Privacy Policy
Version 2026-09-11 · Effective 2026-09-11
What Reps collects about you and your child, why, who can see it, and how to get it deleted.
The short version
Reps is a youth-baseball practice and player-development app. Coaches use it to run practices and track progress; families use it to follow along.
- We do not sell personal information, and we do not share it with advertisers.
- There is no advertising, analytics, or third-party tracking in this app.
- Children do not have their own accounts. A parent or guardian holds the account.
- A coach can see the players on their own teams. They cannot see other teams' players.
- You can ask us to delete your account and your child's information at any time.
The rest of this document is the detail behind those statements. If something here does not match what you see in the app, tell us — the mismatch is a bug in one of the two.
Who we are
Reps is operated from the United States and is available at repsteam.com. Questions about this policy, or any request about your information, go to the contact address at the end of this document.
Whose information is in Reps
Three kinds of people appear in the app, and they are treated differently.
Adults with accounts
Parents, guardians, coaches and team staff each hold their own account, created by themselves. They control their own credentials; nobody else can create or reset another adult's password from inside the app.
Children
Players are records, not accounts. A player record is created by a coach or a parent and holds only what the app needs to track practice and progress. A child never signs in, never has an email address in the system, and never has a password.
People who are only mentioned
A coach's notes or a message may mention someone who has no account. We do not build records about those people.
What we collect about adults
- Email address — required, because it is how you sign in and how password resets reach you.
- Password — stored only as a cryptographic hash by our authentication provider. We never see it.
- An optional display name, phone number and contact email, if you choose to fill them in on your profile.
- An optional 4-digit PIN, stored as a hash. It gates switching into coach view and leaving Kid Mode.
- Whether you have opted in to the team directory, which shares your name, phone and contact email with other families on teams you share. This is off unless you turn it on.
- A last-active timestamp, updated at most once every fifteen minutes while you use the app, so coaches can see which families are still checking in.
- The date, IP address and browser user-agent recorded when you accept these terms, so there is a record of what you agreed to and when.
The acceptance IP address and user-agent are the only request metadata the app stores. We do not keep general access logs of our own; our hosting provider keeps short-lived operational logs, described under "Who processes data for us".
What we collect about children
This is the part most parents want to read closely, so it is listed in full.
- First name and last initial. The app deliberately does not store a child's full last name.
- Primary playing position, and a jersey number for each team.
- Practice attendance, and the individual repetitions a coach logs during a practice.
- Experience points, rank and skill progress calculated from those repetitions.
- Coach highlights — a short note a coach writes about a practice, which the child's own family can read.
- Answers and response times from the training exercises, if the child uses them.
- The trading cards the child has collected in the app.
- Any custom roster field a coach adds to their team — for example a jersey size, a preferred number, or a note. What is in these fields is chosen by the coach, not by us. See "Custom roster fields" below.
We do not collect a child's date of birth, home address, phone number, email address, precise location, photograph, biometric data, or any health or medical record as a built-in feature of the app.
Custom roster fields
Coaches can add their own fields to their team's roster. This is genuinely open-ended, so it is the one place where information we did not design for can end up in the app. Coaches are told, in the coach terms they accept, not to use these fields for medical information, government identifiers, or anything they would not be comfortable writing on a clipboard left in a dugout. Each field carries a setting for whether families can see it and whether families can change it, and we show every family exactly which fields they can see.
If you find information about your child in a custom field that you did not expect and do not want stored, contact us or the coach and it will be removed.
Children's privacy (COPPA)
Reps is used by children under 13, with their families. We have built it so that a parent or guardian is between the child and the service at every point where personal information is involved.
- Children cannot create accounts. Account creation requires an email address and a password, and is reached only by claiming an invitation from a coach.
- A child's record is connected to a parent account before any progress data is recorded against it.
- Kid Mode is a restricted view of a parent's own session, turned on by the parent and exited with the parent's PIN. A child in Kid Mode cannot message a coach, cannot change account settings, and cannot reach anything outside the player view.
- We do not ask a child for any personal information directly. What a child does in the app — answering a training exercise, opening a card pack — is recorded against the player record their parent already connected.
Parental rights
A parent or guardian may, at any time:
- Review the personal information we hold about their child.
- Ask us to delete it.
- Refuse to allow any further collection, by disconnecting from the player record or closing the account.
- Ask a coach to remove their child from a team, which ends that coach's access to the child's record.
Refusing further collection does not require you to give up what is already there, and asking for deletion does not require you to give a reason. Requests go to the contact address at the end of this document and are actioned within 30 days.
What we never do with a child's information
- We do not condition a child's participation on disclosing more than is reasonably necessary.
- We do not use children's information for advertising, profiling for advertising, or sale.
- We do not make children's information public. There is no public profile, no leaderboard visible outside a team, and no sharing feature that posts a child's data anywhere.
Who can see what
Access is enforced in the database itself, not only in the screens, so it holds even if someone bypasses the interface.
A coach
- Sees the players on the teams they coach, and the practice and progress data for those players.
- Sees the parent accounts connected to those players, by email, so they know who they are talking to.
- Sees their own conversations with those parents.
- Does not see players on teams they do not coach, and does not see other coaches' conversations.
A parent or guardian
- Sees their own child's record in full, including every coach highlight about them.
- Sees the roster, schedule and announcements for teams their child is on.
- Sees other families' contact details only where those families have opted in to the team directory.
- Does not see other children's progress, repetitions, ranks or coach notes.
Us
A small number of administrators can reach all data for support and moderation. Administrative actions that change accounts are written to an audit log.
Messages between coaches and families
Messages are private to the two accounts in the conversation, plus administrators. They are not encrypted end-to-end, they are stored until the conversation or account is deleted, and they can be disclosed if we are legally required to. Treat them as you would an email to the coach, not as a confidential channel.
Cookies and similar technologies
Reps uses cookies only to make the app work. There are no advertising cookies, no analytics cookies, and no third-party trackers. The complete list:
- Authentication cookies set by our authentication provider, which keep you signed in.
- Which of your children is currently selected, if you have more than one.
- Which team a coach currently has selected.
- Whether Kid Mode is on.
- Whether the account PIN has been entered this session.
- A short-lived marker that stops the last-active timestamp from being written more than once every fifteen minutes.
None of these follow you to other websites, and none are used to build a profile of you.
Who processes data for us
We use a small number of service providers. They process data on our instructions and do not have independent rights to it.
- Supabase — database, authentication and file storage, hosted in the United States. This is where essentially all data in the app lives. Supabase also sends the transactional emails for invitations and password resets.
- Vercel — application hosting and content delivery, which processes requests and keeps short-lived operational logs.
- Open-Meteo — weather forecasts. We send it the town and state a coach entered for a team, so we can show the forecast for practice. No personal information and no device location is sent.
We do not use an advertising network, an analytics provider, a session recorder, or a customer-data platform. If that changes, this list changes first and the change is a version bump you will be asked to accept.
How long we keep things
- Account and player records are kept while the account is active.
- Practice, repetition and progress history is kept while the player record exists, because it is the point of the app — a player's history follows them even if they leave a team.
- Administrative audit-log entries are purged automatically on a rolling schedule.
- Records of accepting these terms are kept for as long as the account exists, and for a reasonable period afterwards, because their purpose is to evidence an agreement that was made.
- When you ask us to delete an account, we delete it and the associated player records within 30 days, except where we are required to keep something longer.
Removing a child from a team is not a deletion: the child's own history stays with their player record, which is what lets them move clubs without losing years of progress. Deleting the player record is the deletion.
Security
- All traffic is encrypted in transit.
- Passwords and PINs are stored as hashes, never in readable form.
- Access rules are enforced at the database row level, not only in the app's screens.
- Administrative access is limited to a small number of accounts and is logged.
No system is perfectly secure. If a breach affects your information we will tell you and the relevant authorities as the law requires.
Your choices and rights
Whatever state or country you are in, you can ask us to:
- Show you what we hold about you or your child.
- Correct something that is wrong.
- Delete your account and your child's records.
- Give you a copy of your data in a portable form.
- Stop using your information for anything you have objected to.
We will not treat you differently for exercising any of these. Requests go to the contact address below; we may need to confirm you control the account before acting, which for an account holder means responding from the email address on the account.
Some rights above come from specific laws — for example the California Consumer Privacy Act — which may or may not apply to us depending on our size and where you live. We offer them to everyone rather than asking you to work out which regime covers you.
Where data is held
Reps is operated from the United States and data is stored in the United States. If you use it from outside the United States, you are sending your information to the United States, where privacy law differs from your own.
Changes to this policy
When we change this policy we publish a new dated version. If the change is substantive you will be asked to read and accept it the next time you open the app, and we will say in one sentence what changed. Cosmetic corrections are made without interrupting you — asking someone to re-accept a wall of text over a fixed typo teaches them to tap Agree without reading, which is the opposite of the point.
Previous versions are available on request.
Contact
For any privacy question or request — including a parent's request to review or delete a child's information — contact us at the address published on repsteam.com. We answer privacy requests within 30 days.