Privacy Policy

OnChalk ("we," "us," or "our") operates the OnChalk platform, including the website at onchalk.com and the OnChalk web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

Data Collection and Usage

We collect information that you provide directly to us, as well as information collected automatically when you use the Service.

Information You Provide

• Account information: When you create an account, we collect your name, email address, and any other information you choose to provide in your profile.
• Organization data: If you create or join an organization, we collect information related to team management, rosters, evaluations, and coaching materials.
• Playbook content: Plays, installs, signals, and other coaching content you create within the platform.
• Payment information: When you subscribe to a paid tier, payment details are collected and processed by our payment provider (see "Stripe Payment Data" below).
• Waitlist submissions: If you join our waitlist, we collect your email address and, optionally, your name.
• Communications: When you contact us at support@onchalk.com, we collect the content of your message and any information you choose to provide.

Information Collected Automatically

• Usage data: Pages visited, features used, and interactions within the Service.
• Device information: Browser type, operating system, device type, and screen resolution.
• Log data: IP address, access times, and referring URLs.

COPPA Compliance and Age Requirements

OnChalk is a youth sports coaching platform. We take the privacy of minors seriously and comply with the Children's Online Privacy Protection Act (COPPA).

• Age minimum: Users must be at least 13 years of age to create an account on OnChalk. We do not knowingly collect personal information from children under 13.
• Guardian accounts: Parents and guardians may create accounts to view their child's evaluations, feedback, and progress. Guardian accounts provide read-only visibility and do not require the child to have their own account.
• Parental notification: If we discover that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at support@onchalk.com.

Firebase and Google Cloud Data Processing

OnChalk is built on Google Cloud infrastructure, including Firebase services. Your data is processed and stored using the following services:

• Firebase Authentication: Manages user sign-in and identity verification.
• Cloud Firestore: Stores application data including user profiles, organization data, playbooks, evaluations, and other platform content.
• Cloud Functions: Executes server-side logic for data processing and integrations.
• Firebase Hosting: Serves the OnChalk website and web application.

All data is encrypted in transit using TLS and at rest using Google Cloud's default encryption. For more information about Google Cloud's data processing practices, see the Google Cloud Data Processing Addendum.

Stripe Payment Data

OnChalk uses Stripe to process subscription payments. When you subscribe to a paid tier:

• Payment card details are collected and processed directly by Stripe. OnChalk does not store your full credit card number, expiration date, or CVV on our servers.
• We receive and store a limited set of payment information from Stripe, including your subscription status, billing email, and the last four digits of your card for display purposes.
• Stripe's handling of your payment data is governed by the Stripe Privacy Policy.

Cookies and Analytics

We use cookies and similar technologies to operate and improve the Service.

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors interact with our website. GA4 collects information such as pages visited, session duration, and general geographic location (country or region level). GA4 does not collect personally identifiable information by default. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Essential Cookies

We use essential cookies to maintain your session and authentication state. These cookies are necessary for the Service to function and cannot be disabled.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account data: Retained for the duration of your account. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Playbook content: Retained for the duration of your account. Coach-owned playbooks are deleted when the owning coach deletes their account.
• Organization data: Retained for the duration of the organization's account. Individual member data is removed when a member leaves or is removed from the organization.
• Payment records: Transaction records are retained for 7 years to comply with financial reporting and tax obligations.
• Analytics data: Aggregated analytics data is retained for up to 26 months.
• Waitlist data: Retained until you request removal or the waitlist is no longer active.

Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update or correct inaccurate personal information through your account settings or by contacting us.
• Deletion: You may request deletion of your account and associated personal data. We will process deletion requests within 30 days, except where retention is required by law.
• Portability: You may request an export of your personal data in a structured, commonly used format.
• Objection: You may object to certain processing of your personal information, such as direct marketing.

To exercise any of these rights, please contact us at support@onchalk.com. We will respond to your request within 30 days.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: With third-party providers who assist us in operating the Service (e.g., Google Cloud, Stripe), subject to confidentiality obligations.
• Within organizations: If you are a member of an organization on OnChalk, certain information (such as your name, role, evaluations, and coaching assignments) may be visible to other members of that organization as necessary for the Service to function.
• Legal requirements: When required by law, regulation, legal process, or enforceable governmental request.
• Protection of rights: When necessary to protect the rights, safety, or property of OnChalk, our users, or the public.

Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will notify you by email or through a prominent notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

OnChalk
Email: support@onchalk.com