Privacy Policy

1. Who This Policy Covers

This policy applies to:

If you are a member of a program that uses ProgramOS, the program itself is also a controller of your data. ProgramOS acts as the platform processor for the program.

2. Information We Collect

Account and profile information

When a coach or administrator invites you to ProgramOS, we collect your name, email address, phone number (if provided), role (coach / athlete / parent / etc.), and the program you are associated with. Athletes may additionally provide athletic profile data (position, height, weight, testing results, academic information, transcripts, and film links) entered by themselves or their coaching staff.

Communication data

We collect the content of messages sent through the platform (in-app messages, emails, SMS) for the purposes of delivery, audit, and support. We retain consent records (timestamps, IP addresses, and the version of disclosure language shown) when you opt into receiving SMS or email communications.

Phone numbers and SMS consent records

When you provide a phone number through ProgramOS and consent to receive SMS messages, we store the number, the date and time of consent, the disclosure text shown to you, and the program you authorized to message you.

Behavioral assessment data

Athletes who complete our mindset assessment (CORE-5) provide responses that are used to compute character and decision-making profiles for their associated program. Parental consent is collected for participants under 18.

Payment and donation data

When you make a donation or pay a program fee through ProgramOS, payment information (card numbers, billing addresses) is collected and processed by Stripe. We do not store full card numbers on our servers. We retain transaction records (amount, date, last four digits, donor name) for accounting and receipting.

Usage and technical data

We collect standard web logs (IP address, browser, device, pages visited, timestamps) and cookies necessary to maintain your session and improve the service.

3. How We Use Your Information

We use your information to:

We do not use your phone number, email address, or SMS content to send you marketing from ProgramOS or any third party.

For the full call-to-action, verbatim disclosure language, screenshot of the live consent UI, message samples, and verification details for carriers and The Campaign Registry, see our dedicated SMS Consent & CTA page.

5. How We Share Information

Within your program

Information you provide flows naturally to the coaching staff and administrators of your associated program. For example, an athlete's profile and assessment results are visible to that program's coaches.

Service providers

We share data with vetted third-party processors who help us operate the service:

These providers process data on our behalf under contractual confidentiality and security obligations and are not permitted to use your data for their own purposes.

Legal compliance

We may disclose information when required by law, subpoena, court order, or to protect the rights, safety, or property of ProgramOS, our users, or others.

Business transfers

If ProgramOS is acquired or merges with another company, your data may transfer to the successor entity. We will notify you of any such transfer.

We do not sell your personal information.

6. Children and Minors

ProgramOS is used by football programs that may include athletes under 18. For participants under 18, we collect parental or legal-guardian consent before any direct communication and before the athlete completes a behavioral assessment. Parents and guardians can review, modify, or delete information about their child by contacting their program's coaching staff or by emailing privacy@programos.org.

We do not knowingly collect personal information from children under 13 outside of the parental-consent process described above. If we learn we have collected such information improperly, we will delete it.

7. Data Security

We use industry-standard safeguards including encryption in transit (HTTPS / TLS), encryption at rest, role-based access controls, and audit logging. No system is perfectly secure; we cannot guarantee that unauthorized access will never occur. If we become aware of a breach affecting your personal information, we will notify you and applicable authorities as required by law.

8. Data Retention

We retain your information for as long as your account is active or as necessary to provide the service to your program. When a program terminates its subscription, athlete data and program records may be retained by the program for archival purposes or deleted on request. Donation and payment records are retained for at least seven years to comply with tax and accounting obligations. Anonymous aggregated data (e.g., usage statistics) may be retained indefinitely.

You may request deletion of your account and associated personal data by emailing privacy@programos.org. Some information may be retained as required by law or for legitimate business purposes (e.g., transaction records, fraud prevention).

9. Your Rights

Depending on where you live, you may have the right to:

To exercise any of these rights, email privacy@programos.org. We will respond within 30 days.

California residents have additional rights under the CCPA, including the right to know what categories of information we collect, the right to delete, and the right to non-discrimination for exercising these rights. We do not sell personal information.

10. International Users

ProgramOS is operated from the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Cookies and Tracking

We use cookies for authentication (keeping you signed in), session management, and basic analytics. We do not use third-party advertising cookies. You can disable cookies in your browser, but parts of the service may not function correctly without them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top. If changes are material, we will notify you by email or through the platform before the changes take effect.

13. Contact

For privacy questions, requests, or complaints: