Privacy Policy

Information We Collect

• Student-athlete name, email, school affiliation, team, grade, graduation year, and profile information
• Coach, parent, and authorized user account information
• Strength and performance data, including lifts, bodyweight, workout activity, scores, and PRs
• Workout logs, session completion data, and coach review decisions
• Nutrition and meal tracking information
• Parent access requests, parent-athlete relationships, and approval status
• System activity records such as access logs, timestamps, and security events

Why Information Is Collected

Information is collected only to provide athletic performance tracking, team management, coach oversight, parent-approved visibility, progress monitoring, and program administration.

How Information Is Used

• To allow athletes to track workouts, progress, nutrition logs, and personal records
• To allow coaches to review athlete activity, approve lifts, and manage team settings
• To allow approved parents or guardians to view linked athlete information in read-only form
• To support team performance monitoring and program administration
• To maintain platform security, audit activity, and prevent unauthorized access

No Sale or Advertising Use of Student Data

RACKSTAT does not sell, rent, trade, or monetize student data. Student information is not used for targeted advertising, behavioral advertising, or unrelated marketing purposes.

Who Can Access Information

• Student-athletes may access their own account and performance information
• Authorized coaches and school personnel may access athlete information within their assigned school or program
• Approved parents or guardians may access read-only information for linked athletes only
• Platform administrators may access information only as needed to operate, secure, support, or troubleshoot the platform
• Information may be disclosed if required by law or directed by authorized school personnel

Student Data & School Control

RACKSTAT acts as a technology service provider to participating schools and athletic programs. Student data remains under the control of the school, district, or authorized program personnel.

Parent and Student Rights

Parents, legal guardians, and eligible students may request access to, correction of, or deletion of student information in accordance with applicable law and school policy. Requests may be made through coaching staff, school administration, or privacy@rackstatapp.com.

How Information Is Protected

• Encrypted HTTPS/TLS connections
• Firebase Authentication for secured account access
• Role-based access controls
• Firestore security rules restricting unauthorized cross-school or cross-user access
• Firebase App Check protections against unauthorized client access
• Audit logging for selected sensitive access and account activity
• Cloud-hosted infrastructure managed by Google Firebase / Google Cloud

Data Retention and Deletion

Student and user data is retained for as long as needed to support athlete participation, school program administration, legal obligations, security review, or platform operation. Deletion requests will be processed within a reasonable administrative timeframe, subject to legal, security, backup, or school-retention obligations.

Security Incidents

If RACKSTAT becomes aware of a confirmed security incident involving protected student information, affected educational institutions will be notified without unreasonable delay following confirmation of the incident and in accordance with applicable legal requirements.

Additional information about RackStat’s security practices and incident response process is available on our Security page.

Third-Party Infrastructure Providers

RACKSTAT uses Firebase and Google Cloud services to host, authenticate, store, and secure platform data. These providers support technical operation of the platform and are not permitted by RACKSTAT to use student information for advertising or unrelated marketing purposes.

No Medical or Nutritional Advice

RACKSTAT is not a medical provider, healthcare service, dietitian, or nutritional advisory platform. Information entered into RACKSTAT is used for tracking and awareness only.

Policy Updates

This Privacy Policy may be updated periodically to reflect operational, legal, or security changes.

Contact Information

Questions, privacy requests, security concerns, or data deletion requests may be directed to privacy@rackstatapp.com, security@rackstatapp.com, or support@rackstatapp.com.