Privacy Policy

Last updated: October 16, 2026

This is a plain-language starting point, not a substitute for legal advice. It has not been reviewed by an attorney. Before GritRecruit is used by anyone outside your own family, the placeholder contact information below should be replaced and this policy should be reviewed by a real lawyer — especially because it involves a minor athlete's information.

What we collect

When you create an account, we collect your email address. When you use GritRecruit, you may enter: an athlete's name, sport, position, graduation year, stats, awards, academic information (GPA, class rank, test scores), height and weight, high school and club team, hometown, an NCAA ID, a phone number, a reference coach's contact information, up to two parents' or guardians' names and contact information, optionally the athlete's own phone number and email address, a short bio, one or more highlight film clips (with details like the competition, date, and position or skill tags you add), an optional photo, and optional social media handles (Instagram, X). You may also track progress on an NCAA eligibility checklist; a list of target schools and notes about them, including any coaches' names, titles, emails, or phone numbers you choose to add for those schools; a log of outreach you've sent and its status; recruiting expenses you log (a description, category, amount, and date — for example a camp, showcase, or travel cost); upcoming recruiting events you add (a camp, showcase, or visit, with its date, location, and notes); and personal task reminders you create. Social media handles are entirely optional and, like the rest of an athlete's profile, are only visible to others if you turn on that athlete's public profile.

You can also invite one other person — typically a co-parent or guardian — to share access to your account by email from your dashboard's Household section. Anyone who accepts that invitation can view and edit the same athlete data you can; you can remove their access at any time.

If you subscribe to a paid plan, payment is handled by Stripe. Stripe collects your card details and billing information (such as your name and ZIP or postal code) on its own checkout page; GritRecruit never sees or stores your full card number. We store only your Stripe customer ID, your subscription ID, and which plan you're on, so we can keep your plan up to date.

About minors' information

GritRecruit is built to be used by a parent or legal guardian on behalf of a minor athlete. All information about the athlete is entered and controlled entirely by the account holder — never directly by the minor. By creating an account, you confirm you are that athlete's parent or legal guardian, and you consent to the athlete's information being stored on GritRecruit's systems as described below. We do not knowingly collect information directly from a child; all information is provided by the parent or guardian operating the account.

How we use it

Your data is used to display your own athlete profiles back to you, fill in the email templates you use for outreach, and keep your target-school list, outreach log, and task list. We do not sell your data or share it with third parties for marketing or advertising, ever.

Who we share data with

GritRecruit uses a small number of service providers to run the product, and your data passes through them only to make GritRecruit work — never for their own marketing use. We use Supabase to host our database, authentication, and file storage; Vercel to host the website; Resend to send account emails (like sign-up confirmation, password reset, and reminders you request); and Stripe to process payments for paid plans. Stripe receives your email address and the payment details you enter at checkout, and handles them under its own privacy policy. We don't share your data with any other third party and we don't sell it, and we would disclose information only if required by law.

Cookies

GritRecruit uses a small number of essential cookies to keep you logged in and to remember your session. We don't use advertising or cross-site tracking cookies. If you subscribe to a paid plan, Stripe's checkout and billing pages are hosted by Stripe and set their own cookies under Stripe's policy.

Where it's stored and how it's protected

Account and profile data is stored with Supabase, our database and authentication provider. Access is protected at the database level so that only your account can read or change your own family's data — this is enforced by the database itself, not just by the app. Data is transmitted over encrypted (HTTPS) connections. GritRecruit is a U.S.-based service, and your data is stored on U.S.-based servers.

Sensitive information we don't collect

GritRecruit does not collect biometric data, precise location data, government ID numbers, or financial account information. The most sensitive information GritRecruit stores is what you choose to enter about a minor athlete, described above.

How long we keep data

We keep your data for as long as your account is active. If you delete a specific athlete, school, log entry, or task, that item is removed immediately. If you delete your entire account, all associated data is removed from our active systems, as described below. Stripe and GritRecruit may keep billing records (such as receipts, amounts, and dates) for as long as needed for tax, accounting, and legal requirements, even after you delete your account. Encrypted backups kept by our database provider may hold deleted data for a short period before they are overwritten.

Public profile sharing

Each athlete profile is private by default. If you explicitly turn on the “public profile” option for an athlete, the information you've added to that profile — which may include their name, sport, position, graduation year, stats, academics, bio, photo, NCAA ID, contact information, social media handles (if entered), and any film clips you've added — becomes viewable by anyone who has the unique link, not searchable or listed publicly anywhere. You can turn this off at any time, which immediately makes the page inaccessible again.

The athlete's own phone number and email address, if entered, are never shown on the public profile unless you separately turn on a second, distinct toggle for that — turning on the public profile alone does not expose them. The same is true of the profile's phone number and any parent or guardian names, phone numbers, and email addresses: they stay hidden unless you turn on a separate toggle for them.

Your control over your data

You can edit or delete athlete profiles, remove target schools, turn public sharing off, and delete outreach log entries or tasks at any time from your account. You can also permanently delete your entire account and all associated data yourself, at any time, from the bottom of your dashboard — or contact us at info@gritrecruit.com for help. Deleting your account also cancels any active subscription. Once deleted, your data is removed from our active systems.

Your privacy rights

Depending on where you live, you may have additional rights over your personal information — for example, the right to request a copy of it or ask that it be deleted. You can already do both directly from your dashboard at any time, or contact us at info@gritrecruit.com and we'll help.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: info@gritrecruit.com

Follow us