This Privacy Policy explains how CSM Inc., a Michigan corporation ("CSM," "we," "us," "our," or "ParentEdge"), collects, uses, shares, and protects information when you use parentedge.com, the ParentEdge mobile app, and related services (together, the "Service").
By using the Service you acknowledge that you have read this Policy. If you do not agree, do not use the Service. ParentEdge is built for a parent or guardian (or another adult) to use on behalf of an athlete; the athlete does not have an account and does not use the Service directly.
Quick links: Consumer health data · Content you choose to share · Your rights
1. Information We Collect
1.1 Information you provide
- Account information. Your email address and a password (stored as a secure hash by our authentication provider, Supabase). Optionally your first name and timezone.
- Athlete information. You choose to tell us about up to four athletes in your care. For each athlete: name, birthday, gender, height, weight, school, social handles, and your observations about personality and temperament. For each sport (up to three per athlete): sport, position, experience level, jersey number, team and coach names, season status and schedule, goals, and model athletes. You may also record date-anchored events (games, practices, tournaments) and injury observations. Some of this is health-related; see Section 1.8.
- Information about other people. You may mention other people in conversation, such as a coach's name or a teammate. You are responsible for having the right to share it. The Service never builds a profile of anyone other than your athlete.
- Conversations. Messages you type or dictate, and the Service's replies. This is the core of the product; everything else is derived from it.
- How the Service remembers. ParentEdge is designed to remember your athlete over time. To do that it automatically, without a separate prompt each time: keeps a short note of things you mention (a practice, a game, a moment) so they can be recalled later; maintains an evolving internal description of your athlete and of how you like to communicate; proposes structured profile updates (a new goal, a season change), which are saved only when you accept them (the proposal record includes a brief rationale that may quote your words); writes a short internal summary of each week's conversations for each athlete and sport and, over a season, a longer summary built from those weeks; and archives the conversation from your initial setup. These notes and summaries exist so the Service can give you better, more specific help. They are stored with your account, included in your data export, deleted with your account, never shared, and never used to train AI models.
- Generated content. Practice plans, letters to your athlete, updates, Athlete Cards, and other documents the Service writes for you, including PDF copies you create and share images you generate.
- Photos and video. See Section 1.4.
- Voice. See Section 1.3.
- Payment information. Our payment processor (Stripe, Inc.) collects and stores your billing details. We never see your full card number. We keep a subscription status, a customer identifier, and billing-period dates that Stripe returns to us.
- Consent records. When you sign up or accept updated terms we record the event, the document versions, the timestamp, your IP address, and your browser's user-agent string.
- Survey answers and feedback. If you answer one of our short surveys (for example after canceling) or rate a document, we keep your answers.
- Communications. If you email us, we keep the correspondence.
- Partner program information. If you are a coach or organization in our referral program, we collect your name, organization, an optional photo and tagline, the payout method and handle you give us, and a count of clicks on your referral page.
1.2 Information collected automatically
- Technical data. IP address, browser and device type, operating system, referring page, and timestamps, used for authentication, security, abuse prevention and rate limiting. We also log how much of the Service each account uses (for example how many requests and how much AI capacity a conversation consumed) to operate fair-use limits and understand our costs.
- Cookies and similar storage. We set first-party cookies for authentication (keeping you signed in), a cookie that keys your try-it-first session before you have an account (35 days), and, if you arrived from one of our advertisements, an attribution cookie recording the campaign and click identifiers (90 days). Browser local storage holds product-state preferences (a dismissed notice, your last-viewed sport). Our analytics provider sets its own first-party cookies to recognize a returning browser. We do not use a cookie banner; Section 5 explains how to opt out.
- Product analytics. We use PostHog to understand how the Service is used: pages viewed (including the page address, which on a shared page may contain the athlete's first name), referring source and campaign, approximate location (country and region from IP), device and browser type, clicks and in-product interactions, and how long pages are viewed. We do not send your email address or your athlete's profile to PostHog.
- Session recordings. While ParentEdge is in its early period we record on-screen sessions to find and fix problems. Everything you type is masked in recordings. Text displayed on screen is not masked, so on conversation screens a recording can include the content of your conversation about your athlete. We use recordings only to diagnose problems and review quality, they are kept for a limited time by our analytics provider, and they are never used for advertising. We expect to narrow or turn off recording as the Service matures.
- Error reports. When something breaks, a technical error report (the error, the page, browser type) is sent to Sentry. We configure it not to include your personal information.
- Location on the directory. If you tap "Use my location" on our youth-sports directory, your browser asks for permission and uses your location to center the map. It is used in your browser only; we do not store it.
1.3 Voice
If you use dictation or Driving Mode, your microphone audio is streamed from your browser directly to our speech provider, OpenAI, L.L.C., which returns the transcribed text. We do not receive or store the audio. In Driving Mode the Service's spoken replies are produced by sending the reply text, which may include your athlete's name and the content of your conversation, to OpenAI's text-to-speech service. OpenAI processes this data under its API terms, which do not permit using it to train OpenAI's models; it may be retained by OpenAI briefly for abuse monitoring. We send OpenAI a hashed account identifier for abuse prevention, never your email or your athlete's profile. We record the number of seconds of voice used for fair-use limits.
1.4 Photos and video
Photos. A photo you attach to a message is sent to our AI provider (Anthropic) to generate the reply, and is stored with your conversation so the message stays visible. It is deleted when you delete that athlete or your account. Please do not attach medical images; the Service will not evaluate them and will direct you to a medical professional.
Video clips. Video you share is analyzed in one of two ways:
- Still-frame analysis. Your device selects a small number of still images from the clip and sends only those to Anthropic. The video file does not leave your device and the still images are not kept after the reply.
- Full-clip analysis. Where available, the clip, including its audio, is uploaded briefly to our own private storage and delivered to our video-analysis provider (Google LLC, Gemini API), together with the message you wrote (which may include your athlete's name) and the name of the skill being analyzed. No other profile information is sent. The clip is deleted from Google when the analysis completes. Our staging copy and the written analysis are deleted from our systems normally within seconds and in all cases within a few hours. Under the paid API terms we use, Google does not use the clip to train its models.
In both modes a single small preview image from the clip is stored with your conversation. Movement-measurement features, where offered, run entirely on your device; only the resulting numbers are stored. Please do not upload footage of other people's children without permission; the Service describes only your athlete and never identifies anyone else.
1.5 Advertising measurement
If you reach ParentEdge by clicking one of our advertisements, we store the campaign identifiers in a first-party cookie so we can tell which advertising works. On our public marketing pages we may load a measurement pixel from the advertising platform that referred you (currently Meta), which reports page views and marketing-funnel steps back to that platform. The pixel is not loaded inside the signed-in product, on shared pages, or on the try-it-first conversation. If you later start a subscription after arriving from one of our ads, we send that platform (Meta or Reddit) a conversion event with your email address and account identifier hashed (SHA-256), the ad click identifier, and, for some events, your IP address and browser type. Nothing is sent for visits that did not come from our ads, and nothing from your athlete's profile or your conversations is ever sent to an advertising platform. We honor the Global Privacy Control browser signal: when it is on, we do not load advertising pixels for your browser and our analytics is switched off for it.
1.6 What we do not do
We do not sell personal information. We do not use your content or your athlete's information to train AI models, and our AI providers are contractually barred from doing so. We do not build or buy advertising profiles. We do not create or store biometric identifiers or templates (such as face geometry or voiceprints); movement analysis describes technique and is never used to identify anyone. We do not store precise geolocation. Beyond Section 1.5, we do not load third-party advertising trackers.
1.7 Trying ParentEdge without an account
Our "try it" pages let you answer a short quiz and run the athlete-setup conversation before creating an account. What you share there, including information about your athlete, is stored temporarily, keyed to a browser cookie rather than an account, and processed by Anthropic the same way as other conversations, solely to run that conversation. It is never shared or sold and never used to train AI models. If you do not create an account, it is deleted automatically within 30 days. If you do, it becomes part of your account and is governed by the rest of this Policy. These pages are for a parent or another adult; if the person typing tells us they are the athlete or under 18, the conversation stops and nothing further is kept.
1.8 Consumer health data
Some information you share is health-related: injury observations, height and weight, and observations about mood, nerves or confidence. This section is our consumer health data privacy notice for residents of states that require one (including Washington, Nevada and Connecticut).
- What we collect: the categories above, only because you type them, and any inferences the Service draws from them to help your athlete (for example, suggesting rest instead of a drill).
- Why: solely to provide the guidance you ask for. We do not use health-related information for advertising, and we do not use it to write reminder or marketing emails.
- Who receives it: the service providers in Section 3, under contracts that restrict use to providing our Service. We do not sell it or share it for marketing.
- Your rights: access, deletion and withdrawal of consent, exercisable as described in Section 5. Deleting an injury or an athlete in the app deletes the associated health information; deleting your account deletes all of it.
- We do not use geofences, and we do not collect health information from anyone other than you.
2. How We Use Information
We use the information above to provide and personalize the Service (including generating documents and guidance specific to your athlete and remembering them over time); authenticate you and protect your account; detect and prevent abuse, fraud and security incidents; apply fair-use limits; process payments; send you account and product emails (Section 2.1); respond to your requests; diagnose problems and improve the Service; and comply with law.
Quality review. A small number of our staff may read individual conversations, documents and setup transcripts to diagnose a problem you reported, to review the quality of what the Service produced, or to investigate misuse. Every such access through our console is logged (Section 3.1). We do not use your conversations to train AI models.
We do not sell your personal information. We do not use your content to train AI models. We do not share your information with advertisers, data brokers, or other commercial third parties.
2.1 Emails we send
- Account emails (receipts, payment problems, password changes, deletion and export confirmations) go to everyone with an account; you cannot opt out while you have an account.
- Product emails (getting-started reminders, "your trial ends soon," a weekly digest, check-ins if you have been away, a short survey) each carry an unsubscribe link and a one-click unsubscribe header, and you can change preferences at any time in your account. These emails may mention your athlete's name, a goal you told us about, or a document you built, so they are useful rather than generic. They never mention injuries or other health information.
- Every email includes our postal address.
3. Who We Share Information With
We share information only with the following service providers and recipients, each bound by confidentiality and data-protection terms.
| Recipient | Purpose | What is shared |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | All account, athlete, conversation and generated content; uploaded images and PDFs |
| Anthropic, PBC | AI inference (Claude) | The instructions we give the model, your athlete's profile context and our internal notes and summaries, conversation history, your current message, any photo you attach, still frames from a video clip in still-frame mode, and, for full-clip video, the written analysis from Google. Anthropic does not train on API data under its commercial terms and may retain inputs and outputs briefly (typically up to 30 days) for abuse review. Prompt caching holds recent context for up to one hour. |
| Google LLC | Full-clip video analysis (Gemini API) | Only when you use full-clip analysis: the clip with audio, your accompanying message, and the skill name. Deleted after analysis; not used for training under the paid API terms. |
| OpenAI, L.L.C. | Voice transcription and text-to-speech | Your microphone audio (streamed from your browser) and, in Driving Mode, the reply text to be spoken, plus a hashed account identifier. Not used for training under OpenAI's API terms; brief abuse-monitoring retention. |
| Vercel Inc. | Hosting, content delivery, basic web analytics | Request metadata, IP address, user-agent, logs (retained up to 30 days) |
| PostHog, Inc. | Product analytics and session recordings | Pseudonymous usage events, page addresses, approximate location, device and browser type, clicks, and session recordings with typed input masked (Section 1.2) |
| Functional Software, Inc. (Sentry) | Error reporting | Technical error reports without personal information |
| CARTO / OpenStreetMap contributors | Map tiles on our public youth-sports directory | Your IP address and the map areas you view, as with any web map |
| Stripe, Inc. | Payments | Billing details, email, transactions. Stripe keeps invoice records under its own legal obligations after you delete your account. |
| Resend, Inc. | Email delivery | Your email address and the message content; short-lived delivery logs. Our emails load a font from Google Fonts, so your mail client may request it from Google. |
| Meta Platforms, Inc. and Reddit, Inc. | Advertising measurement (Section 1.5) | Only for visits that came from our ads: hashed email and account identifier, click identifiers, and, for some events, IP address and browser type |
| Referral partners (coaches and organizations) | Referral program | If you signed up through a partner's link, the partner can see that "a family" signed up on a date and whether that family is still trying, subscribed, or lapsed. They never see your name, email, or anything about your athlete. |
| Law enforcement / legal compliance | Valid legal process; protecting rights, property or safety | What the law requires |
We do not share information with data brokers or anyone else beyond this table, and we update the table when a provider changes.
3.1 Staff access
A short, named list of ParentEdge staff, configured in our deployment environment, can access account data through a private administrative console for support, data-rights requests, quality review (Section 2), investigating misuse, and legal obligations. Every access to an account through the console, including viewing conversations and documents, is recorded in an internal audit log with the staff member, the action, and the account. Audit records survive account deletion but contain no personal information; they reference an account identifier that is meaningless once the account is gone.
4. Children and Athletes
The Service is for adults (18+). We do not knowingly collect personal information directly from children under 13, and the Service is not designed for children to use. If it becomes apparent that the person using the Service is a child, we stop and delete what was collected; if you believe this has happened, email privacy@parentedge.com.
You provide information about your athlete. If the athlete is a minor, you represent that you are their parent or legal guardian. If the athlete is 18 or older, you represent that they know you use ParentEdge and agree to your sharing their information here. The Service is designed for athletes ages 4 and older.
Information about athletes is never sold, never used for advertising, and never used to train AI models. An athlete who has reached the age of majority may contact privacy@parentedge.com to exercise data rights directly; we will verify identity, which usually means coordinating with the account holder.
5. Your Rights and Choices
You may access, correct, delete, and export your personal information, object to or restrict certain processing, and withdraw consent where processing is based on consent.
In-app (fastest):
- Access & portability. Account → Your data → Download my data builds a ZIP of everything we hold for you, including the internal notes and summaries described in Section 1.1, in a portable, machine-readable format. One download per 24 hours.
- Deletion. Account → Danger zone → Delete account deletes immediately and irreversibly. We recommend downloading your data first.
- Correction. Most fields can be edited directly within the Service.
- Sharing. The Athlete Card can be turned off in your account settings, and any document link can be turned off from the document itself with "Stop sharing."
- Emails. Preferences and unsubscribe are in Account and at the bottom of every product email.
By email: privacy@parentedge.com for anything else, including verified requests from someone who has lost account access, an estranged co-parent, a successor of a deceased user, or an adult athlete. We respond to verifiable requests within 30 days (extendable by 60 days for complex requests, with notice). Requests are free.
Analytics and advertising opt-out. Turn on the Global Privacy Control signal in your browser and we will not load advertising pixels or our analytics for that browser. You may also block cookies; the Service still works except for staying signed in.
California (CCPA / CPRA)
California residents have the rights described above, plus the right to know the categories of personal information we collect and the categories of third parties we share it with, and the right not to be discriminated against for exercising any right. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. Our advertising measurement (Section 1.5) is limited to measuring our own advertising, is switched off inside the product, applies Meta's Limited Data Use processing for California, and honors opt-out preference signals.
EU / UK / EEA residents (GDPR / UK-GDPR)
The Service is operated from the United States and is offered to residents of the United States. If you use it from the European Economic Area, the United Kingdom or Switzerland, you have the rights described above; our legal bases are the performance of our contract with you, compliance with legal obligations, our legitimate interests in operating, securing and improving the Service, and your consent where applicable; transfers rely on standard contractual clauses with our providers; and you may lodge a complaint with your supervisory authority.
6. Data Retention
We keep account, athlete, conversation, note, summary and generated content for as long as your account is active. Usage records, email delivery records and survey answers are kept for the life of the account. Try-it-first data without an account is deleted within 30 days. Staging copies for video analysis are deleted within hours.
On deletion. Deletion runs immediately in a single deletion process that completes within minutes and stops and tells you if any step fails: athletes, sports, conversations, documents and their PDFs, events, injuries, goals, proposals, internal notes and summaries, measurement results, setup transcripts, uploaded photos and video previews, usage records, email records, survey answers, and your login. Share links stop working at the start of the process. The Stripe customer is deleted (Stripe keeps invoices under its own obligations). What remains: an anonymized consent record (timestamp and document versions); an anonymized subscription record showing that a subscription existed and, if applicable, which referral code it used, with no payment identifiers and no advertising identifiers (so we can honor partner payments and prevent abuse); the administrative audit log (Section 3.1); and a hashed entry in our deletion log. Data our analytics and error-reporting providers already hold in pseudonymous form expires under their own retention.
Backups. Our database provider keeps daily backups with point-in-time recovery for up to seven days. Deleted data can exist in those backups until they roll off. We keep a copy of our deletion log outside the database so that, if we ever restore from a backup, outstanding deletions are re-applied.
Logs. Hosting logs expire within 30 days and error reports within 90 days. Aggregated or fully anonymized data (for example total signups per day) may be retained indefinitely.
7. Security
We use encryption in transit (HTTPS) and at rest (provided by our infrastructure providers), access controls, audit logging, and row-level database security on account data. Uploaded images and generated PDFs are stored at long, unguessable addresses that are not listed or indexed anywhere; treat a PDF you download or a link you share as you would any file. No system is perfectly secure and we cannot guarantee absolute security. If a security incident affects your personal information we will notify you and regulators as the law requires.
8. International Transfers
We operate from the United States and our providers are in the United States. Using the Service from elsewhere means your information is processed in the United States, which may have data-protection laws different from those of your country.
9. Content You Choose to Share
The Service lets you share two kinds of things publicly by link, and both are off unless you turn them on:
- The Athlete Card, a public profile page and share image, enabled per sport in your account with an explicit acknowledgment.
- Documents (a practice plan, a letter, an update, and other outputs), shared one at a time with the Share button, which creates a public link.
When you share: anyone with the link can view it without signing in; we tell search engines not to index it, but crawlers, archives, and link-preview services may still fetch or copy it; messaging apps show a preview whose title may include your athlete's first name (the preview does not include the document's content); and the content is no longer protected by the access controls described elsewhere in this Policy. You can turn off the Athlete Card in your account and turn off any document link from the document itself; the address then returns HTTP 410 Gone so that compliant crawlers drop it. Turning a link off does not retrieve copies others already saved.
10. Third-Party Links
The Service links to third-party sites (for example organizations listed in our directory). We are not responsible for their privacy practices.
11. Changes to This Policy
If we make material changes we will notify you by email or in the Service before they take effect and, where required, ask you to accept them again. The "Last Updated" date at the top shows the latest revision.
12. Contact
Privacy and data rights: privacy@parentedge.com
General support: support@parentedge.com
Accessibility barriers: support@parentedge.com (see our accessibility statement)
CSM Inc.
22027 Park St., Dearborn, MI 48124, United States