Coach Fred Privacy Policy

Last Updated: April 28, 2026 Effective Date: April 28, 2026

1. Introduction

GHP Labs LLC ("GHP Labs," "we," "us," or "our") operates Coach Fred (the "Service"), which includes the Coach Fred iOS application, the coachfred.app web dashboard, and related backend services. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have regarding your data.

Coach Fred is a youth-baseball coaching tool intended for adult coaches. It is not directed to children, and children do not create accounts or use the Service directly (see Section 9).

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information You Provide as a Coach

When you create and use a Coach Fred account, we collect:

Important note about player information: As a coach, you input information about the children on your team. You are responsible for obtaining any consents required from the players' parents or guardians before entering this information into the Service. See Section 9.

2.2 Information Generated by the Service

2.3 Information Collected Automatically

When you use the Service, we automatically collect limited technical information needed for the Service to function:

• Device and connection information: IP address, device model, operating system version, app version
• Server logs: API request timestamps, error logs, performance metrics
• Authentication session data: Session tokens, login timestamps

We do not currently use third-party analytics, advertising trackers, or device-level tracking identifiers (IDFA). We do not currently set tracking cookies on the web dashboard beyond those strictly necessary for authentication and session management. If we add analytics or advertising in the future, we will update this Policy and obtain any required consents before doing so.

2.4 Information We Do NOT Collect

For clarity, Coach Fred currently does not collect:

• Precise device location (GPS)
• Health or fitness data
• Contacts or address book data
• Photos beyond a profile avatar you choose to upload
• Microphone or camera input
• Apple's Identifier for Advertisers (IDFA)
• Cross-app or cross-site tracking data

3. How We Use Your Information

We use the information we collect for the following purposes:

We do not use your information or your players' information to train any AI/ML model, and we do not sell or rent your information.

4. How We Share Your Information

We share information only with the third-party service providers who help us operate the Service. We do not sell personal information.

4.1 Service Providers

Each of these providers is contractually obligated to handle your information consistent with applicable privacy laws and to use it only for the purpose of providing services to GHP Labs.

4.2 Within Your Team

If you invite another coach to join your team via the team-member invite system, that coach will be able to view the team, player, game, and voiceover data associated with your team. Team data is not visible to coaches outside your team or to the general public.

4.3 Legal and Safety

We may disclose information when we believe in good faith it is necessary to:

• Comply with applicable law, court order, subpoena, or government request
• Enforce our Terms of Service
• Protect the rights, property, or safety of GHP Labs, our users, or the public
• Investigate or prevent fraud, security incidents, or technical issues

4.4 Business Transfers

If GHP Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any resulting changes to this Policy.

4.5 No Sale of Personal Information

We do not sell your personal information or your players' personal information for monetary or other valuable consideration, and we do not share it for cross-context behavioral advertising. This is true under the CCPA/CPRA definitions of "sell" and "share."

5. Data Retention

We retain your information for as long as your account remains active.

To request account deletion, email us at [email protected] from the address associated with your account. We will remove your account and team data — including player records and generated voiceover audio — promptly (typically within 7 days), without an extended retention window. Some residual copies may remain in encrypted backups for a limited period before they are overwritten in the normal course of backup rotation; we do not access or restore from those backups except for disaster recovery.

We may retain anonymized or aggregated information (which cannot be used to identify you or your players) indefinitely for product analytics and improvement.

6. Data Security

We implement reasonable technical and organizational measures designed to protect your information, including:

• Encryption in transit (HTTPS/TLS) for all communications between the app, web dashboard, and our backend
• Encryption at rest for stored data via our backend providers
• Access controls restricting employee and contractor access on a need-to-know basis
• Authentication including OAuth-based sign-in (Google, Apple) and email/password with hashed credentials
• Audit logging of administrative actions on the backend
• Regular review of dependencies and security advisories

No system is perfectly secure. We cannot guarantee absolute security of your information. If we become aware of a security incident affecting your information, we will notify you and applicable regulators as required by law.

7. Your Rights Under California Law (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know — Request information about the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the third parties with whom we share it.
• Right to Delete — Request deletion of your personal information (subject to limited exceptions for legal compliance, security, etc.).
• Right to Correct — Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell or share your personal information, so this right is not applicable in practice. If our practices change, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to Limit Use of Sensitive Personal Information — We do not use sensitive personal information for purposes that would trigger this right.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.

Categories of personal information we have collected in the past 12 months (under CCPA categories):

To exercise your California rights, contact us at [email protected] with the subject "California Privacy Request." We will verify your identity (typically by confirming you control the email address associated with your account) and respond within 45 days.

8. Your Rights Under GDPR (EEA, UK, and Switzerland Residents)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights:

• Right of Access — Request a copy of your personal data
• Right to Rectification — Correct inaccurate data
• Right to Erasure ("Right to be Forgotten") — Request deletion of your data
• Right to Restrict Processing — Limit how we use your data
• Right to Data Portability — Receive your data in a machine-readable format
• Right to Object — Object to processing based on legitimate interests
• Right to Withdraw Consent — Withdraw any consent you have given
• Right to Lodge a Complaint — File a complaint with your local Data Protection Authority

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Legal basis for processing. We process your information on the bases described in Section 3.

International transfers. GHP Labs is based in the United States. Your information is processed in the United States and other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses approved by the European Commission and equivalent UK/Swiss safeguards for international transfers.

9. Children's Privacy

Coach Fred is intended for adult coaches and is not directed to children.

You must be at least 13 years old to create a Coach Fred account. If you are between 13 and 18 (or the age of majority in your jurisdiction), you may use the Service only with the involvement of a parent or legal guardian.

Coach Fred is designed for the adult coaches of youth-sports teams. Children (i.e., the players on your team) do not create accounts and do not interact with the Service directly. Information about players is entered into the Service by their adult coach.

Coach responsibilities regarding player information. As a coach, when you enter information about a child player into Coach Fred (such as a name, nickname, jersey number, or walk-up song), you represent that you have obtained any consent required under applicable law from the player's parent or legal guardian. You are responsible for ensuring that your collection and use of player information complies with the Children's Online Privacy Protection Act ("COPPA"), state laws (e.g., California's Student Online Personal Information Protection Act, where applicable), and any rules established by your league or organization.

We do not knowingly collect personal information directly from children under 13. If we learn that we have inadvertently received information directly from a child under 13 — for example, if a child created an account in violation of these terms — we will delete that information promptly. If you believe a child has provided information directly to us, contact us at [email protected].

10. International Data Transfers

GHP Labs is based in the United States. By using the Service, you understand that your information will be transferred to, stored in, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

For users in the EEA, UK, and Switzerland, we use Standard Contractual Clauses and equivalent safeguards as the legal basis for these transfers.

11. Third-Party Services and Music Playback

Coach Fred allows you to select and play walk-up songs using your own Apple Music subscription (or other supported music services). When you use these features:

• We send the track ID of the song you select to Apple's MusicKit service to retrieve metadata and enable playback.
• Playback occurs through your own Apple Music subscription — we do not provide music to you, and we do not store or distribute musical recordings.
• Your interactions with Apple Music are governed by Apple's privacy policy and the Apple Music terms of service.

You are responsible for complying with the terms of any third-party music services you use through Coach Fred and for any public-performance, synchronization, or other licenses required to play music in your venue. See our Terms of Service for details.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Post the revised Policy at coachfred.app/privacy and within the iOS app
• For material changes, notify you by email or through an in-app notice before the changes take effect

We encourage you to review this Policy periodically. Your continued use of the Service after the effective date of the updated Policy constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us:

• Email: [email protected]
• Mailing Address: GHP Labs LLC Attn: Privacy 111 Oak Avenue Kentfield, CA 94904 United States

For privacy-related complaints, EEA/UK/Swiss residents may also contact their local Data Protection Authority. California residents may contact the California Privacy Protection Agency.

Coach Fred is a product of GHP Labs LLC, a California limited liability company.