Privacy Policy

Performance of a contract when you create and use an account

Legitimate interests in operating, securing, and improving the Service

Information You Provide

• Name or profile information you choose to provide
• Email address and authentication credentials
• Content you create or upload, including drills, plans, notes, groups, and shared materials
• Organizational and financial records (budgets, reimbursements, receipts, and related metadata)
• Contact information provided during guest reimbursement submissions (name, email, phone)

Information Provided About Others

Users and organizations may upload or provide information about other individuals, including athletes, parents, guardians, or emergency contacts.

• Athlete names, jersey numbers, and attendance records
• Parent or guardian contact information
• Organizations using YCAD act as the data controller of athlete and member information.
• YCAD acts as a data processor and processes such information solely on the organization’s documented instructions.
• Users represent that they have obtained all necessary consents before providing third-party information, particularly information relating to minors.

Automatically Collected Information

• Device type, operating system, and app version
• IP address and basic network information used for security and abuse prevention
• Push notification tokens and communication preferences
• Administrative audit logs (records of who created, edited, or deleted organizational content)
• Crash diagnostics and limited usage analytics used to maintain reliability and performance

Payments and Subscriptions

Paid subscriptions are processed by platform billing providers such as Apple and may be managed using RevenueCat or similar services.

• App-specific user identifiers
• Subscription status and purchase history
• Technical identifiers required to restore purchases or enforce entitlements

YCAD never receives or stores full credit card or banking details.

Payment data is handled exclusively by authorized platform payment processors.

Enable collaboration and content sharing you intentionally initiate

Improve reliability, usability, and feature quality

Detect, prevent, and investigate misuse, fraud, or security incidents

AI Responsibility and Limitations

• AI output is automated and may be inaccurate or incomplete.
• AI-generated content must be reviewed before real-world use.
• AI features are informational tools only and do not constitute professional coaching, medical, accounting, tax, legal, or safety advice.
• YCAD is not responsible for decisions or outcomes arising from reliance on AI-generated material.

Content submitted to AI features is transmitted to external AI processing services to generate outputs.

We configure AI providers, where supported, not to use submitted content to train public foundation models.

AI providers may temporarily retain inputs and outputs for reliability, abuse prevention, and security monitoring.

Users should not submit sensitive medical, health, or highly confidential information into AI tools.

YCAD does not use private user content to train its own general-purpose AI systems.

Subprocessors

• Service providers process personal information only to deliver services to YCAD.
• Providers are expected to maintain appropriate security and confidentiality protections.
• A current list of subprocessors may be provided upon request.

Cloud hosting, authentication, and database providers (e.g., Firebase and Google services)

Crash reporting and analytics tools used for stability monitoring

Subscription and billing infrastructure (e.g., RevenueCat, Apple)

Legal authorities when required by valid law or court order

Account data is retained while your account remains active.

Account deletion requests are processed within approximately 30 days unless legal obligations require longer retention.

Security logs and encrypted backups may persist temporarily before automatic deletion.

Breach Notification

• If a breach of security safeguards involving personal information under our control creates a real risk of significant harm, we will notify affected individuals and applicable regulatory authorities as required by law.

Security Disclaimer

• No digital system can guarantee absolute security.
• Users share information at their own risk.

Foreign laws may permit lawful government access to data.

We take reasonable steps to ensure legally appropriate transfer safeguards.

Request account deletion, subject to limited legal exceptions

Withdraw consent where processing relies on consent

We do not knowingly collect personal data directly from children.

Organizations are responsible for obtaining required parental or guardian consent before uploading minor information.

If improperly collected child data is discovered, we will delete it within a reasonable timeframe.

The Last Updated date indicates the latest revision.

Continued use after updates constitutes acceptance of the revised policy.

Questions, complaints, or data requests can be submitted using the contact details below.