PRIVACY POLICY

1. Who We Are

Athletes One Link is an iOS application published by OnBaseIQ LLC. The app allows student-athletes to build a college recruiting profile and share it via a single personal URL. This Privacy Policy describes how we collect, use, and protect the information you provide when using the app and the public profile pages hosted at 1link.onbaseiq.com.

By using Athletes One Link, you agree to the practices described in this policy. If you do not agree, please do not use the app.

2. Information We Collect and Why

We collect only information you choose to provide. We do not collect data passively from your device.

Account Authentication

• Apple ID (via Sign in with Apple) — used to identify your account securely. Apple may share your name and email (or a private relay address). We do not receive your Apple ID password.

Recruiting Profile Data (what you enter in the app)

• Sport and athletic info — sport, position, jersey number, class year, height, weight, and sport-specific statistics
• Academic info — school name, club/travel team, GPA, intended major, academic honors
• Athletic recognition — athletic honors and awards you choose to include
• Contact details — athlete email and phone number (shown only if you enable "Contact Approved")
• Parent/guardian contact — name and email of a parent or guardian (shown only if you enable "Contact Approved")
• Coaching staff — names, roles, and contact info for coaches you add
• Profile photo — an optional photo selected from your device's photo library. It is resized to a maximum of 400×400 pixels and stored as part of your profile data. We access only the photo you select; no other photos on your device are accessed.
• Videos — links to YouTube or Hudl videos you paste into the app. We store the URL only; video content is served by YouTube/Hudl directly.
• Recruiting platform links — links to external profiles (Hudl, NCSA, SportsRecruits, MaxPreps, etc.) and social media accounts you add
• Tournament schedule — event names, dates, and locations you enter manually
• Profile slug — the custom URL suffix you choose (e.g., "vshin2029")

Subscription Data

• Subscription status — whether your subscription is active, used to determine whether your public profile is visible
• Apple transaction ID — an identifier provided by Apple to verify subscription purchases and renewals. We do not store full payment details.

3. How We Use Your Information

• To create, store, and display your public recruiting profile at your personal URL
• To authenticate your account and allow you to edit your own data
• To verify and manage your subscription status via Apple's App Store Server Notifications
• To respond to support requests you send to us directly

We use your information only for these purposes. We do not use it for advertising, behavioral profiling, or any other purpose not listed here.

4. Your Public Profile

When you tap Publish, the information in your profile becomes publicly accessible to anyone with your profile URL — including college coaches, scouts, and recruiters. This is the core function of the app and requires no login from the viewer.

You control exactly what is published:

• Fields you leave blank will not appear on your profile
• Contact information (athlete and parent/guardian) is hidden unless you turn on the "Contact Approved" toggle
• You can update or remove any information at any time from within the app
• Canceling your subscription removes your profile from public view while preserving your data in the app

5. Sign in with Apple

Athletes One Link uses Sign in with Apple as the sole authentication method. This means:

• You never create a username or password with us
• Apple handles the authentication; we receive only an Apple User ID and, optionally, your name and email
• You may choose to hide your email using Apple's private relay feature
• Deleting your Apple ID or revoking app access through Apple Settings will prevent login but will not automatically delete your stored profile data — contact us to request deletion

For full details on Apple's data practices: apple.com/legal/privacy

6. Data Storage and Security

Your profile data is stored in Supabase (a secure, SOC 2-compliant cloud database). Profile pages are hosted on Cloudflare Pages. Both services use industry-standard encryption in transit (HTTPS/TLS) and at rest.

Access to your profile row is protected by Row Level Security (RLS) in our database. Only you — authenticated with your Apple ID — can modify or delete your own data. Public profile reads require no authentication, consistent with the app's purpose.

Your profile photo is stored as part of your profile data in Supabase (compressed and embedded in your profile record, not in a separate file storage bucket).

7. Subscriptions and Payments

Athletes One Link uses an auto-renewable subscription to unlock the ability to publish and maintain a public recruiting profile. All billing is handled entirely by Apple's App Store.

• We never collect, process, or store payment card numbers or banking information
• Subscription renewals, cancellations, and refunds are managed through your Apple ID → Settings → Subscriptions
• Apple sends us server notifications when your subscription status changes (renews, expires, or is refunded) so we can update your profile visibility accordingly

For billing disputes: reportaproblem.apple.com

8. Information Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• With infrastructure providers — Supabase (database) and Cloudflare (hosting) process your data solely to provide the service. Both are bound by their own privacy policies and data processing agreements.
• With Apple — subscription verification and authentication are handled by Apple's systems.
• As required by law — we may disclose information if required by a valid legal process, court order, or to protect the safety of users or the public.
• Public profile — information you choose to publish is accessible to anyone with your link. This is intentional and controlled entirely by you.

9. Children's Privacy (COPPA)

Athletes One Link is designed for high school athletes, many of whom may be under 18. We comply with the Children's Online Privacy Protection Act (COPPA) and similar laws.

• We do not knowingly collect personal information from children under 13 without verifiable parental consent
• If you are under 13, a parent or guardian must review and agree to this policy before you use the app
• If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete it

Parents or guardians who believe their child's information has been collected without consent should contact us at support@onbaseiq.com.

10. Your Rights and Choices

You have the following rights with respect to your data:

• Access — view all your profile data at any time in the app
• Correction — edit any field in your profile at any time
• Deletion — email support@onbaseiq.com with "Delete My Account" in the subject line. We will remove all your personal data within 30 days and confirm by email.
• Restrict publication — unpublish your profile at any time by canceling your subscription or toggling fields off
• Photo access — you can revoke the app's photo library access at any time in iPhone Settings → Privacy → Photos

For California residents (CCPA): you have the right to know what personal information is collected, request deletion, and opt out of sale (we do not sell data). Contact us at support@onbaseiq.com to exercise these rights.

11. Data Retention

We retain your profile data for as long as your account is active. If your subscription lapses, your data remains stored in the app (but your public profile is taken offline) until you either resubscribe or request deletion.

We do not retain data beyond what is necessary for the purposes described in this policy.

12. Third-Party Links

Your profile may contain links to external platforms (YouTube, Hudl, NCSA, Instagram, etc.) that you have added. These links open in an external browser or app. We are not responsible for the privacy practices of those third-party services. Please review their individual privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this page. For material changes, we will notify you through an in-app notice. Continued use of the app after changes take effect constitutes acceptance of the revised policy.

Contact Us

For any privacy-related questions, data requests, or concerns: