Privacy Policy

NextGen Compete

Effective Date: August 22, 2026

Last Updated: July 30, 2026

1. Introduction

NextGen Compete ("NextGen Compete," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our website at www.nextgencompete.com, our mobile applications, and any related services (collectively, the "Service").

NextGen Compete is a recruiting readiness system designed for high school student-athletes, their parents and guardians, and coaches. We understand that our users include minors (ages 13 and older) and that the personal information processed through our Service is sensitive in nature. We take this responsibility seriously.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly

When you create an account and use the Service, you may provide:

Account Information: Name, email address, password, and account type (student-athlete, guardian, or coach).
Athlete Profile Information: Sport, position, graduation year, target division, physical attributes (height, weight), academic information, and other details entered during the onboarding setup wizard or profile settings.
Recruiting Readiness Score Assessment Responses: Answers to multi-dimensional questionnaire items across six scoring dimensions (Physical Traits, Athletic Performance, Mental Readiness, Support System, Network Strength, and Recruiting Progress). These responses are used to calculate your Recruiting Readiness Score.
School and Program Tracking Data: Schools you add to your School Tracker, recruiting stage assignments (Researching, Contacted, Visited, Offered, Committed, Signed), visit logs, notes, and program interest preferences.
Communications and Outreach Content: Email drafts, outreach messages composed through the Service, communication history, and response logs related to coach outreach.
Events and Competition Data: Event attendance status (Going, Interested, Not Going), competition tracking information, and related preferences.
Highlight Reels: Links to video highlight reels you upload or connect through the Service.
Social Media Connections: Information from social media accounts you choose to connect through the Service settings.
Guardian Linking Information: Information provided when guardians link to one or more student-athlete accounts, including invite and verification data.
Coach and Team Information: Team creation details, sport affiliations, graduation year filters, athlete invitations, and target school tracking data submitted by coach users.
Support Inquiries: Name, email, and the content of any messages you submit through the help and support form.

2.1a Training and Health Data (Optional)

If you choose to log training sessions or connect Apple Health on iOS, we collect the training data you log or authorize (for example workout type, duration, and date). Apple Health data is read only with your explicit permission in the Health app, is used solely to show your own training history and readiness within the Service, is never shared with schools, coaches, or third parties, and is never used for advertising. You can revoke access at any time in the Health app or in Settings; revoking access stops further collection, and deleting your account deletes the data we hold.

2.2 Information Collected Automatically

When you use the Service, we may automatically collect:

Usage Data: Pages visited, features used, actions taken, time spent on the Service, and interaction patterns.
Device and Technical Data: IP address, browser type, operating system, device type, screen resolution, and referring URLs.
Log Data: Server logs recording access times, error logs, and system diagnostics.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain session state, remember your preferences, and analyze how the Service is used. See Section 8 for more details.

First-Party Product Analytics: To understand how the Service is used and improve it, we record a small set of product interaction events inside our own systems (for example, which step of setup was reached, whether a recommended move was opened or dismissed, or whether a screen was opened). These records contain your account identifier, the event name, a limited set of fixed attributes (such as your sport), the platform, and the app version — never free-text content, messages, health data, or information about other people. They are not sold, not shared with any analytics vendor, not used for advertising, and are automatically deleted after 90 days. On our mobile apps, this first-party instrumentation is the only usage analytics we perform.

2.3 Information from Third Parties

Authentication Providers: If you sign in using Google OAuth or another third-party authentication provider, we receive basic profile information (such as name and email address) as authorized by your settings with that provider.
Coaches and Guardians: If a coach invites you to a team or a guardian links to your account, we may process information those users provide about you in connection with those features.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing the Service: To create and manage your account, generate your personalized Recruiting Checklist, calculate and display your Recruiting Readiness Score, operate the School Tracker and Outreach tools, facilitate Events Discovery, and deliver all core features of the Service.
Personalization: To tailor the recruiting experience based on your sport, position, graduation year, division, and profile data, including personalized checklist content, school discovery recommendations, and program fit scoring.
Score Calculation: To process your assessment responses through our scoring system and generate your Recruiting Readiness Score with dimension breakdowns.
Communications: To send you notifications related to your recruiting activities, system updates, account alerts, and responses to your support inquiries.
Guardian and Coach Features: To enable guardians to view and manage linked athlete accounts, and to enable coaches to manage team rosters, track athlete recruiting readiness (with permission), and coordinate team events.
Improvement and Analytics: To understand how users interact with the Service, identify usage trends, diagnose technical issues, and improve the quality, performance, and reliability of the Service.
Security and Fraud Prevention: To protect the Service and our users from unauthorized access, fraud, abuse, and other harmful activity, including through the use of bot defense mechanisms such as Cloudflare Turnstile CAPTCHA, rate limiting, and encryption.
Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
Automated Guidance: Features such as the Recruiting Trainer, your Game Plan, and Program Fit generate recommendations automatically from the information in your own account (your sport, position, graduation year, scores, tracked schools, events, and activity). These recommendations are produced by rules we maintain, are reviewed by no person, and do not share your information with schools or coaches. They are suggestions to help you plan, not promises about recruiting outcomes.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

With Linked Users: If you are a student-athlete, guardians linked to your account may view your recruiting progress, Readiness Score, checklist status, and other recruiting data. Coaches who have invited you to a team may view your recruiting data with your permission.
Service Providers: We share information with third-party service providers who perform services on our behalf, including cloud hosting and database services (Supabase), authentication services, email delivery, analytics, and CAPTCHA and bot defense services (Cloudflare Turnstile). These providers are contractually obligated to use your information only to provide the services we have engaged them to perform.
Legal Requirements: We may disclose your information if required by law, regulation, legal process, or enforceable governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of NextGen Compete, our users, or the public.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention practices include:

Account Data: Retained for the duration of your account and deleted upon account deletion, subject to applicable legal retention requirements.
Recruiting Readiness Score Data: Assessment responses and score results are retained as long as your account is active to enable score tracking and improvement over time.
Communication History: Outreach logs and communication records are retained as long as your account is active.
Activity and Audit Logs: Retained for security, compliance, and troubleshooting purposes for a reasonable period following account activity.

After account deletion, we may retain certain data in anonymized or aggregated form for analytics and product improvement purposes, in a manner that cannot be used to identify you.

Deletion Records: When an account is deleted, we keep a minimal, non-identifying record of the deletion (a one-way hash of the former account identifier, the date, and the platform) so that we can demonstrate the request was honored. This record cannot be used to identify you or restore your data.

6. Data Security

We implement appropriate technical, organizational, and administrative measures to protect your personal information, including:

Authentication Security: Secure email/password authentication and Google OAuth integration via Supabase Auth, with email verification.
Bot Defense: Cloudflare Turnstile CAPTCHA on account registration and account deletion to prevent automated abuse.
Rate Limiting: Database-backed rate limiting to prevent abuse of Service features and API endpoints.
Encryption: Client-side encryption for sensitive data elements.
Row-Level Security: Database-level access controls ensuring users can only access data they are authorized to view.
Role-Based Access Controls: Administrative functions are protected by role-based route protection.
Secure Account Deletion: Account deletion is processed through a secure edge function with JWT (JSON Web Token) enforcement.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. Children's Privacy

NextGen Compete is designed to be used by student-athletes who may be as young as 13 years old (typically high school freshmen). We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable child privacy laws.

Users Under 13: We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Users Ages 13–17: Student-athletes between 13 and 17 may create and use the Service after providing a date of birth. We do not require a parent or legal guardian to approve account creation before the athlete can use core features. We strongly encourage athletes in this age range to link a parent or legal guardian account, and we may prompt them to do so. Parents and guardians may review, update, or request deletion of a linked child's information as described below and in account settings. Where applicable law requires additional parental rights or notices, we will honor those obligations.
Parental Rights: Parents and guardians may review, update, or request deletion of their child's personal information by contacting us at support@nextgencompete.com or through the account settings.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential Cookies: Required for the Service to function, including session management, authentication, and security features.
Preference Cookies: To remember your settings and preferences across sessions.
Analytics Cookies: To collect information about how you use the Service, helping us understand usage patterns and improve performance.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Service.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: You may request a copy of the personal information we hold about you.
Correction: You may request that we correct inaccurate or incomplete personal information.
Deletion: You may request that we delete your personal information. Account deletion can be initiated through the Security section of your account settings and is subject to identity verification. Certain data may be retained as required by law.
Data Portability: You may request a copy of your data in a portable format. The Recruiting Checklist supports PDF export for your records.
Restriction of Processing: You may request that we restrict certain processing of your personal information under applicable circumstances.
Objection: You may object to certain processing of your personal information.
Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@nextgencompete.com. We will respond to your request in accordance with applicable law.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

European Economic Area, United Kingdom, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent local laws, including the rights listed above and the right to lodge a complaint with your local supervisory authority.

10. Third-Party Services

The Service integrates with or links to third-party services, including:

Supabase: For authentication, database, and edge function services.
Cloudflare Turnstile: For bot defense and CAPTCHA verification.
Google OAuth: For optional third-party sign-in.

These third parties have their own privacy policies governing their collection and use of your information. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.

Diagnostics and Web Analytics: We use Sentry for crash and error diagnostics on the web and in our mobile apps, configured not to send personal information by default. On our website we use Vercel Analytics for privacy-focused page analytics only when you accept analytics cookies. Neither receives your training data, messages, or recommendations.

11. Data Transfers

Your information may be processed and stored in the United States or other jurisdictions where our service providers operate. By using the Service, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your jurisdiction of residence. We take steps to ensure that your information receives appropriate protection regardless of where it is processed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will notify you of material changes by posting the updated Privacy Policy on the Service and updating the "Last Updated" date. We may also notify you by email for significant changes. Your continued use of the Service after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

NextGen Compete
Email: support@nextgencompete.com
Account deletion: https://www.nextgencompete.com/delete-account (or in-app via Settings → Security → Delete account)