Hockey365 Privacy Policy

Effective date: October 2026

1. Who we are

Hockey365 is operated by typif.ai, LLC, 7803 Glenroy Road, Suite 101, Bloomington, MN 55439, 612-366-4962, hockey365support@typif.ai (the “operator” for purposes of the Children's Online Privacy Protection Act, “COPPA”). Questions about this policy or your child's data should go to hockey365support@typif.ai.

2. Information we collect

Account information

• Email address — used to sign in (we email a one-time code; there are no passwords).
• First and last name — shown in full to the player's coaches, trainers, and linked parents/guardians. Leaderboards only ever show first name and last initial (see Section 5).
• Profile photo — optional. Chosen by the player from their photo library; the app never opens the camera. Visible to the player, their coaches and trainers, and linked parents/guardians. Never shown on leaderboards.
• Birth year — used only to determine whether parental consent is required. We do not collect a full birthdate.
• Playing position — optional; used to recommend workout videos.

Activity information the player enters

• Daily training logs: date, pucks shot, practice and stick-handling minutes, workouts completed, game opponent, hydration, nutrition, sleep hours, screen-time minutes, and optional free-text notes.
• Custom workouts the player creates: title, minutes, and tags.
• Workout videos and other content marked as completed within the app.
• Training goals and streak history calculated from the logs.

Team information

• Team memberships (joined by entering a team code), role on the team, and optional jersey number and per-team position.

Messages and notifications

• Messages that coaches and staff send to a team. They are delivered to the team's players and to those players' linked parents/guardians, and we record when each one is delivered and opened, so a family or organization can see exactly what was sent to a child and when.
• A push notification token for each device that allows notifications, used only to deliver notifications to that device.

Support requests

• When you contact us through the support form or the app's feedback screen: your email address, the topic, and what you write.

Parent/guardian information

• A parent or guardian's email address, collected from the child solely to request consent and link the guardian's account (see Section 4).

What we do NOT collect

• No location, no contacts, no videos from players, no microphone or camera access. The only photos are the optional profile photo above and team logos uploaded by coaches.
• No advertising identifiers and no third-party advertising or analytics trackers.

3. How we use information

• To operate the app: signing in, saving training logs, calculating streaks, and showing progress.
• To show a player's progress to the specific people described in Section 5.
• To send notifications: the daily training reminder the player turns on (scheduled on the device itself), and push notifications when a coach sends the team a message.
• To answer support requests.
• To understand overall usage of the app (counts of active accounts and logs) so we can improve it. We do not build behavioral profiles of individual children.

We do not sell personal information, we do not show advertising, and we do not permit third parties to collect personal information from the app for their own purposes.

4. Children under 13 — notice to parents/guardians (COPPA)

Hockey365 is designed for youth athletes, including children under 13. We comply with COPPA as follows:

• Consent before use.When a child's birth year indicates they are under 13, the account is blocked from using the app until a parent or guardian approves it. We collect the child's email address and the parent's email address before consent for one purpose only: contacting the parent to request that consent.
• How consent works. The parent receives a sign-in code by email, signs in to Hockey365 with their own account, reviews the request naming their child, and approves or declines it in the app.
• If consent is declined or never given, the child's account cannot be used, and we will delete the account and any information collected during signup upon request or after a reasonable period.
• Limited disclosure.A child's information is used to run the app and is visible only to the people in Section 5. The one public disclosure is the leaderboards described there, which show first name, last initial, and a training total, and only while the player has public leaderboards turned on. We do not disclose children's personal information to outside third parties, other than the service providers in Section 6 who process it on our behalf.
• No over-collection.We do not condition a child's participation on disclosing more information than is reasonably necessary to use the app.
• Parents' rights.A parent/guardian can, at any time: review the child's information (a linked guardian account sees the child's progress directly in the app), revoke consent and refuse further collection, and have the child's account and all of its data permanently deleted. Contact hockey365support@typif.ai or use the guardian controls in the app. Deletion removes the account, profile photo, training logs, custom workouts, streaks, team memberships, goals, message delivery records, and guardian links.

5. Who can see a player's information

• The player — their own logs, streaks, goals, and teams.
• Linked parents/guardians — the child's progress, after the link is approved.
• Team coaches and staff — the roster of their team (including names and profile photos), and a player's training progress only when the player (or guardian) has shared it with them. Players can choose to share automatically with coaches of teams they join later; this is off unless the player turns it on.
• Hockey365 staff trainers — players specifically assigned to them for training.
• Teammates — do not see each other's logs. They can see team leaderboards, which include only players who have turned on public leaderboards, shown as first name, last initial, and a training total (for example, pucks shot this week).
• The public — if a player turns on public leaderboards in Settings, their team or association can show those same leaderboards on its own website. Only first name, last initial, and the training total are shown; never photos, logs, or contact details. Turning the setting off removes the player from leaderboards when they next refresh, normally within a day.
• Our administrators — account records as needed to run the service, support families, and handle consent and deletion requests.

Sharing a streak card to social media is always started by the player from their device and goes through the device's own share screen; nothing is posted by us.

6. Service providers

We use a small number of providers to run Hockey365. They process data on our behalf and are not permitted to use it for their own purposes:

• Supabase — database, authentication, and file hosting (where account and activity data is stored).
• Resend — delivers sign-in code emails.
• Vercel — hosts this website and the staff panel.
• Apple — app distribution (App Store / TestFlight) and push notification delivery.
• Expo — relays push notifications from our servers to Apple for delivery; it receives the device's push token and the notification text.
• YouTube — workout videos are streamed from YouTube inside the app. When a video plays, YouTube/Google may collect viewing data under the Google Privacy Policy.

7. Data retention and deletion

• Account and activity data is kept while the account is active.
• Any account can be deleted at any time from the app: Settings → Delete Account. Accounts can also be deleted on request, by a guardian, or by us.
• When an account is deleted, the account and all associated data (profile photo, logs, custom workouts, streaks, memberships, goals, message delivery records, guardian links) are permanently deleted from our live systems. Copies remain in our encrypted nightly backups for up to 30 days, after which they are gone.
• Messages a coach sent to a team are kept as the team's record of what was sent, but a deleted player's delivery and read records go with their account.
• Support requests sent from the website are not tied to an account; we delete them on request.
• Under-13 accounts that never receive parental consent are deleted as described in Section 4.

8. Security

Data is encrypted in transit, stored with a hosting provider that encrypts data at rest, and protected by per-row access rules so that each account can only reach the records it is entitled to see. No system is perfectly secure, but we design access narrowly by default.

9. Changes to this policy

If we make material changes — especially any change to how children's information is collected, used, or disclosed — we will notify account holders and, where required by COPPA, obtain fresh parental consent before the change applies to a child's account.

10. Contact us

typif.ai, LLC · 7803 Glenroy Road, Suite 101, Bloomington, MN 55439 · 612-366-4962 · hockey365support@typif.ai