Privacy Policy

D1 Precision Scheduler ("D1 Precision," "we," "us," or "our") operates the web and mobile application available at d1precision.com and d1precision.base44.app (the "Service"). We are committed to protecting the privacy and personal information of coaches, players, guardians, staff members, and visitors who use our platform.

This Privacy Policy explains, in clear and detailed terms, what information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have over it. We have written this policy to be as thorough and transparent as possible, with special attention to the safety of minors who use the platform.

By creating an account or using the Service in any way, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy and our Terms of Service. If you do not agree with these practices, you should not use the Service.

We collect several categories of information to provide, secure, and improve the Service:

2.1 Account information

When you register, we collect your full name, email address, phone number, city, state, and a password (stored as a one-way hash, never in plain text). Coaches additionally provide their sport, coaching title, hourly rate, skill level, and a public profile. Guardians provide their relationship to a linked minor player.

2.2 Profile and role data

Each user is assigned a role (coach, player, guardian, staff, or administrator) and a user type. Coaches maintain a public profile, booking page, session pricing tiers, and a student roster. Players maintain a skill profile, position, goals, and equipment status. This information is visible to the appropriate parties as determined by your role and privacy settings.

2.3 Booking and scheduling data

We store appointment requests, time slots, session dates and times, session types (1-on-1, semi-private, small group, package credit), session prices, additional athlete information for group bookings, recurring booking requests, and attendance status (confirmed, cancelled, attended, no-show). When you connect a Google Calendar account, we store a limited token to sync session events to your calendar.

2.4 Messaging and communication data

Direct messages and group chat messages are stored and associated with conversation threads. Messages involving minors may be subject to content moderation, profanity filtering, after-hours queue review, and guardian visibility controls. We may retain the content of flagged messages for safety investigation and non-repudiation, even after a user deletes a message from their view.

2.5 Payment and financial data

We do not store full credit card numbers. Payment processing is handled by our payment providers (Stripe, PayPal). We retain transaction records, subscription status, session payments, refund records, commission payouts, tax documents, and payout logs. Coaches using Stripe Connect have a connected account whose status we track for payouts.

2.6 Media and content

Players and coaches may upload training videos, form-check videos, highlight reels, profile photos, storefront product images, support ticket photos, and post images. We store these in our file storage and associate them with your account and the relevant records.

2.7 Safety and moderation data

We collect and retain flagged user records, message evidence snippets, flag categories, severity levels, admin review notes, and resolution records. We also collect background check verification status for adults who interact with minors.

2.8 Technical and usage data

We collect device information, IP addresses (stamped on messages for non-repudiation), browser type, access times, session activity, and analytics events. We may use cookies and local storage to maintain your session, remember preferences (such as theme), and track anonymous usage analytics.

2.9 Referral and outreach data

When a staff referrer or coach sends outreach to a prospective student, we log the coach, recipient, template used, subject, a snapshot of the body, the delivery method, and the send timestamp, along with cooldown tracking to prevent spam.

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your sessions.
• To display and update your profile, booking page, and role-specific features.
• To process session bookings, recurring requests, waitlists, and cancellations.
• To sync appointments to your connected Google Calendar.
• To deliver direct and group messaging, with safety moderation for minor-involved conversations.
• To process payments, refunds, subscription billing, coach payouts, and staff commissions.
• To assign homework, drills, workout plans, skill assessments, and progress notes.
• To generate parent report cards, weekly recaps, and AI performance insights.
• To send booking confirmations, session reminders, notifications, and support ticket replies.
• To investigate, prevent, and respond to safety concerns, flagged content, and policy violations.
• To comply with legal obligations and respond to lawful requests from authorities.
• To improve the Service, debug errors, monitor uptime and health, and develop new features.
• To communicate with you about updates, announcements, and changes to the platform.

For users in the European Economic Area, United Kingdom, or Switzerland, we process personal data under the following legal bases:

• Consent: where you have given clear consent, such as connecting a Google Calendar account or enabling optional notifications.
• Contract: where processing is necessary to provide the Service you requested, such as booking sessions and processing payments.
• Legal obligation: where we must comply with applicable law, tax recordkeeping, or respond to lawful authority.
• Legitimate interests: where processing is reasonably necessary to operate a safe and reliable platform, such as fraud prevention, security monitoring, and minor-safety moderation.
• Vital interests: in rare cases to protect the safety of a minor or prevent serious harm.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Contact us using the details in Section 13 to exercise this right.

The safety of minors is central to how D1 Precision operates. This section explains, in detail, how we handle the personal information of players under the age of 18.

5.1 Guardian consent

We require a linked guardian account for minor players. A guardian must provide consent before a coach may message their child. Guardians may revoke coach messaging consent or block a coach at any time, which prevents new messages and notifies administrators.

5.2 Verified adult interactions

Adults who interact with minors in group chats must be background-checked and verified. Mixed groups of minors and unverified adults enter a grace period during which messaging is blocked until the group is reorganized or the adult is verified.

5.3 Content moderation

Messages involving minors may be filtered for profanity, scanned for blocked content such as URLs, and queued for administrator review after hours. Messages from minors are only visible to that child's guardian, while messages from verified adults are visible to all guardians in the group.

5.4 Flagging and investigation

We maintain a flagging system that detects grooming, sexual, violent, or otherwise harmful content. Flagged messages are retained with evidence for investigation by trained administrators. Flagged users may be suspended or removed from the platform.

5.5 Data minimization for minors

We collect only the information necessary to provide coaching services and maintain safety. We do not use minor data for targeted advertising or sell minor information to any third party.

5.6 Parental rights

Guardians may request access to, correction of, or deletion of their linked minor's personal information. They may also export conversation logs involving their child. Contact us using the details in Section 13.

We use cookies, local storage, and similar technologies to keep you signed in, remember your theme preference, secure your session against CSRF, and understand how the Service is used. We do not use cookies to sell your data to advertisers.

You can control cookies through your browser settings. Disabling cookies may affect your ability to sign in or use certain features. Where required by law, we obtain your consent before placing non-essential cookies.

We do not sell your personal information. We share information only as described below:

• Service providers: trusted third parties that help us operate, such as hosting, email delivery, payment processing (Stripe, PayPal), and analytics. These providers are bound by contractual obligations to protect your data.
• Other users: profile information, availability, and messages are shared between coaches, players, and guardians as necessary for the Service. Public coach profiles are visible to anyone.
• Connected accounts: when you connect Google Calendar or Slack, data is exchanged with those services according to their own policies and the scopes you authorize.
• Safety and legal: we may share information to investigate safety threats, enforce our Terms, respond to lawful requests, or protect the rights, property, or safety of D1 Precision, our users, or the public.
• Business transfers: if D1 Precision is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to the protections in this policy.

We retain your information for as long as your account is active and as needed to provide the Service. After account deletion, we retain certain records for the following purposes:

• Financial, tax, and payout records for up to seven (7) years as required by law.
• Flagged content and safety investigation records for up to three (3) years to support ongoing or potential investigations.
• Messaging records for non-repudiation and dispute resolution for up to two (2) years, even if a user deletes messages from their view.
• Audit logs of administrative actions for up to two (2) years.
• Anonymized or aggregated data that cannot identify you may be retained indefinitely.

You may request earlier deletion of your data subject to the legal and safety obligations above. See Section 9 for your rights.

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Rectification: request correction of inaccurate or incomplete information.
• Erasure: request deletion of your personal information, subject to legal exceptions.
• Portability: receive your data in a structured, machine-readable format or ask us to transmit it to another service.
• Restriction: request that we limit processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: withdraw consent for processing that relied on your consent.
• Opt out of sale or sharing: we do not sell personal information. California residents may opt out of any "sharing" as defined under the CCPA via the contact details in Section 13.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframe required by applicable law (generally 30 to 45 days).

We take reasonable and appropriate measures to protect your information, including encrypted data transmission (TLS), hashed passwords, row-level security that prevents one user from accessing another's private records, role-based access controls, audit logging, and administrator verification for sensitive actions.

No system is perfectly secure. We cannot guarantee absolute security of your data, but we continuously monitor for threats and respond to security incidents promptly. If a breach occurs that affects your personal information, we will notify you as required by law.

Your information may be processed in the United States and other countries where we or our service providers operate. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your jurisdiction. We apply appropriate safeguards to such transfers as required by applicable law.

We do not knowingly collect personal information from children under 13 without verifiable parental consent. Minor players aged 13 to 17 use the Service with guardian consent and oversight as described in Section 5. If you believe we have collected information from a child under 13 without consent, please contact us immediately and we will delete it.

If you have questions, requests, or concerns about this Privacy Policy or your personal information, you may contact us through the in-app support center, the Contact Us page, or by submitting a support ticket. We are committed to responding to privacy inquiries promptly and in accordance with applicable law.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes that affect your rights, we will provide notice through the Service or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

You can manage notifications, email preferences, session timeout, theme, and certain data sharing through your in-app settings. You can disconnect integrations such as Google Calendar and Slack at any time. You can also delete your account through the in-app account deletion flow, which removes your profile and personal data subject to the retention periods in Section 8.

D1 Precision Scheduler integrates with select Google APIs to provide scheduling and sign-in features. This section specifically explains how our app accesses, uses, stores, and shares Google user data in compliance with the Google API Services User Data Policy and the Limited Use requirements.

16.1 Google APIs and scopes we request

Our app requests access to the following Google API scopes, each limited to the minimum necessary to provide the requested feature:

• Google Calendar API: read and write access to calendars and events, used to sync your coaching sessions and appointments to your connected Google Calendar.
• Google Sign-In (OpenID Connect): basic profile scopes (such as email and profile) used to authenticate you and create your account, if you choose to sign in with Google.

We do not request any other Google API scopes, and we never request scopes beyond what is needed for the feature you are using.

16.2 How we access Google user data

We access your Google user data only when you explicitly connect your Google account (for Calendar sync) or choose Google Sign-In, and only through the scoped OAuth access you authorize. Access is granted via a secure OAuth token that we store on your behalf. We access your calendar events only to create, update, or delete appointment events that you generate through the Service.

16.3 How we use Google user data

We use your Google user data solely to provide the features you requested:

• To create, update, and remove calendar events that correspond to sessions booked through D1 Precision Scheduler.
• To authenticate you and create or populate your account profile when you use Google Sign-In.

We do not use Google user data for advertising, selling, or any purpose outside of providing the Service to you. Our use of Google user data complies with the Google API Services Limited Use requirements.

16.4 How we store Google user data

We store the OAuth access token and, where applicable, a refresh token, encrypted at rest and accessible only to the systems that perform the sync. We store the Google Calendar event IDs we create so we can keep them in sync with your appointments. We do not store the full contents of your calendar; we only retain the event records that our app creates or that are directly relevant to a session booked through the Service. Tokens and synced event references are retained until you disconnect the integration or delete your account.

16.5 How we share Google user data

We do not share your Google user data with any third party. We do not sell, rent, or disclose your Google calendar contents or sign-in profile information to advertisers, brokers, or other users. Google user data is accessed only by D1 Precision Scheduler to provide the sync and sign-in features you requested, and only as permitted by the Google API Services User Data Policy.

16.6 Your controls and revocation

You can disconnect Google Calendar or Google Sign-In at any time from the in-app Integrations settings or your Google account security page. When you disconnect, we delete the stored OAuth token and stop accessing your Google data. You may also revoke our app's access at any time from your Google Account permissions page, which immediately invalidates any token we hold. Deleting your D1 Precision account also removes all stored Google tokens and synced event references.

16.7 Security of Google user data

Google user data is protected by the same security measures described in Section 10, including encrypted transmission (TLS), encrypted token storage, role-based access controls, and audit logging. Only authorized systems and personnel may access the integration tokens, and only for the purpose of operating the sync feature.

16.8 Transparency and changes

If we change the Google API scopes we request or how we use Google user data, we will update this section and notify you through the Service before the change takes effect, consistent with the Google API Services User Data Policy.