy.

You may at any time:

• Access and update your account information from the settings page.
• Request a copy of your data, or deletion of your account, by emailing hello@greatdayfor.com. We respond within 30 days.
• Object to or request limitation of certain processing, where applicable law (such as the GDPR or CCPA) provides those rights.

We use industry-standard encryption (HTTPS in transit, encryption at rest for the database and file storage) and tenant-isolating access controls (Postgres Row-Level Security). No system is perfectly secure; in the event of a breach affecting your data, we will notify you promptly and follow applicable breach-notification laws.

The Service is operated from the United States. By using the Service from outside the U.S. you consent to the transfer of your information to the U.S., which may have different data-protection laws than your country of residence.

We may update this Policy from time to time. We will update the “Last updated” date and, when changes are material, notify you by email.

Questions about this Policy or our data practices? Email us at hello@greatdayfor.com.