Effective November 14, 2026
Our promise: we never sell your data
- We do not sell, rent or trade personal information, to anyone, for any price, ever.
- We do not share it with third parties for their own use: not advertisers, not data brokers, not marketers, not recruiters.
- No advertising and no ad trackers. There are no ads in MyBasketballIQ and no advertising or analytics cookies.
- No training of outside AI models on your messages, drawings or any personal information.
- The only companies that touch your information are the few service providers listed below, under contract, only to run MyBasketballIQ for you.
This promise is part of this policy. If MyBasketballIQ is ever transferred to someone else, it goes with it (see section 8).
1. Who we are
MyBasketballIQ ("we", "us") runs MyBasketballIQ, a website and app that helps basketball teams learn their plays (the "Service"). We are responsible for the personal information described here. This policy is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, and to respect the privacy laws of the places our users live.
2. What we collect
We collect only what the Service needs to work.
| Account | Your name, email address and role (coach, staff, player, parent or guardian, or school administrator). Your password is never stored, only a one-way hash of it. If you sign in with Google, we receive your name, email address and Google account ID from Google, and nothing else. |
|---|---|
| Team | The teams you belong to, your title on staff, who approved you, and, for a parent or guardian, which players you follow. |
| Profile (optional) | A profile photo and a jersey number, if you or your coach add them. Photos are stripped of hidden location and camera data before they are saved. |
| Learning activity | The plays you run, the answers you choose, and the XP, badges and mastery that follow. |
| What you write | Chat messages, drawings on plays, play suggestions, coach notes, and edits or deletions of any of these. |
| Schedule | Practices and games, and each person's answer (going, maybe or not going) with any reason or note. |
| Payments | Only if you buy a paid plan: which plan, the amount, the date, and Stripe's reference for the payment. If you pay before creating an account, we also receive the email address you gave Stripe. We keep it encrypted and use it to add the plan to the account you create, and to email you how to finish. We never see or store card numbers. |
| Security | A sign-in cookie, sign-in attempts, an access history of sensitive actions, and network (IP) addresses kept only as encrypted values or one-way hashes to stop account takeover and harassment. |
We do not collect your location, contacts, birth date, school records, health information, or card or bank details.
3. How we use it
- To provide the Service: show your team its plays, run the training, keep score, carry the chat and the schedule.
- To keep teams safe and accountable: coach approval, blocks, the permanent message record and the access history.
- To secure accounts: detect password guessing and lock-outs, and alert our support team about likely abuse.
- To send messages about the Service itself, such as security alerts or a notice that these policies changed. We do not send marketing email without your separate consent, and you can stop it at any time.
- To understand and improve the Service using counts that identify no one, such as how many teams use a play.
We never use personal information to build advertising profiles, and we never make automated decisions about you that have legal or similar effects.
4. Young players and parents
Many of our players are minors. A player joins only through a team code, and a coach must approve every person before they see anything of the team.
- Players under 13 (or under the age of digital consent where they live) may use the Service only with the consent of a parent or legal guardian. Coaches, schools and clubs that bring young players onto the Service agree to get that consent before inviting them (see our Terms of Service).
- Parents and guardians can follow their child's team with read-only access and see what their child sees.
- A parent or guardian can ask us at any time to see, correct or delete their child's information, or to close their child's account, by writing to [email protected].
- If we learn that we hold information about a child under 13 without the required consent, we will delete it. For users in the United States, we follow the Children's Online Privacy Protection Act (COPPA).
5. Who on a team can see what
- Everyone on a team sees the team's plays, its roster names and photos, the chats, and who is coming to each event.
- The reason someone gave for missing an event is seen only by the coaching staff, a school administrator if the team has given one access, the player, and the parent or guardian who answered for them. Only the coaching staff and a school administrator see the full message record.
- A parent or guardian sees their own child's information and the team chats, read-only.
- A school administrator is given access only by the team's coach, with a separate code, and every access is recorded in the team's access history.
- Nothing on a team is visible to other teams or to the public. Public pages of our website show only our own play library.
6. Service providers
We use a small number of companies to run the Service. Each may use your information only to provide its service to us, under a contract that requires it to protect your information and forbids it from using it for its own purposes. We do not sell to them, and they do not buy from us.
| Cloudflare | Hosts the website and app, stores the database, protects the Service from attacks, and sends the Service's own emails, such as the link that confirms your email address and security alerts to our support team. |
|---|---|
| Only if you choose "Sign in with Google": confirms who you are. We never share your team information with Google. | |
| Stripe | Only if a coach buys a paid plan: takes the payment on its own secure page. We send Stripe the coach's email address for the receipt and our own reference numbers for the account and the team, and nothing else about the team or its players. Someone who pays before creating an account types their email address on Stripe's page, and Stripe passes it to us with the payment. We never see or store card numbers. |
If we add a provider, we will update this list before it receives any personal information.
7. When the law requires it
We disclose personal information without your consent only where the law requires or allows it: to answer a valid court order, warrant or other legal process; to protect someone, especially a young person, from serious harm; or to investigate fraud or a breach of our Terms. Where the law allows, we will tell the person concerned before we disclose, and we will disclose no more than is required.
8. If MyBasketballIQ changes hands
If MyBasketballIQ is merged with or transferred to another organization, personal information may be transferred as part of the Service. Any new owner must keep this policy, including the promise never to sell personal information, or ask for your consent before using it differently. We will tell users before any transfer happens. A transfer of the Service is not a sale of your data, and your data will never be sold on its own.
9. How we protect it
- Everything travels over encrypted connections (HTTPS).
- Names, email addresses, messages and other personal fields are encrypted in the database with a key that is held separately from it.
- Passwords are stored only as strong one-way hashes, and repeated wrong guesses lock the account.
- Messages are sealed so that any tampering with the record can be detected.
- Access to production systems is limited to the people who run the Service.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify the people affected and the Privacy Commissioner of Canada as the law requires.
10. Where it is stored
Our database is hosted by Cloudflare in western North America, and parts of the Service run on Cloudflare's global network. Your information may therefore be stored or processed in the United States or other countries, where the laws may allow government authorities to access it. We use providers that protect it to the standard this policy describes.
11. How long we keep it
- Accounts: while the account is open. When you ask us to close it, we delete or permanently de-identify your account information within 30 days.
- The team message record: messages, edits and deletions are kept as a permanent, tamper-evident record so that teams, families and schools can rely on it for safety and accountability. A deleted message is hidden from the chat but stays in the record that coaching staff and school administrators can read. The record is kept while the team exists. When a team is closed, we delete its record within 90 days unless the law requires us to keep it longer.
- Payments: the record of a payment is kept while the account it belongs to is open, and afterwards for as long as tax and accounting law requires. The email address given for a payment made before creating an account is kept with that record, encrypted.
- Security logs: sign-in attempts and network-address hashes for up to 12 months; lock-out records while the account exists.
- Backups: deleted information can remain in our backups for up to 30 days before it is overwritten.
12. Your rights and choices
You, or a parent or guardian for a minor, can ask us at any time to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information or close your account (subject to the team record described in section 11);
- withdraw a consent you gave, though the Service may then not work for you.
Write to [email protected]. We will confirm who you are, then answer within 30 days. There is no charge. You can also leave a team, remove your photo, change your password and delete your account yourself in the app, under Account settings. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy commissioner.
13. Cookies
We use one essential cookie that keeps you signed in. Your browser also stores a few settings on your device, such as the playback speed you chose. We do not use advertising, tracking or analytics cookies, and we do not allow others to place them.
14. Changes to this policy
If we change this policy, we will post the new version here with a new effective date. If a change is significant, we will also tell you in the app or by email before it takes effect. We will never weaken our promise not to sell personal information.
15. Contact us
Questions, requests or concerns about privacy: [email protected]. See also Safety & privacy for how teams are kept safe, and our Terms of Service.