Version 1.0 — Effective April 21, 2026

Privacy Policy

CORE Coaching Soccer LLC · corecoaching.soccer

Version	1.0
Effective Date	April 21, 2026
Last Updated	April 21, 2026
Governing Law	Commonwealth of Massachusetts
Entity	CORE Coaching Soccer LLC
Privacy Contact	hello@corecoaching.soccer
Mailing Address	17 Dennett Road, Winchester, MA 01890
Published At	corecoaching.soccer/privacy

1. Introduction & Who We Are

CORE Coaching Soccer LLC (“CORE Coaching,” “we,” “us,” or “our”) is the operator of The Coaching Identity Platform, available at corecoaching.soccer (the “Platform”). We are a Massachusetts limited liability company with our principal place of business at 17 Dennett Road, Winchester, MA 01890.

This Privacy Policy explains how CORE Coaching collects, uses, stores, shares, and protects information about you when you visit our website, create an account, or use any features of the Platform. It also describes your rights with respect to your personal data and how to exercise them.

By accessing or using the Platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must not use the Platform.

This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Information We Collect

We collect information in several categories depending on how you interact with the Platform:

2.1 Account & Registration Data.

When you create a CORE Coaching account, we collect: your full name, email address, password (stored in hashed form — we never store plaintext passwords), coaching license level and organization affiliation (optional), and any profile information you choose to provide including coaching philosophy, playing background, and professional experience.

2.2 Coaching Identity & Assessment Data.

When you complete the Coach Philosophy Assessment (CPA) or other identity tools on the Platform, we collect: your responses to assessment questions, your resulting coaching archetype and identity profile, your CORE-6 Self-Assessment responses and historical data, your game model configurations, and your coaching philosophy documentation. This data is central to the Platform's identity-first coaching development purpose.

2.3 Platform Content You Create.

When you use the Platform's creation tools, we collect and store: sessions and activities you build using the Activity Builder, game plans and tactical configurations, coaching notes and reflection entries, and any content you choose to share with the CORE Coaching community library.

2.4 Player Profile Data.

If you use the Player Profiles feature, we collect data that you enter about the players you coach, which may include: player names and positions, skill assessment data and spider graph scores, individual development plan (IDP) content, LTAD stage designations, and match and training performance notes. See Section 9 for important information about player data and minor player protections.

2.5 Usage & Behavioral Data.

We automatically collect information about how you interact with the Platform, including: features and pages visited, time spent on the Platform and individual features, actions taken (sessions created, assessments completed, content saved), and device type, browser type, and operating system.

2.6 Technical & Log Data.

Our hosting and infrastructure providers automatically collect: IP address, browser user agent string, referring URLs, error logs and crash reports, and performance metrics. This data is used for security, debugging, and platform reliability purposes.

2.7 Communications Data.

When you contact us by email or through the Platform, we retain the content of those communications and your contact information for the purpose of responding to your inquiry and improving our service.

2.8 Payment Data.

When you subscribe to a paid tier, payment information (credit card number, billing address) is collected and processed directly by Stripe, Inc. CORE Coaching does not store your full payment card details. We retain records of subscription status, plan type, and billing history.

2.9 Cookie & Tracking Data.

We use cookies and similar tracking technologies as described in Section 6 of this Privacy Policy.

3. How We Collect Information

3.1 Directly From You.

We collect most information directly from you when you: register for an account, complete assessments and coaching tools, create content on the Platform, contact us with questions or feedback, and participate in beta program feedback sessions.

3.2 Automatically.

We automatically collect usage and technical data through: server logs maintained by Vercel (our hosting provider), behavioral analytics tools (PostHog), website analytics (Google Analytics 4 / GA4), and error monitoring tools (Sentry).

3.3 From Club Partners.

If you access the Platform through a club activation link provided by your club organization (such as a beta partner club), we may receive confirmation from the club that you are an authorized coaching staff member. We do not receive other personal data about you from club partners without your knowledge.

3.4 From Third-Party Authentication.

If you register or log in using a third-party authentication provider (such as Google OAuth), we receive basic profile information from that provider (name and email address) as permitted by their terms and your privacy settings with that provider.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Platform Functionality.

To create and maintain your account, deliver the Platform's features and tools, generate your coaching identity profile and archetype assessment, power the AI coaching assistant with relevant context from your profile, display your content in the community library where you have opted to share it, and enable club-level features where applicable.

4.2 Product Improvement.

To understand how coaches use the Platform, identify features that are working well or need improvement, prioritize product development and new feature design, and conduct research and analysis to improve the coaching development experience.

4.3 Communications.

To send you account-related emails (registration confirmation, password reset, account notices), send product updates, new feature announcements, and Platform-related communications, respond to your support requests and feedback, and where you have opted in, send educational content and coaching development resources through the Learning Hub.

4.4 Safety & Security.

To detect, investigate, and prevent fraudulent activity, unauthorized access, and abuse of the Platform, verify the authenticity of beta program participants and club activation link usage, monitor for and respond to technical errors and security incidents, and enforce our Terms of Service and Acceptable Use Policy.

4.5 Legal Compliance.

To comply with applicable laws and regulations, respond to lawful requests from government authorities, and establish, exercise, or defend legal claims.

4.6 Analytics & Aggregate Reporting.

To generate aggregate, anonymized analytics about Platform usage for internal reporting and, in the case of club partners who have achieved the applicable milestone threshold, to provide aggregate (non-identifiable) engagement reports about coaching staff activity within their organization.

We do not sell your personal data to third parties. We do not allow third-party advertisers to target you based on your personal data. CORE Coaching products are ad-free.

5. Third-Party Service Providers

We share your information with third-party service providers who perform services on our behalf. These providers are permitted to use your information only as necessary to provide their services to us and are contractually required to protect the security and confidentiality of your information.

Processor	Purpose	Data Shared	Data Location
Supabase, Inc.	Database, user authentication, and file storage.	Account data, coaching content, player data, assessment data	United States
Vercel, Inc.	Platform hosting, edge network, and content delivery.	IP address, technical log data, browser data	United States / Global CDN
Google LLC	Gemini API (AI Coaching Assistant) + Google Analytics 4.	AI inputs, coaching profile context (Gemini); anonymized usage data (GA4)	United States
PostHog, Inc.	Behavioral analytics and product event tracking. EU Cloud used.	Feature usage events, session recordings (if enabled), click and navigation data	European Union (EU Cloud)
Stripe, Inc.	Payment processing for paid subscription tiers.	Payment card data (processed directly by Stripe), billing address, subscription status	United States
Sentry, Inc.	Error monitoring and crash reporting.	Error logs, stack traces, device and browser metadata	United States
Upstash, Inc.	Redis-based caching for rate limiting. No persistent personal data stored.	Temporary session tokens, rate-limit counters	United States

PostHog EU Cloud: CORE Coaching has intentionally selected PostHog's EU Cloud infrastructure for behavioral analytics. Event tracking data is stored and processed within the European Union, aligning with GDPR data residency principles.

We may also disclose your information in the following circumstances:

Business transfers: If CORE Coaching is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Legal requirements: We may disclose your information if required by law or in response to a valid legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
With your consent: We may share your information with third parties when you have given us explicit consent.

6. Cookies & Tracking Technologies

6.1 What Are Cookies.

Cookies are small text files placed on your device by websites you visit. We use cookies and similar technologies (such as local storage and pixel tags) to operate the Platform, remember your preferences, and understand how you use our services.

6.2 Types of Cookies We Use.

Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect your account. These cannot be disabled without breaking core Platform functionality.
Analytics Cookies: Used by Google Analytics 4 (GA4) to collect anonymized data about how visitors use the Platform, including pages visited and referral sources.
Behavioral Tracking: PostHog places tracking scripts to capture product usage events (feature clicks, session flows, funnel completions). PostHog EU Cloud is used, meaning this data is processed in the EU.

6.3 Cookie Consent.

Where required by applicable law (including the EU ePrivacy Directive and GDPR), we will request your consent before placing non-essential cookies. A cookie consent banner is presented to users upon first visit to corecoaching.soccer. You may withdraw consent at any time by adjusting your browser settings or using the cookie preference tool available on the Platform.

6.4 Do Not Track.

Some browsers offer a “Do Not Track” (DNT) setting. We currently do not respond to DNT signals, as there is no industry-standard approach to DNT compliance. We will update this policy if that changes.

6.5 Third-Party Cookies.

Our third-party service providers (Google, PostHog) may place their own cookies as part of their services. Those cookies are governed by the respective provider's privacy policy.

7. Legal Basis for Processing (GDPR)

For users located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

Contract performance (Article 6(1)(b)): Processing necessary to provide the Platform services you have signed up for, including account management, content storage, and coaching identity tools.
Legitimate interests (Article 6(1)(f)): Processing for product improvement, security, fraud prevention, and aggregate analytics, where our interests are not overridden by your rights and freedoms.
Consent (Article 6(1)(a)): Processing based on your explicit consent, including non-essential cookies and marketing communications. You may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): Processing required to comply with applicable law.

CORE Coaching's primary user base is US-based youth soccer coaches. However, the Platform's GDPR posture is documented here given the PostHog EU Cloud data residency choice and the possibility of EEA-located users in future international expansion.

8. Your Privacy Rights

Depending on your location, you may have certain rights with respect to your personal data. We will honor these rights to the extent required by applicable law.

8.1 Rights for All Users.

Regardless of location, you may: access the personal data we hold about you by contacting hello@corecoaching.soccer, request correction of inaccurate personal data, request deletion of your account and associated personal data (subject to the data retention provisions in Section 10), opt out of non-essential marketing communications at any time using the unsubscribe link in any email we send, and export your coaching content in a usable format by contacting us.

8.2 California Residents — CCPA Rights.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the business purpose for collection, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request deletion of the personal information we have collected about you, subject to certain exceptions.
Right to Opt-Out of Sale: CORE Coaching does not sell personal information as defined under the CCPA.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at hello@corecoaching.soccer with the subject line “CCPA Rights Request.” We will respond within 45 days as required by the CCPA.

8.3 EEA & UK Residents — GDPR Rights.

If you are located in the European Economic Area or United Kingdom, you have the right to: access your personal data (Article 15), rectify inaccurate data (Article 16), erasure of your data in certain circumstances (Article 17), restriction of processing (Article 18), data portability (Article 20), object to processing based on legitimate interests (Article 21), and lodge a complaint with a supervisory authority. To exercise your GDPR rights, contact us at hello@corecoaching.soccer with the subject line “GDPR Rights Request.”

9. Children's Privacy & Player Data

9.1 Platform Age Restriction.

The CORE Coaching Platform is designed for adult coaches and is not directed to individuals under the age of 18. We do not knowingly collect personal information directly from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information.

9.2 COPPA Compliance.

CORE Coaching complies with the Children's Online Privacy Protection Act (COPPA). Because the Platform is directed exclusively at adult coaches, COPPA's verifiable parental consent requirements do not apply to our general data collection. Player Profile data is entered by adult account holders, not collected directly from players.

9.3 Player Profile Data — Coach Responsibility.

Coaches may enter data about the youth players they coach into the Player Profiles feature. By entering player data into the Platform, you, as the account holder, acknowledge and represent that:

You have a legitimate coaching relationship with each player whose data you enter;
You have obtained any parental or guardian consent required by applicable law (including COPPA for players under 13), your club's policies, and your sport's governing body before entering data about any minor player;
You will limit player data to what is reasonably necessary for legitimate coaching and development purposes;
You will not enter sensitive personal data about minors that is not directly relevant to coaching and player development.

9.4 How Player Data Is Used.

Player Profile data is used solely to provide the Player Profiles feature to you as the account holder. It is not used for CORE Coaching's own marketing purposes, not shared with other coaches unless you explicitly share a specific profile, not used to train AI models, and accessible to club administrators within your organization only in accordance with the club licensing agreement.

9.5 FERPA.

If you coach within a school-district-affiliated program, the Family Educational Rights and Privacy Act (FERPA) may impose additional requirements regarding student education records. CORE Coaching does not represent that its Player Profiles feature constitutes a FERPA-compliant student record system. Coaches working in school-affiliated programs should consult with their institution before entering student data.

10. Data Retention

10.1 Active Accounts.

We retain your personal data and coaching content for as long as your account is active. We retain this data to provide you with continuous access to your coaching history, identity profile, and created content.

10.2 Account Termination.

Following account termination or deletion, we will retain your personal data for a period of 30 (thirty) calendar days to facilitate account recovery requests. After this 30-day period, your personal data will be permanently deleted or irreversibly anonymized from our active systems.

10.3 Community Content.

Coaching content you have shared with the CORE Coaching community library may continue to exist in anonymized form after your account is deleted. Identifying information associated with that content will be removed.

10.4 Financial Records.

Records related to paid subscriptions, billing history, and financial transactions are retained for seven (7) years as required by applicable tax and accounting law, even after account deletion.

10.5 Legal Holds.

We may retain specific data for longer periods where required by law, ongoing legal proceedings, or a regulatory investigation.

10.6 Player Data.

Player Profile data is deleted along with the coach account that created it, subject to the 30-day retention window in Section 10.2. We do not retain player data beyond what is necessary to serve the coach account holder.

11. Data Security

11.1 Security Measures.

We implement and maintain industry-standard technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include: encrypted data transmission using TLS/HTTPS for all Platform communications, password hashing using bcrypt or equivalent (plaintext passwords are never stored), Supabase Row Level Security (RLS) policies enforcing data isolation between user accounts, authentication using PKCE OAuth flows with Supabase Auth, and infrastructure hosted on SOC 2-compliant cloud providers (Vercel, Supabase).

11.2 Limitations.

No security system is impenetrable. We cannot guarantee that our security measures will prevent all unauthorized access to your data. You are responsible for maintaining the security of your account credentials and for notifying us promptly at hello@corecoaching.soccer if you suspect unauthorized access.

11.3 Breach Notification.

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify affected users and, where required by applicable law (including GDPR Article 33), notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

12. International Data Transfers

CORE Coaching is based in the United States. If you are accessing the Platform from outside the United States, please be aware that your personal data will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Economic Area or United Kingdom: Personal data transferred to the United States is subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) where applicable.

PostHog EU Cloud exception: Behavioral analytics data processed by PostHog is stored and processed within the European Union and is not transferred to the United States. This is a deliberate data residency decision.

13. AI & Automated Decision-Making

13.1 AI Coaching Assistant.

The Platform's AI coaching assistant (powered by Google Gemini) uses your coaching identity profile, assessment responses, and session inputs to generate personalized coaching guidance. This is an assistive tool. All coaching decisions remain with you as the coach.

13.2 Coaching Archetype Assignment.

Your Coach Philosophy Assessment responses are processed by CORE Coaching's proprietary scoring engine to generate a coaching archetype designation from among 16 defined archetypes. This is an automated process. If you believe your archetype designation is inaccurate, you may retake the assessment or contact us at hello@corecoaching.soccer to discuss.

13.3 No High-Stakes Automated Decisions.

CORE Coaching does not use automated decision-making in ways that produce legal effects or other similarly significant effects on you. Archetype designations are coaching development tools, not evaluative determinations that affect your employment, licensing, or standing with any governing body.

13.4 AI Data Sharing.

When you interact with the AI Coaching Assistant, your inputs and relevant profile context are transmitted to Google LLC via the Gemini API for inference processing. This data is subject to Google's API data use policies. CORE Coaching does not authorize Google to use this data for training its general AI models except as permitted by Google's applicable terms.

14. Marketing Communications

14.1 Transactional Emails.

We will send you transactional emails that are necessary for the operation of your account (account confirmation, password reset, billing notifications, important policy updates). These cannot be opted out of while your account is active, as they are necessary for account management.

14.2 Product & Learning Hub Communications.

With your consent, we may send you product update emails, Learning Hub content newsletters, and coaching development resources. You may opt out of these communications at any time by clicking the unsubscribe link in any such email or by updating your notification preferences in Account Settings.

14.3 Beta Program Communications.

As a beta participant, you may receive communications specific to the beta program, including feedback requests, feature announcements, and program updates. These are treated as transactional communications during the beta period.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. We will notify you of material changes by:

Sending an email to the address associated with your account at least 14 days before the changes take effect;
Posting a prominent notice within the Platform; and
Updating the "Last Updated" date at the top of this Privacy Policy.

Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the updated Privacy Policy, you must stop using the Platform and may request deletion of your account. All prior versions of this Privacy Policy are archived and available upon request by contacting hello@corecoaching.soccer.

16. Contact Us & Privacy Requests

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Contact	Christopher Bryce Schomburg, Sole Member
Email	hello@corecoaching.soccer
Subject Line	Privacy Policy Inquiry / Rights Request
Mailing Address	CORE Coaching Soccer LLC, 17 Dennett Road, Winchester, MA 01890
Response Time	We will respond to all privacy requests within 30 days. CCPA requests: 45 days. GDPR requests: 30 days (extendable to 60 days for complex requests).

For California residents submitting CCPA requests, please include “CCPA Rights Request” in the subject line and specify the right you are exercising (Right to Know, Right to Delete, or Right to Opt-Out of Sale).

For EEA or UK residents submitting GDPR requests, please include “GDPR Rights Request” in the subject line and specify the Article under which you are making your request.

If you are not satisfied with our response to your privacy request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

CORE Coaching Soccer LLC · corecoaching.soccer/privacy · Privacy Policy v1.0 · Effective April 21, 2026