Legal

Privacy Policy

What changed on October 4, 2026: JotDown adds separate athlete journals to your account. You choose whether to keep journal text in your account, and separately whether to include personal reflections. Selected video, image and PDF files stay on your device. Coaches and Family connections do not automatically receive journal access. See section 4d.

Updated October 18, 2026: Players under 13 in Canada and the United States can use parent-held team or family profiles with IQ Game and JotDown. Parents confirm and receive an email. Teammate progress sharing is optional and starts off.

1. Who We Are

Rundown is operated by Rundown Sports ("Rundown," "we," "us," "our"), a sole proprietorship operated by Ben Meachen in Vancouver, British Columbia, Canada. Our website is rundownsports.app. You can reach us at privacy@rundownsports.app.

Our Privacy Officer (as required by PIPEDA and BC PIPA) is Ben Meachen, reachable at privacy@rundownsports.app.

2. Scope of This Policy

This policy explains what information we collect, how we use it, who we share it with, and your rights. It applies to signed-in Player and Coach accounts, team roster profiles, people using the free sample, and parents or guardians managing their own accounts. If you are a parent of a player under 13, please also read our Parents Corner.

This policy is intended to comply with:

3. What We Collect for Signed-In Accounts

Creating a Rundown account uses your own email address. New accounts start with the Player role. Existing-account sign-in does not create an account. A roster profile that a coach creates for a player is a separate record; adding someone to a roster does not itself collect that player's email address.

For Coach accounts, we also hold the name supplied for the account, adult and coach confirmations, and the team name, sport, season label, and roster structure the coach creates. A head coach may also upload a team logo image. It is the team's badge, must not show a person, and appears only on that team's signed-in pages and in the app for that team's players and coaches. We do not use it anywhere else. For web season passes, we hold payment status and transaction identifiers from Stripe.

Parents use their own email to hold an under-13 child's profile, give the guardian confirmation and receive a confirmation email. Team profiles use the team code; family-only profiles need no team. See section 5.

To authorize new account creation, our server temporarily keeps an email fingerprint, a random one-use token, the eligibility declaration, notice version and creation and expiry times, together with the country and adult choices described in this policy. If an adult voluntarily supplies acquisition information, the same protected record temporarily carries it to the new account. The token expires after five minutes and is removed when used. Unused records are removed by a cleanup job every 15 minutes or sooner when another signup request runs. These records do not enroll anyone in marketing email. Account deletion also removes pending records for that email.

Rundown does not receive or store your full card number, Apple Account payment credentials, or App Store password.

The account holder's declared country, its source, notice version and date, for account information and the starting web checkout currency.

Adults may optionally tell us how they heard about Rundown when creating an account. Separately, an adult may choose to save shared campaign labels, the referring website's origin and the entry page on that device for up to 30 days, so we can attach that first captured visit to the account if they sign up. We do not save full referring URLs or query strings. We link these optional fields to the adult account to understand how adults find Rundown. We do not collect these account-linked fields from children or child profiles, and they do not affect access, country, prices, parental consent or email choices. Visits before that choice and on other devices may be unknown.

A head coach may create a private, single-use assistant-coach invitation that expires after seven days. We keep its issuing account, team, token hash, and creation, acceptance, expiry or cancellation times to authorize team access. The accepting adult account becomes an assistant coach after accepting. The invitation secret is kept temporarily on that device for sign-in continuation; we do not use it for acquisition reporting. We delete expired, accepted or cancelled invitation records within 30 days after they end. Coach membership records follow the existing team-account retention rules.

3a. Support and Diagnostic Information

If you contact support or submit a report, we receive the message and any other content you choose to include. An in-app report may also include your Rundown user identifier, app version, build number, device and browser type, screen name, timestamp, and an error code. This information is connected to your account when you are signed in and is used only to provide support, diagnose faults, secure the service, and improve App Functionality.

Rundown does not use this information, purchase history, user identifiers, names, gameplay content, or account information to track you across other companies' apps or websites. We do not sell this information or use it for advertising audiences. The optional adult acquisition reporting described in sections 3 and 6 is separate from support, player information and purchase history.

3b. What We Collect from Email-Update Contacts

The email-updates list is for adult coaches and parents. We collect the adult's email address, whether they identify as a coach or parent, browser language or region, referral source, and signup time. We use this information to send product updates and coaching notes as permitted by law. Players should ask a parent or coach to join with the adult's email address.

4. Team Roster Profiles and Player Accounts

For each player on an active roster, we collect:

The parent account holds an under-13 profile. Coaches see roster details and IQ results. Teammates see first name, jersey, rank, completed rounds and correct-answer totals only with the parent's separate opt-in, off by default. Journal text is not available to coaches or teammates.

An adult parent or guardian connects from their own account using the team's private code, the player's roster first name and, if needed, jersey number. The parent confirms they are an adult parent or guardian. We record the account, roster profile and team, the player's entered label while a request is pending, and the notice version and time for each required confirmation.

For a player 13 or older, the coach explicitly confirms they know the requester is the player's parent or guardian and the player agreed to family play and IQ progress sharing. We record the confirming coach, time and notice version. No separate player-account approval is required. The managing parent must also approve an additional Family connection. This is separate from claiming the child's entry and does not grant journal access or turn on teammate sharing. An under-13 player already managed by that parent appears without a new Family request. A parent already connected to a player's profile does not need another request.

The coach and the current account holder can see the parent's optional account name and verified email. Pending requests show only the player's label entered by the parent, not matched player details or results. After connection, the player chooses their own roster profile to play IQ Game while the parent is signed in. Each round is recorded to that player's profile and team; the parent can follow the player's progress. Family play does not let the parent answer as the player or edit the player's account.

A connected parent can see only that player's first name, number, team, IQ totals and up to ten recent round summaries: sport, mode, played position, plays, correct answers and score. It excludes teammates' information, individual answers, precise round times, Team Signs, Swing Lab information and the player's account email, sign-in or payment records. A parent connection does not move an account or roster profile or add a paid spot. The parent, player or current managing parent, and a team coach can disconnect it.

Connections approved under earlier notices stay read-only until the required confirmations are recorded under notice version 2026-09-28-play. A prior approval does not automatically count as a fresh confirmation. For an under-13 player, the current managing parent continues to hold the player's account and roster profile. The family-play connection does not replace that account or the parent-held consent described in section 5. Contact privacy@rundownsports.app about a disputed or mistaken connection.

Team Signs stores the coach's sign mappings and published versions, which coach published each version, assignments to selected joined players, and those players' practice answers and results, including whether a replay or explanation was used. The coaches on that team can see assigned players' results; players can see their own results and their assigned signs. These records support team instruction, follow the player-record retention and deletion rules below, and are not public leaderboards or advertising data. Team Signs does not record players or coaches through a camera or microphone.

Roster forms do not ask for a player's full last name, home address, email address, phone number, or date of birth. A signed-in Player account does use an email address. We do not collect the following through player registration or rostered play:

4a. Swing Lab: Camera Features That Run On Your Device

Swing Lab reads a swing video on your device and gives feedback. Rundown never receives the video, pictures, body-position estimates or results. Swing Lab runs no analytics, advertising or error reporting of its own.

In iPhone app version 1.5 and later. Film with the app's camera or pick an original video from Photos. Opening Swing Lab checks with Rundown that your account or chosen player has Individual or Team access; that check uses your account and chosen player and sends no video, picture or read. The app deletes its working video file after the read, on cancel or failure, and on the next launch after a crash. Picking a video does not delete or change your Photos original. This version does not offer a saved video library or a Save video to Photos action. Clear Swing Lab history does not delete videos in Photos.

On the current website. Swing Lab reads the video in your browser. It keeps only the newest 20 results summaries: checkpoint counts, the time of the read, sport, age group and first suggested fix. No video, picture or body points are saved between visits. Clear this site's browser data to remove the summaries; they have no automatic expiry. Your original video stays where you saved it. Browser or device backups may include local website data under your own account. The app's new history controls and best-swing pictures are not on the website yet.

Adding a website clip to JotDown. If you deliberately choose Add this clip to JotDown on the website, the separate JotDown flow verifies your Rundown account and lets you review the athlete and clip before saving. It keeps a separate original-video copy in that browser's storage. It does not send video, frames, pose landmarks or a generated swing analysis to Rundown. This is separate from Swing Lab history and does not change how Swing Lab analyzes the video.

Downloads. The iPhone app includes its reading software and pose and bat models, so a read makes no network request. Retrieving an original from iCloud Photos, if needed, is separate from the read. The website downloads its reading software and pose model as described in section 4c.

Rundown does not collect photos, videos, voice recordings or biometric data from players through Swing Lab. The team-logo rule in section 3 is unchanged. If we change this to receive swing data, we will update this policy first and obtain new parental consent for anyone under 13 before the change takes effect.

4b. The Website's Free Practice Leaderboard

The free practice game on the website has a public leaderboard. The iPhone app keeps its free-practice name and scores on the device; it does not post them to this public leaderboard. Signed-in team practice can save results to the team's roster as described in section 4.

Under-13 parent-held profiles do not post to this public leaderboard. Team progress has the separate parent and coach access described above; teammate visibility requires the parent's opt-in.

4c. What Loads From Other Servers

Rundown serves its own type, so no font service is contacted from any Rundown page. Some website features load code or a model file from a third party. Those servers see your IP address and browser type, as they would for any web request. No gameplay answer, video, body-position data or journal text is included in these code and model downloads. Account-saving requests described in section 4d are separate.

In iPhone app version 1.5 and later, the database and sign-in library, Swing Lab reading software, pose model and bat models are bundled with the app. A Swing Lab read loads no code or model from another server. Retrieving an original from iCloud Photos, if needed, is separate from the read. Earlier versions of the iPhone app load the database and sign-in library from jsDelivr each time the app opens; no other part of those versions loads code, fonts or model files from a third party.

4d. JotDown: Your Player Journal

Each journal belongs to an athlete profile managed through a signed-in account. Supabase stores the profile's name, sport, managing-account identifier, any chosen roster link, and the dates and notice versions of your choices, even when entry saving is off. Parent-held under-13 profiles in Canada and the United States can use JotDown after the guardian confirmation described in section 5, including family-only profiles without a team.

Entry text stays in the device's browser storage until you choose account saving. If enabled, Supabase stores titles, dates, activity details, coach or facility labels, cues, observations, questions, homework and completion, links, measurements and their units and conditions, imported source records including selected CSV headings and row values, and attachment names, types, sizes and source labels. We use these records to provide the journal and open saved text on your other signed-in devices. Free text and imported records can contain personal information you choose to include.

Personal reflection saving is separate and off by default. Turning it off removes account copies of reflection fields and standalone reflection entries. Turning all account saving off removes account entry copies. Local copies remain. For an under-13 profile, the parent controls these choices and can review the child's journal; it is not hidden from the account holder.

Selected video, image and PDF files stay on the device where saved. Rundown does not receive their bytes, and account saving does not back them up. Another device can show file details without the original file. Clearing browser storage can erase local notes and files. Selected imports from IQ Game, Coaches Corner, Swing Lab or a local provider file do not connect an outside account; Swing Lab does not send video, pose landmarks or generated analysis to Rundown through JotDown.

Coaches, teammates and other Family connections cannot open journal text. A parent or other account holder can choose entries and files, preview an export and give that copy to someone. Reflection is excluded unless expressly selected. Rundown does not send the export or grant ongoing journal access. Recipients can keep copies that later journal deletion cannot retrieve.

You can review or export notes, delete entries, remove an athlete journal and clear local copies on the current browser. Account deletion removes the account's server-held journals. Turning off account saving or deleting server records does not remotely erase other devices, exports or printed copies. Server-held journal profiles and content are deleted after 24 months without JotDown activity through the managing account, or sooner on deletion. Local browser copies have no background deletion service; backups follow the provider's retention cycle and are not erased instantly.

We do not put journal text, imported source records or attachment names into advertising, analytics, the support assistant or AI training. Local entry saving remains available without account saving. For access, deletion or withdrawal, contact privacy@rundownsports.app.

5. Players Under 13

Players under 13 in Canada and the United States use an account their parent or legal guardian creates and holds with their own email. For team play, the coach marks the roster entry under 13. The parent signs in, takes that entry with the team code and taps the guardian confirmation. We send a confirmation email to the parent's address. The child has no separate login. For a family-only profile, the parent creates the child's profile and gives the same confirmation, with no coach or team code. We require the parent's permission before saving the child's play or journal entries.

We may hold a coach-supplied first name or nickname before confirmation under the inactivity limits below, deleting it sooner when no longer needed, on request or when permission is withdrawn. An unnamed entry claimed in app 1.3 shows as "Player #" with the jersey number until renamed.

We keep the child's profile name, sport, under-13 marker and account link; a team roster also holds an optional last initial, jersey number and position. IQ play adds answers, scores, played position and round times so the child and parent can follow progress and team coaches can guide practice. We record the parent account, child profile, team where applicable, confirmation, notice version, sharing choices and their dates, including withdrawal and confirmation-email records. Account and hosting services also process authentication identifiers, IP addresses, browser information and request times to run and secure Rundown.

Team coaches see roster details and IQ results. Other signed-in players on the team see an under-13 player's first name, jersey number, rank, completed rounds and correct-answer totals only if the parent separately opts in. This choice starts off, is not required to play and can be withdrawn. These profiles do not post results to the public leaderboard. A family-only profile has no coach or teammate view. Additional Family connections follow section 4 and do not grant journal access.

Rundown JotDown is available for these profiles in both countries. The athlete profile is stored with the parent's account. Entry text stays on the device until the parent enables account saving. Supabase then stores notes, homework, links, imported source records and attachment metadata. Selected video, image and PDF files always stay on the device. Personal reflection saving is separate and off by default. Coaches cannot open journal text. The parent can review and delete it through their account on the devices holding it. Section 4d explains saving, exports and deletion.

Supabase provides account and data storage, Netlify hosts Rundown, and Resend delivers account and parent notices. These services process information in the United States; section 4c describes connection information received by code providers. We do not sell children's information or use journal content for advertising, analytics, the support assistant or AI training. We do not ask children for an email address or birth date; information voluntarily typed into a journal is covered by section 4d.

Email privacy@rundownsports.app to review or correct your child's records, request deletion, withdraw permission or change teammate sharing. Withdrawing child-profile permission stops further collection and sharing for that profile; it does not require closing your own account. Roster and family IQ profiles and results are deleted on request or after 12 months without that child's activity; inactive-team records are deleted after 13 months. JotDown's separate retention and local-copy limits are in section 4d; account and other records follow section 12.

Parents enter their own age and email. Under-13s cannot create independent accounts. The exact entered age stays on the device; eligible new accounts retain only the eligibility declaration, notice version and time.

6. How We Use Information

The aggregate usage data in that last line is a small set of first-party counters we keep ourselves, such as how many practice rounds start in a day and how many results get shared: each one is a running total for a calendar day with no name, no account, no device identifier, no IP address and no cookie attached, it counts events rather than people, and nothing in it can be traced back to a player.

Some of these counters also note, as one fixed word, whether a round was started from our home page or from a link in one of our own named campaigns, such as an email or an ad; the counter receives only that word, never the link, the page address or anything about the person who followed it.

We do not use player information for advertising, profiling, or sale.

7. Service Providers (Sub-Processors)

We use the following vendors. Each has its own privacy practices and data processing terms. Most of our sub-processors are located in the United States. Personal information may be transferred to, processed, and stored in the United States.

We take reasonable safeguards (PIPEDA Principle 4.7) to protect personal information, including our providers' data processing terms, encryption in transit (TLS 1.2+) and at rest (AES-256), and access controls. We do not share player data with any third party for advertising. We do not sell player data.

Our founder can read adults' optional acquisition answers and captured source details in a restricted business dashboard. We use them only for internal acquisition reporting. We keep them separate from anonymous usage counters and do not use them to track children, follow people across websites, build advertising audiences or contact a referrer. We do not send them to advertising platforms, payment processors or email services.

8. Your Rights Under PIPEDA and BC PIPA (Canadian Residents)

To exercise these rights, email privacy@rundownsports.app. We will verify your identity and respond within 30 days.

9. Parental Rights Under COPPA (US Residents)

US parents can review or delete their child's information, stop further collection or withdraw teammate sharing separately. Email privacy@rundownsports.app. Section 5 explains the parent-held flow.

We do not disclose player information to third parties for marketing purposes regardless. Email privacy@rundownsports.app to exercise these rights.

10. California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of cross-context behavioural advertising (not applicable: we do not do this). Non-discrimination for exercising rights.

11. EU / UK Residents (GDPR / UK GDPR)

We do not target EU or UK residents. If you use the service while located there: our lawful bases are contract (for coaches), parental consent (for children under 16, Member-State-specific), and legitimate interest (for security). You have rights of access, rectification, erasure, restriction, portability, and objection.

12. Data Retention and Deletion

An optional source record stays on the device for up to 30 days unless it is cleared sooner. We delete identifiable account acquisition answers and source records within twelve months of saving them to the account, or sooner when you remove them or delete the account. We may retain totals that no longer identify an adult or team. Contact privacy@rundownsports.app to access, correct or remove saved acquisition information.

We keep personal information only as long as it is needed for the reason it was collected, and we do not hold a child's information indefinitely. The schedule below is the whole of it: what we hold, why we collected it, why we need to keep it at all, and when it is deleted.

Deleting a player record deletes the answers and scores attached to it. Numbers already counted into an anonymous total cannot be traced back to a player and are not affected.

Deleting an account used only to view a child through a parent link removes that link; it does not delete the child's separately held account, roster entry or results. If the parent account itself holds the child's roster entry, the existing account and roster deletion rules apply. Disconnecting a parent link is separate from deleting an account or withdrawing the consent for an under-13 player's managed roster entry.

You can request account deletion inside the signed-in app or by emailing privacy@rundownsports.app. A verified in-app request normally deletes the account and associated roster, gameplay, and entitlement data immediately. If a temporary service failure prevents immediate deletion, the request is queued and completed within 30 days. Records we must keep for tax, accounting, fraud prevention, disputes, or other law are separated from the deleted account and retained only in limited or pseudonymous form.

Deleting a Rundown account does not cancel an Apple subscription. Cancel it in your Apple Account settings before deleting your Rundown account if you do not want Apple to renew it.

13. Security

TLS 1.2+ in transit, AES-256 at rest, role-based access controls, least-privilege service accounts. We maintain a breach response plan and will notify affected individuals and the Office of the Privacy Commissioner of Canada as soon as feasible where a breach creates a "real risk of significant harm" (PIPEDA standard).

14. Children Under 13

Players under 13 in Canada and the United States use parent-held team or family profiles. IQ Game and JotDown are available. These profiles do not post results publicly. Swing Lab processes video on the device. See section 5 and Parents Corner.

15. Cross-Border Transfers

The service is operated from Canada. Most of our technical service providers are located in the United States. By using the service, you acknowledge that your information may be transferred to, processed in, and stored in the United States and other countries, where data-protection laws may differ from those in your country of residence. We take contractual and technical safeguards to protect your information regardless of where it is processed.

16. Changes to This Policy

We will post material changes here, update the Last Updated date and notify account holders by email. Before expanding collection, use or disclosure for a child under 13, we will provide a new direct notice and obtain new parental permission.

17. How to Contact Us

Privacy Officer: Ben Meachen (privacy@rundownsports.app)
General: support@rundownsports.app
Legal: legal@rundownsports.app
Mail: Rundown Sports, 1568 Nootka St, Vancouver, BC V5K 3K5, Canada