Privacy Policy

1. Scope and age boundary

Next Play Mode (legal operator to be identified before production launch) describes its data practices in this Privacy Policy. Launch-draft notice: before production launch, Next Play Mode must replace the operator placeholder, business address, and legal contact information after its legal entity is formed and confirm the actual product, vendors, pricing, and jurisdictions.

The Service is for users age 13 and older nationwide. We do not intentionally collect personal information from a child under 13 through an athlete account. If we discover such an account, we lock it, suspend reports/AI processing, preserve only necessary remediation metadata, and follow the applicable remediation and deletion procedure.

2. Information we collect

• Account and authentication data: name, email, age or date of birth, account role, authentication and security records.
• Sports mental-performance data: PPP questionnaire results, other Service assessments, training plans, check-ins, progress, sports profile data, and retained AI-chat history.
• Guardian data: guardian contact information, relationship attestation, authorization state, accepted document versions, capture-session metadata (code hash, issued date, randomized actions — never plaintext code after issuance), and verification audit records.
• Billing data: subscription status and transaction references. Stripe processes payment-card data; we do not store full payment-card numbers.
• Technical and security data: device/browser information, IP address, logs, and fraud/security signals.
• Institutional data: school or organization scope, authorized staff access, and agreement records.

3. Guardian identity-verification and biometric data (manual human review)

When a guardian authorizes a teen age 13–17, the guardian separately agrees to the Biometric Information Notice and Consent before any camera capture. A trained authorized reviewer (not an AI model) reviews the adult’s front and back government-ID images and short live-camera video in a no-store, authenticated review screen with Cache-Control: no-store, no CDN, no download endpoint, and no public URLs. The reviewer checks that the ID appears government-issued and unaltered, front/back belong to the same document where a back side is required, date of birth indicates an adult, face in video is visibly consistent with ID photograph, video shows the issued date and one-time code, requested actions, and ID front continuously, and attestation is present.

We treat facial images/video as potentially biometric information under some state laws and obtain prior written notice, purpose/term disclosure, and written release before collection. Illinois BIPA, Texas Business & Commerce Code §503.001, and Washington RCW 19.375.020 may impose separate biometric duties; we publish a retention/destruction schedule as required and do not rely on the photograph-vs-template distinction without jurisdiction-specific counsel review. The verification video must show the code and date, not the registered parent email or athlete name, to limit unnecessary personal data in the artifact.

Purpose is limited to verifying the adult completing the guardian authorization; media is used only for that purpose and is never used for advertising, general AI coaching, or cross-athlete/cross-organization enrichment. Maximum pending retention is 10 business days (America/Chicago, Mon–Fri, holiday calendar if notice excludes holidays); after approval, rejection, resubmission request, expiry, cancellation, or revocation, all raw media is purged within 15 minutes, with retry at most 24 hours and incident creation if purge persists. We retain only non-biometric audit metadata. If you decline consent, the teen account will not be activated through this path; if camera permission is denied or device unsupported, we keep the account locked with neutral retry messaging and do not offer an email-attachment bypass. A single reviewer decides the normal path; suspected fraud, accessibility problems, or disputes escalate for second review.

Security limits: encrypted quarantine on Contabo VPS with dedicated service account and separate encryption key, isolated from public files, course videos, backups, and snapshots, excluded from backups; streaming uploads with hard limits (10 MiB per ID image, 50 MiB video, 75 MiB aggregate) before materialization; we reject malformed MIME, decompression bombs, oversized dimensions, unexpected codecs, and videos longer than 10 seconds or containing audio. Production deployment must confirm encryption at rest, key management, backup exclusion, and monitoring before this launch draft is published as a final notice.

4. How we use information

• Operate, secure, troubleshoot, and improve the Service.
• Provide sports mental-performance training, coaching, plans, check-ins, progress views, and authorized family reporting.
• Verify guardian authorization through manual human review and prevent fraud, spoofing, misuse, or unauthorized access.
• Process subscriptions and communicate about the account.
• Comply with legal obligations and protect users and the Service.

5. How we disclose information

We do not sell personal information or use a teen’s data for targeted advertising. We disclose information only as needed to operate the Service, including to payment processors, cloud/database providers, email providers, and AI providers used for coaching features. We do not disclose verification media to those providers.

We require service providers to use data for the contracted service, subject to applicable agreements. We may also disclose data when required by law or reasonably necessary to protect safety, prevent fraud, or enforce our rights. Verification media is never sent to email, chat, analytics, crash reporting, or the general coaching AI pipeline.

6. Guardian access and privacy rights

A verified guardian linked to a teen account has the full parent-access option selected for this Service. That access includes stored profile information, PPP results, assessments, plans, check-ins, progress, safety flags, and retained AI-chat history, subject to a documented legal-retention exception.

Verified users and guardians may submit requests to access, export, correct, delete, withdraw authorization, or stop future collection/use through the parent portal or by contacting support@nextplaymode.com. We re-authenticate sensitive requests and log access, export, correction, deletion, and withdrawal events.

If a deletion/withdrawal request arrives while a review is pending, we cancel the review, purge immediately, stop future processing, and record the request outcome without retaining the media. Withdrawal or a verified deletion/stop-processing request locks the related teen account, stops weekly reports and new AI processing, and begins the applicable request workflow. Some data may be retained when required or permitted by law, such as security, tax, dispute, or legal records.

7. Schools and institutions

For school-controlled student data, the school or district remains in direct control under the School/District Data Addendum. Authorized institution staff receive least-privilege access for the agreed educational purpose. We do not sell, advertise with, or use that data for unrelated AI training. Use is limited to the agreed educational sports mental-performance purpose; advertising, unrelated AI training, redisclosure beyond the agreement, and repurposing are prohibited. Student data is returned or deleted at contract end as directed, subject to documented legal/backup exceptions.

8. Retention, security, and international processing

We retain account and sports mental-performance data for as long as necessary to provide the Service and meet the purposes described here, subject to valid deletion requests and legal-retention requirements. The application uses access controls, HTTPS/TLS for network transport, bounded uploads, rate limits, replay protection, and audit records that omit raw verification media. Manual verification media is retained at most 10 business days while pending, and at most 15 minutes after terminal resolution (with incident if purge fails beyond 24 hours). Verification artifacts are never stored in PostgreSQL bytes, logs, traces, analytics, backups, exports, or AI context. Encryption at rest, key management, backups, monitoring, and other infrastructure safeguards depend on the configured deployment and must be confirmed before this launch draft is published as a final notice.

Data may be processed in the United States and other countries where our providers operate. For institution data, cross-border transfers honor the governing addendum. We apply contractual and technical safeguards appropriate to the processing.

9. Changes and contact

We will post an updated effective date if this Policy changes and will obtain a new acceptance when required. Privacy contact: support@nextplaymode.com