Privacy Policy

Effective Date: [DATE]

Digital DoFO LLC ("DoFO," "we," "us," or "our") operates the Digital DoFO platform at digitaldofo.app. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (provided via Google Sign-In or email registration)
• Display name (from your Google account or as entered during registration)
• Profile photo URL (from Google Sign-In, if available)
• Authentication identifiers (Firebase Auth user ID)

1.2 Coaching Content

You create and store coaching data within the Service, including:

• Playbooks, plays, and formations
• Practice plans, practice scripts, and rep tracking data
• Call sheets and wristband configurations
• Rosters and depth charts (player names, numbers, positions, graduation years)
• Game plans, scouting notes, and analytics
• Staff information (names, roles, email addresses of coaching staff)
• School and program details (school name, mascot, team colors)

1.3 Usage Data

We automatically collect certain information when you use the Service:

• Pages viewed and features used
• Browser type and version
• Device type and screen resolution
• IP address
• Timestamps of access and actions

1.4 Payment Information

Payment details (credit card numbers, billing addresses) are collected and processed directly by Stripe. DoFO does not store, access, or handle your full payment card details. We receive only a limited record from Stripe (last four digits of your card, card brand, and billing status) to manage your subscription.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Store, display, and sync your coaching data across your team's account.
• Manage your account: Authenticate your identity, manage subscriptions, and process payments.
• Improve the product: Understand usage patterns to prioritize features, fix bugs, and improve performance.
• Communicate with you: Send account-related notifications (billing confirmations, trial expiration warnings, service updates). We do not send marketing emails without your consent.
• Provide support: Respond to your questions and troubleshoot issues.
• Enforce our terms: Detect and prevent misuse, fraud, or violations of our Terms of Service.

We do not sell your personal information. We do not use your coaching content to train machine learning models or for any purpose unrelated to providing the Service to you.

3. Third-Party Services Lawyer Review

We use the following third-party services to operate the platform. Each processes data according to their own privacy policies:

Service	Provider	Purpose	Data Shared
Firebase Authentication	Google LLC	User sign-in and identity	Email, name, auth tokens
Cloud Firestore	Google LLC	Database storage for all coaching content	All User Content (see Section 1.2)
Firebase Storage	Google LLC	File storage (team logos, images)	Uploaded files
Stripe	Stripe, Inc.	Payment processing and subscription management	Email, payment details, billing status
Cloudflare Pages	Cloudflare, Inc.	Website hosting and delivery	IP address, request metadata

We do not share your coaching content with any third parties for advertising, analytics, or any purpose other than operating the Service.

4. Data Storage and Security Lawyer Review

4.1 Where Data Is Stored

Your data is stored in the United States on Google Cloud infrastructure (Firebase/Firestore). Backups are maintained through Firebase's point-in-time recovery system with a 7-day rollback window.

4.2 Security Measures

We implement the following security measures:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Encryption at rest: Data stored in Google Cloud is encrypted at rest by default.
• Access controls: Firestore security rules restrict data access to authenticated members of each school account. Users can only read and write data belonging to their own school.
• Authentication: User identity is verified through Firebase Authentication (Google Sign-In or email/password with secure token management).

4.3 No Guarantee

No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

5. Data Retention Lawyer Review

5.1 Active Accounts

We retain your data for as long as your account is active and your subscription is current. There is no automatic deletion of data for active accounts.

5.2 After Cancellation

When you cancel your subscription or your account is terminated:

• Your data remains accessible for export for 30 days following the end of your access period.
• After the 30-day period, your data may be permanently deleted from our systems and backups.
• We are not obligated to retain your data beyond this 30-day window.

5.3 Deletion Requests

You may request immediate deletion of your account and all associated data at any time by contacting [email protected]. We will process deletion requests within 30 days.

6. Your Rights Lawyer Review

You have the following rights regarding your data:

• Access: You can access all of your coaching data through the Service at any time while your account is active.
• Export: You can export your data from the Service. Contact [email protected] if you need assistance with data export.
• Correction: You can update your account information and coaching content directly within the Service.
• Deletion: You can request deletion of your account and data by contacting us at [email protected].
• Portability: Upon request, we will provide your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

[Note for lawyer: Review whether CCPA, GDPR, or state-specific privacy rights disclosures are needed based on user demographics and company domicile.]

7. Children's Privacy Lawyer Review

The Service is designed for use by adult coaching staff members. It is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

Coaches may store roster information that includes the names and jersey numbers of student athletes. This information is entered by the coaching staff, not by the students themselves. It is limited to what is necessary for coaching operations (names, numbers, positions, graduation years) and does not include contact information, addresses, or other sensitive personal data of minors.

If we become aware that we have inadvertently collected personal information directly from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided personal information to us directly, please contact us at [email protected].

[Note for lawyer: Review COPPA compliance implications given that coaches store student-athlete roster data (names, numbers, positions). Students do not interact with the platform directly.]

8. Cookies and Local Storage

DoFO uses minimal browser storage:

• Authentication cookies/tokens: Used to keep you signed in and verify your identity on each request. These are essential for the Service to function.
• Session data: Limited local storage for UI preferences (such as selected week, coordinator mode). This data stays in your browser and is not transmitted to our servers.

We do not use third-party advertising cookies. We do not use tracking cookies for behavioral advertising. If we add analytics tracking in the future, this policy will be updated accordingly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Notify you by email or by posting a notice within the Service at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of an updated policy constitutes your acceptance of the changes.

10. Contact Information

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Digital DoFO LLC
Email: [email protected]
Website: digitaldofo.com