Privacy Policy

1. Who this applies to

This policy covers parents/guardians, mentors, and the athlete information parents provide on their behalf. Composure does not knowingly allow children under 13 to create their own accounts — parent/guardian accounts hold and control all athlete data.

2. What we collect

• Account info via Clerk: name, email, role (parent or mentor).
• Athlete info a parent adds: first name only (never a full name), age, sport, and goals.
• Mentor profile info: sport, school/level, bio, focus areas, rate, availability, and an optional photo.
• Booking, payment, and payout records via Stripe.
• Messages sent through the on-platform messaging system.

3. What we don't collect

Composure does not store full names, school names, or home addresses for athletes. Composure never sees or stores card numbers or bank account details — those are handled directly by Stripe.

4. How we use it

To operate bookings and payments, to verify mentors before they're visible to families, to filter messages for shared contact information, and to communicate about sessions. [DRAFT NOTE: add analytics/marketing use, if any, once decided.]

5. Who we share it with

Service providers only: Clerk (authentication), Supabase (database/storage), Stripe (payments/payouts). [DRAFT NOTE: confirm each provider's own data-processing terms are acceptable for minors' data before publishing, and add any additional processors as they're introduced — e.g. a future background-check provider or email service.]

6. Parental rights

A parent may review, correct, or request deletion of their athlete's information at any time by contacting Composure. [DRAFT NOTE: add the actual request process and response-time commitment, and confirm this satisfies COPPA parental-rights requirements.]

7. Data retention

[DRAFT NOTE: define how long booking, message, and account data is retained after account closure, and the deletion process.]

8. Contact

[DRAFT NOTE: add a real privacy-request contact email before publishing.]