Legal
Privacy Policy
Last updated May 1, 2026
What we collect
- Account info: name, email, account type, and password (hashed).
- Player profile data: first/last name, age group, classification, position, throws/bats handedness, goals.
- Performance metrics: throwing velocity, exit velocity, 60-yard dash time, bat speed, and other metrics you log.
- Coach + parent notes: any notes you write about sessions, players, or progress.
- Billing info: Stripe handles all card data — we store only the Stripe customer + subscription IDs and the last four digits of the card on file.
- Usage logs: standard server logs (IP, user agent, request paths) used for security and debugging.
How we use it
We use your data to provide the service: generate plans tailored to the player, track progress over time, deliver downloadable PDFs, process subscription payments, and send transactional email (sign-up confirmations, password resets, plan-assignment notifications).
AI processing
When you generate a plan, workout, or technique, we send relevant player context (age group, skill level, goals, recent metrics) to Anthropic's API. Anthropic processes the request and returns the generated content. Anthropic does not use the data to train their models. We do not send PII like email or name in these prompts unless you include it in coach notes.
Who we share with
- Supabase — database + authentication hosting.
- Stripe — subscription billing.
- Resend — transactional email delivery.
- Anthropic — AI content generation.
- Vercel — application hosting + analytics.
We don't sell your data. We don't share it with advertisers. We don't share player information with anyone outside the team or organization that owns the player profile.
Children's privacy
RepReady serves youth baseball players ages 7U–14U. Accounts for children under 13 must be created and managed by a parent or legal guardian. We collect only the minimum data needed to provide training plans and track progress, and we never run third-party advertising or share children's data with brokers. See our full Children's Privacy (COPPA) Notice for the detailed list of what we collect, why, and the parent controls available — including data export and deletion. Parents can also reach us directly at support@getrepready.io.
Your rights
You can access, correct, or delete your account and player data at any time from your settings. You can also request a copy of your data in machine-readable format. Email support@getrepready.io and we'll respond within 14 days.
Security
We use TLS for all data in transit and AES-256 at rest. Passwords are hashed with bcrypt by Supabase. Row-level security policies ensure each user can only access their own data. We'll notify affected users within 72 hours of discovering any data breach that compromises personal information.
Cookies
We use only essential cookies needed to keep you logged in. We don't use third-party analytics cookies on the marketing site. We do use Vercel's built-in performance metrics, which are aggregated and don't identify individual users.
Changes
We may update this policy as the product evolves. Material changes will be communicated via email to active accounts at least 14 days before they take effect.
Contact
RepReady, 501 NW 19th St, Ankeny, IA 50023. Questions or requests? Email support@getrepready.io.