Privacy Policy

Account Information

• Full name and email address (for authentication and communication)
• Assigned role: athlete, parent, coach, or admin
• Profile details: sport, team, position, age group (athlete); display name and team organization (coach); display name and relationship context (parent)
• Sign-in method: you may sign in with email and password, Google, or Sign in with Apple. With Apple, we receive a stable Apple identifier and, if you choose to share it, your email (which may be a private relay address). We do not receive your Apple password.

Athlete Development Data

• Identity assessments: Athlete Operating System (AOS) and Competitive Operating System (COS) responses, plus Observer Support System (OSS) and Coach Leadership System (CLS) responses for parents and coaches
• Daily check-ins: Self-reported energy, confidence, focus, pressure, sleep, hydration, nutrition, and mental state, plus optional reflection notes
• Mental Reps: Mission selections, phase progress, commitment text, and completion records
• Reflections: Athlete-written reflection text tied to Mental Reps
• Journey and growth signals: Derived development signals, growth evidence, and journey narrative chapters
• Activity records: Logged activities (practice, games, strength training, recovery) with duration and intensity

Connection and Consent Data

• Relationships between athletes, parents, and coaches (with status: pending, active, inactive, declined, removed)
• Consent scopes defining what data a parent or coach may access (growth snapshot, journey chapter, consistency, coach insights)
• Permission decisions and audit trails for governance

Coach Conversation Data

When you use "Ask T90," your athlete context — including your latest check-in, identity profile, journey chapter, reflection themes, and conversation history — is sent to a third-party language processing provider to generate coaching responses. Conversations are stored in your account and are never shared with parents or coaches.

Optional Calendar Data

If you connect your calendar, T90 reads upcoming events to provide calendar context (e.g., "Game tomorrow — focus on composure"). Calendar data is optional and can be disconnected at any time.

Device and Session Information

We derive a session label from your device's operating system and browser type (e.g., "iOS · Safari") for session management. When push notifications are available, a device notification token may be stored to deliver notifications; in this version T90 delivers notifications in-app only and does not use advertising identifiers or precise location data.

Subscription and Purchase Data

If you purchase a T90 membership through the Apple App Store, we receive subscription metadata needed to provide and manage your access — including the Apple product identifier, transaction identifiers, purchase status, expiration date, and renewal state. Apple purchases are verified through Apple's App Store Server API and Server Notifications. We link your purchase to your T90 account using an appAccountToken bound at purchase time. We do not receive or store your Apple ID password or full Apple account details.

• To authenticate your account and route you to the correct portal (athlete, parent, coach, or admin)
• To generate personalized Daily Reads, Mental Reps, readiness states, and next best actions
• To build and display your identity profiles (AOS, COS, OSS, CLS)
• To track your development journey, growth signals, and consistency streaks
• To power Ask T90 coaching responses using your development context
• To provide permission-safe summaries to connected parents and coaches
• To send in-app notifications about daily reminders, milestones, and growth signals
• To maintain audit trails for governance, security, and compliance
• To provide account settings, privacy controls, and session management

We do not use your data to build scores, rankings, comparisons between athletes, or advertising profiles.

Athletes

Athletes can see all of their own data, including raw assessment responses, check-in answers, reflections, and journey details.

Parents and Coaches

Parents and coaches can only see interpreted, permission-safe summaries of an athlete's development — and only after an active relationship and consent scope are in place. They cannot see:

• Raw assessment answers or slider responses
• Private reflection text
• Raw check-in answers (only derived states like "steady" or "strong" are shared, and only if consented)
• Scores, rankings, or comparisons to other athletes
• Coach conversation history

Consent scopes include: growth snapshot, journey chapter, consistency, and coach insights. Athletes can revoke consent at any time from their privacy settings.

Admins

Approved admins can access platform-level operational data (engine execution logs, audit events, system health) for governance and support. Admins cannot see raw athlete assessment answers or private reflections.

Third-Party Processing Provider

When you use Ask T90, your development context is sent to a third-party language processing provider to generate responses. This data is processed to generate your coaching response and is not used to train models on your personal data.

We retain your data for as long as your account is active. You can request deletion of your account and personal data at any time from Settings → Delete Account.

When you delete your account, we remove your profile data, assessments, check-ins, Mental Reps, reflections, journey records, coach conversations, and notification history. Anonymized audit records may be retained where required for security, legal, or governance compliance — these records are stripped of personally identifiable information.

Connection and consent records for relationships involving other users (e.g., a parent connected to an athlete) are deactivated (status: "removed") so that the other party loses access to your data, while retaining a trace that the relationship existed for audit purposes.

T90's coaching (Ask T90) operates under strict governance rules:

• No medical or mental health advice: T90 does not diagnose, treat, or provide clinical guidance
• Crisis safety: If crisis-related language is detected (e.g., self-harm), T90 redirects to crisis support resources (text HOME to 741741)
• No diagnostic language: The governance engine blocks terms like "diagnosed," "disorder," "clinical," and "mental illness"
• No shaming or comparative language: The engine blocks language that shames, compares, or pressures athletes
• No raw scores in coaching output: All coaching responses are stripped of raw scores, percentages, and rankings before display
• Human authority preserved: T90 recommendations never override a coach's or parent's judgment

• Profile visibility: Control who can see your profile (supporters only, or private)
• Data sharing preferences: Choose what to share with connected parents and coaches (growth snapshot, journey chapter, consistency, coach insights)
• Communication flags: Enable or disable in-app and email notifications. Push delivery is not available in this version.
• Consent management: Grant or revoke consent scopes for specific parents or coaches at any time
• Session management: View and revoke active sessions
• Account deletion: Request deletion of your account and personal data at any time

We protect your data using industry-standard security measures, including encrypted data transmission (HTTPS), role-based access control, and a permission engine that enforces consent boundaries on every data request. All data access is logged in an audit trail for governance and compliance.

No method of transmission or storage is 100% secure. If a data breach occurs, we will notify affected users in accordance with applicable laws.

T90 is designed for athletes, including youth athletes. T90 is not directed to children under 13, and we do not knowingly collect data from children under 13. If you believe a child under 13 has provided personal information, please contact us so we can delete it.

For athletes under 18, a parent or guardian should review this Privacy Policy and consent to data collection. Parents and guardians can manage consent scopes and data sharing from their connected account.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Withdraw consent for data sharing at any time
• Object to or restrict certain processing of your data
• Request data portability

To exercise these rights, use the in-app privacy settings or contact us at the support email listed below.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or via email. The "Last updated" date at the top of this page reflects the most recent revision.

If you have questions about this Privacy Policy or your data, please contact T90 support through the app's Settings page or at the support email listed in the App Store or Google Play listing.