Privacy Policy

Effective October 25, 2026

Draft. Waiting on the company name, mailing address and privacy email, and a lawyer's review, before launch.

[company legal name] (“Invktus,” “we”) runs Invktus, a place for high school and college athletes, parents, trainers, coaches and local businesses. This policy says what we collect, who can see it, how we protect athletes under 18, and the choices you have. We never sell anyone’s personal data.

What we collect

Account details: name, email, password (stored encrypted by our sign-in provider), the kind of account, and an athlete’s date of birth.
Profile details you add: position, class, school, city, height and weight, numbers, highlight links, a photo, a bio and a game schedule.
What you do on Invktus: messages, team posts and comments, bookings, sign-ups for camps, logged workouts, goals and testing results.
Payments: Stripe handles card and bank details. We see the amount, the date and whether it went through, never full card numbers.
Verification: for coaches and trainers, what we need to confirm who they are, and for trainers, a background check result.
Technical details: the device and browser you use, your IP address and error reports, kept to keep Invktus secure and working.
Cookies: only the ones that keep you signed in and remember your light or dark setting. We don’t use advertising or tracking cookies.

How we use it

To run Invktus: show profiles to the people your settings allow, deliver messages, process bookings and payments, and send the alerts and emails you choose.
To keep people safe: verify coaches and trainers, enforce parent controls, look into reports and stop abuse.
To improve Invktus, using totals and trends rather than individual people.
To follow the law and respond to valid legal requests.

Athletes under 18

Athletes must be 13 or older. We don’t knowingly collect data from children under 13; if we learn we have, we delete it.
A profile for an athlete under 18 stays hidden, and nobody can message them, until a parent confirms it.
Parents can read their athlete’s conversations, choose who can see and contact them, approve coach emails, trainer sessions and teams, and download or delete their athlete’s data.
We never use a minor’s data for targeted advertising, never show Sponsored spots to athletes under 18, and never sell their data.

Who can see your information

Verified coaches and trainers see athlete profiles the athlete (or their parent) has made visible. Profiles show a school and city, never a home address.
A high school coach sees a player’s progress only after the player joins their team and, under 18, a parent approves.
A player card is public only if it’s turned on, and for athletes under 18 it shows only a first name and last initial.
Companies that run parts of Invktus for us, only to do that work: Supabase (database and sign-in), Vercel (hosting), Stripe (payments) and Resend (email). Film links play from Hudl, YouTube or Vimeo under their own policies.
When the law requires it, or to protect someone’s safety.

Your rights

Wherever you live, and under Colorado law, you can ask to see the data we hold about you, correct it, download it, or delete it. Parents can do this for their athlete. We don’t sell data, use it for targeted ads, or make automated decisions with legal effects, so there’s nothing to opt out of; if that ever changes, you’ll be able to opt out first.

Download or delete your data from Your data, or email [privacy email].
We answer within 45 days. If we turn down a request, you can appeal by replying, and we’ll answer the appeal within 45 days.

How long we keep it

We keep your data while your account is open. When you delete your account, we erase your profile, film links, numbers, posts and alerts within 45 days. Records the law or other people need, such as payments, bookings and messages someone else wrote, stay with your name removed.

Security

Data is encrypted in transit, access inside Invktus is limited by role, and every page and database rule is checked before changes go out. No system is perfect; if a breach affects you, we’ll tell you as the law requires.

Changes to this policy

If we change this policy, we’ll update the date above and ask everyone to agree to the new version the next time they sign in. Big changes get at least 30 days’ notice.

Contact

[company legal name] · [mailing address] · [privacy email]