Privacy Policy

Last updated: September 11, 2026

This Privacy Policy explains how DrillStreak ("DrillStreak," "we," "us") collects, uses, and protects information when you use the DrillStreak mobile application (the "App"). DrillStreak is operated by DrillStreak, LLC, a Utah limited liability company.

Information We Collect

We collect only what the App needs to function:

• Account information: the email address and password you use to sign in. Passwords are never stored by us in readable form — authentication is handled by our database provider, Supabase, using industry-standard hashing.
• Player profiles: a display name for each player linked to your account (this may be your own name, or a name you enter for a child you manage as a parent/guardian).
• Team information: if you create a coach account, your team name and roster (the players linked to your team via invite code).
• Drill and activity data: the names of drills you or your coach create, the dates you log a drill as completed, and, optionally, a numeric result you choose to log for that completion (such as makes out of attempts, or a rep count). If you schedule a drill (choosing a date, time, and duration), we also store that choice so it can appear in the App's own schedule view. We do not collect video, photos, or any media of you or your child performing drills.
• Calendar access (optional): if you choose to add a drill to your device calendar, the App requests calendar permission from your device's operating system. Due to a limitation in the calendar software component we use, your device's permission prompt is the standard full (read and write) calendar permission — there is no narrower "write-only" option available to request. Regardless of what the permission allows, our code only ever writes a new event to your calendar when you tap to add one; it does not read, access, or store any of your existing calendar entries.
• Team Chat messages (optional): if you use Team Chat, we store the text of the messages you send — team-wide posts and direct messages between a coach and a parent/player — along with who sent them, who can see them, and when. Team events (games, practices) a coach adds are stored the same way and shared with the roster.
• Push notifications (optional): if you allow notifications, we store a device-specific push token used only to deliver App notifications to you (new Team Chat messages, roster activity, event reminders). We do not use this token for anything else, and it's tied to your device, not sold or shared beyond the notification-delivery service itself (Expo).
• Subscription status: whether you hold a paid Parent membership, handled through our subscription provider, RevenueCat, and Apple's App Store. We do not receive or store your payment card details — those are handled entirely by Apple.

What We Don't Do

We do not use advertising networks, and the App contains no third-party analytics or tracking SDKs. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Who We Share Information With

We share the minimum information necessary with the service providers who make the App work:

• Supabase — hosts our database and handles authentication. Supabase can access data only to provide this hosting; they do not use it for their own purposes.
• RevenueCat — manages subscription status and entitlements.
• Expo — delivers push notifications to your device using your device's push token; does not receive message content, drill data, or any other information beyond what's needed to route a notification.
• Apple (App Store) — processes payments for subscriptions and distributes the App.

A coach can see the roster of players on their team and the drills those players have logged, regardless of who assigned the drill — this visibility is a core, disclosed part of how the App works (it's what lets a coach see each player's progress and help them grow), and is limited to players who have joined that coach's team using an invite code.

Challenges: if you send or accept a "challenge a friend" with a teammate, that teammate can see your display name (to pick who to challenge) and your total completed-drill count for the challenge period once accepted — not your individual drill names, video views, or logged results. This visibility is limited to teammates on a team you share, and only while the challenge exists; declining, canceling, or quitting a challenge removes it for both sides.

Children's Privacy

DrillStreak is designed to be used by athletes of any age, including children, but a child does not create their own account or provide information to us directly. A player profile for a child is created and managed by the adult (parent or guardian) who controls that account — that adult enters the child's display name and controls what is logged. We do not knowingly collect personal information directly from a child under 13 outside of this parent-managed structure. If you believe a child has provided us information outside this structure, contact us at support@drillstreak.com and we will delete it.

Your Choices and Rights

• Access and correction: you can view and edit player names, drills, and team information directly in the App.
• Deletion: you can delete a player profile, custom drill, team, an individual logged completion, or a challenge directly in the App. To delete your entire account and associated data, email support@drillstreak.com.
• Calendar permission: you can revoke calendar access at any time in your device's Settings.
• Notification permission: you can turn off push notifications at any time in your device's Settings.

If you are a resident of California, the EU/UK, or another jurisdiction with its own data-protection law, you may have additional rights (such as data portability) under that law — contact us at the address below and we will accommodate a valid request.

Data Retention

We retain your account and player data for as long as your account is active. If you delete your account, we delete your associated data within a reasonable time, except where we're required to retain records (e.g., subscription/payment records) for legal or accounting purposes.

Security

Access to data in our database is enforced with row-level security policies, so one account cannot read another account's private data except through the specific, disclosed sharing described above (coach-roster visibility).

Changes to This Policy

If we make material changes to this policy, we'll update the date above and, where required, notify you in the App.

Contact Us

Questions about this policy or your data: support@drillstreak.com