Privacy Policy

Effective date: June 1, 2026 Last updated: April 21, 2026

This is the privacy policy for Cubs with the Cleats, a training app operated by Veltco, LLC ("we," "us," "our"). If you use this app, this page tells you what information we collect, what we do with it, and the rights you have over it.

If anything here is unclear, email us at admin@cubswithcleats.com.

The short version

• We collect only what the app needs to work: your name, email, workout logs, attendance, team info.
• We do not sell your information. Ever.
• We do not show ads.
• We do not share your data with advertisers or data brokers.
• We use a small set of trusted service providers (Supabase, Resend, Vercel, PostHog, Sentry) to actually run the app.
• Most users of this app are high school students. We take that seriously and are built for a closed, known community.
• You can delete your account and all your data at any time by emailing admin@cubswithcleats.com.

1. Who we are

Cubs with the Cleats is operated by:

Veltco, LLC 10247 Jefferson Hwy, Building 1, Unit D Baton Rouge, LA 70807 admin@cubswithcleats.com

Veltco, LLC is the data controller for information collected through this app.

2. Information we collect

2.1 Information you give us

When your program admin invites you and you create an account, we collect:

• First and last name — so teammates, captains, and coaches can identify you.
• Email address — for login, password reset, and program notifications.
• Phone number (optional) — only if you choose to provide it for SMS reminders.
• Date of birth — to confirm you are 13 or older.
• Account password — stored as a one-way hashed value. Not even our engineers can read it.
• Profile photo (optional) — if you upload one.

2.2 Information you create using the app

When you use the app, we record:

• Workout results — drill performance, times, reps, distances.
• Attendance — check-ins at sessions.
• Shoutouts and notes — anything you write in the app for your teammates or captain.
• Time-off requests — reason category (injury, illness, family, travel, other) and any note you choose to add.
• Announcements — only if you post one (admins and captains).

2.3 Information collected automatically

• Device information — device type, operating system, app version. Used for troubleshooting crashes.
• IP address — for security logging and to prevent abuse.
• Usage data — which screens you visit and how often, collected in aggregate. Used to improve the app.
• Push notification tokens — only if you opt in to notifications.

3. How we use your information

We use your information for these purposes only:

1. To run the app. Display your workouts, show you the leaderboard, notify you about sessions, process excused absences.
2. To communicate with you. Send approved program announcements, password resets, excuse approvals, and weekly coach emails.
3. To keep the app secure. Detect suspicious logins, prevent abuse.
4. To make the app better. Look at aggregate usage patterns to figure out what's working.
5. To comply with legal requirements. If we're required by law to keep or disclose something, we will.

We do not use your information for advertising. We do not sell it. We do not share it with third parties for their own marketing.

4. Who we share your information with

Your information goes to two categories of recipients only:

4.1 Inside the program

• Your teammates and captain see your name, workouts, attendance, and shoutouts — that's the point of the app.
• Your admin sees all of the above plus excuse details.
• Coaches may see your performance data depending on your program's setup.

4.2 Our service providers

These companies operate our infrastructure. They process data on our behalf under contract, and they are not permitted to use it for their own purposes.

We do not share your information with anyone else. We do not sell it. We do not rent it.

5. How long we keep your information

• Active account: we keep your information as long as your account is active.
• After the program ends: historical records (season stats, PRs, leaderboard archives) are retained so you can look back on them.
• Account deletion: you can request deletion at any time (see section 7). When you do, we remove your personal identifiers within 30 days. Anonymized, aggregated data may remain — that data can no longer be tied to you.
• Legal holds: if we're required by law to preserve something, we will, but only for as long as required.

6. Children and teens

Most users of this app are high school students, many of whom are minors. We take this seriously.

• Minimum age: 13. We do not knowingly collect information from anyone under 13. If we learn we have, we delete it.
• Parental consent: for users under 18, parental consent is collected by the program administrator (the school, coach, or team) before the join code is issued. The app does not collect parental consent directly — that happens offline during enrollment.
• Parental rights: a parent or legal guardian may, at any time, request to review, correct, or delete their minor's data by emailing admin@cubswithcleats.com. We will respond within 30 days.
• Discoverability: the app requires a valid join code to create an account. Random people cannot sign up. This is a closed community by design.

7. Your rights

You have the following rights over your information. They apply regardless of what state you live in:

• Access — request a copy of all the information we have about you.
• Correction — fix anything that's wrong.
• Deletion — delete your account and your personal data.
• Export — get your data in a readable format (CSV or JSON).
• Restriction — ask us to stop processing your data in specific ways.
• Objection — tell us you don't want us to process your data for a specific purpose.
• Withdraw consent — where we rely on consent, you can withdraw it.

To use any of these rights, email admin@cubswithcleats.com. We verify the request (confirm it's really you) and respond within 30 days.

Residents of California

California law (CCPA/CPRA) gives you the specific rights above, plus:

• The right to know the categories of personal information we collect and the categories of third parties we share with (see sections 2 and 4 above).
• The right not to be discriminated against for exercising any of these rights.
• We do not sell personal information. We never have.

Residents of the EU / UK

If you are in the EU or UK, GDPR and UK GDPR apply. The rights in this section already cover what those laws require. Our legal basis for processing is performance of a contract (running the app for you) and consent where applicable (push notifications, optional fields).

You also have the right to lodge a complaint with a supervisory authority, though we hope you'd email us first.

8. How we protect your information

• Encryption in transit: all data between your device and our servers is encrypted using TLS.
• Encryption at rest: Supabase encrypts the database on disk.
• Passwords: stored as one-way hashed values (bcrypt). Not readable by anyone, including us.
• Row-level security: our database enforces access rules at the row level — a user cannot read another user's data by guessing IDs.
• Access controls: only a small number of authorized personnel at Veltco can access the production database, and only when necessary.
• Incident response: if we discover a breach affecting you, we will notify you by email within 72 hours.

No system is 100% secure. If you believe your account has been compromised, change your password and email admin@cubswithcleats.com immediately.

9. Cookies and tracking

The web version of the app uses a small number of cookies:

• Authentication cookies — so you stay logged in between sessions.
• Session cookies — to remember your preferences during a visit.

We do not use:

• Third-party advertising cookies.
• Cross-site tracking cookies.
• Analytics cookies that identify you personally.

PostHog collects anonymous usage data using first-party cookies only. You can opt out in your profile settings.

10. Push notifications

If you install the mobile app, we'll ask you whether to send push notifications. You control this:

• iOS: Settings → Cubs with the Cleats → Notifications
• Android: Settings → Apps → Cubs with the Cleats → Notifications

Notifications are used for: announcements from your captain or admin, excuse approvals, session reminders.

11. International users

The app is operated from the United States. If you use it from outside the US, your information is transferred to and stored in the US. By using the app, you consent to this transfer.

12. Changes to this policy

We may update this policy as the app evolves. When we do:

• We'll change the "Last updated" date at the top.
• For significant changes, we'll notify you via email or in-app message at least 14 days before the changes take effect.
• You can see the full history of changes by emailing admin@cubswithcleats.com.

If you do not agree to a change, you can delete your account before the change takes effect.

13. Contact us

Privacy questions, requests to exercise your rights, or concerns of any kind:

Veltco, LLC 10247 Jefferson Hwy, Building 1, Unit D Baton Rouge, LA 70807 admin@cubswithcleats.com

We read every email. You'll get a response from a real person within 5 business days for general questions, and within 30 days for formal requests under section 7.

This policy is written to be readable by humans, not lawyers. If you need the legal-form version for any official purpose, email us and we'll send one.