Privacy Policy

1. Introduction

Chalk is a team management platform for youth sports coaches, parents, and club directors. We built Chalk to make running a team simpler — and we built this policy to be honest about how we handle your information.

Chalk is operated by Jared Rutkowski, doing business as Chalk Sports ("we," "us," or "our"). This Privacy Policy applies to everyone who uses the Chalk web app at chalksports.ai and the Chalk mobile app (iOS and Android). It covers coaches, club directors, parents, and guardians. It does not apply to third-party websites or services we link to.

If you have questions, contact us at legal@chalksports.ai.

2. Information We Collect

Information you give us directly

• Account information — your name, email address, and password when you sign up.
• Team information — team name, sport, season, and settings you configure as a coach or club director.
• Roster data — player names, jersey numbers, age groups, and the parent or guardian accounts linked to each player.
• Parent and guardian contact information — email addresses provided during onboarding or when joining a team.
• Payment information — when you pay for a Chalk subscription or when a coach collects payments from your team, we process payment card details. Card numbers are handled entirely by Stripe; we store only the last four digits, card brand, and expiration date.
• Messages — content you send through Chalk Chat, including direct messages and group conversations.
• RSVP and schedule data — responses to game and practice invitations, event details, and attendance records.
• Practice plan data — plans coaches save, drills they run, and field-mode session activity.

Information collected automatically

• Usage data — pages and screens you view, features you use, and actions you take in the app.
• Device information — device type, operating system, and app version.
• Error data — when the app crashes or encounters an error, we collect diagnostic information through Sentry. We configure Sentry to minimize personal data: no email addresses, IP addresses, or usernames are sent automatically.

Information we do not collect

• We do not collect biometric data, precise GPS location, or health information.
• We do not run third-party advertising trackers inside Chalk.
• We do not sell your data to anyone.

3. How We Use Your Information

We use the information we collect to:

• Operate and improve Chalk — provide the features coaches, parents, and club directors rely on.
• Send transactional messages — account confirmations, password resets, team invitations, RSVP reminders, and payment receipts. These are sent via Resend from noreply@chalksports.ai.
• Process payments — collect team fees, subscription payments, and issue refunds, all through Stripe.
• Provide support — diagnose errors and respond to help requests.
• Ensure security — detect abuse, enforce our Terms of Service, and protect accounts.

We do not use your data to train AI models, sell to advertisers, or share with data brokers.

4. How We Share Your Information

We share data only in these limited situations:

Stripe Connect (coach payment collection):When a coach enables team fee collection through Chalk, that coach becomes a Stripe “connected account.” Stripe receives the coach’s identity information and banking details for verification and payout purposes. Stripe’s Connected Account Agreement and privacy policy govern this relationship directly. Chalk does not hold team fee funds — funds in transit are held by Stripe.

Parent-to-parent contact:Parent phone numbers and email addresses are never displayed to other parents. If parents want to reach each other, they can do so through Chalk Chat’s direct message feature — no raw contact data is exposed.

Do Not Sell: We do not sell, rent, or share personal information with third parties for their own advertising or marketing purposes.

5. Youth Athlete Data and COPPA

Chalk is used to manage youth sports teams, which often include athletes under 13. We take this seriously and comply with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

What we collect about youth athletes

• Player name, jersey number, age group, and sport.
• RSVP responses and schedule participation records.
• Practice activity data when coaches run field mode.

How we protect it

• Children’s data is accessed only by the coach or club director who manages their team, and by the parent or guardian linked to that player.
• We do not display children’s personal information to other parents or to the public.
• We do not serve advertising to children or build profiles for advertising purposes.
• We do not use children’s data to train AI or machine learning models.

COPPA: How we obtain parental consent

Chalk is designed for use by coaches and parents — not directly by children. Children under 13 do not create Chalk accounts.

How we obtain verifiable parental consent:A parent or guardian creates their own Chalk account, provides a valid payment method to Stripe (which constitutes an approved electronic consent mechanism under the FTC’s COPPA Rule, 16 C.F.R. § 312.5(b)(2)), and explicitly links a player profile to their account. By completing these steps, the parent or guardian: (1) consents to Chalk’s collection and use of that player’s information as described in this Privacy Policy; and (2) confirms they are the parent or legal guardian of the linked player.

Reporting inadvertent collection: If you believe we have collected personal information from a child under 13 without appropriate consent, contact us at legal@chalksports.aiwith the subject line “COPPA Request” and we will delete it promptly.

Parental rights under COPPA:Parents and guardians may at any time review, request correction of, or request deletion of their child’s data by emailing legal@chalksports.aiwith the subject line “COPPA Request” and the player’s name and team.

California Age-Appropriate Design Code (AB 2273)

Because Chalk explicitly manages youth athlete data and is accessed by parents on behalf of their children, we apply the following practices: privacy by default (player information is not publicly accessible and is visible only to the relevant team’s coach and linked parent or guardian); no dark patterns; no profiling for advertising; and data minimization (we collect only the data necessary to provide team management services).

6. Data Retention

7. Your Rights and Choices

Access and correction: You can view and update your account information in the Chalk app under your profile settings. To request correction of information you cannot update yourself, email legal@chalksports.aiwith the subject line “Privacy Request — Correct Data.”

Deletion: You can delete your account from the app. You may also email us at legal@chalksports.aito request deletion of your data or your child’s data.

California residents (CCPA / CPRA):California residents have the right to know what personal information we collect; access a copy; request correction of inaccurate information (CPRA right to correct); request deletion; opt out of the “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising); and not be discriminated against for exercising these rights. To exercise any of these rights, email legal@chalksports.aiwith the subject line “Privacy Request.” We will respond within 45 days as required by the CCPA.

Residents of Colorado, Connecticut, Virginia, and other states: Similar data rights apply under your state’s privacy laws. Submit requests to legal@chalksports.ai and we will respond in accordance with applicable law.

8. Security and Breach Notification

We take reasonable steps to protect your information:

• All data in transit is encrypted using TLS.
• Database access is governed by row-level security policies — each user can only access the data their role permits.
• Payment card data is handled entirely by Stripe, which is PCI DSS compliant. We never receive or store full card numbers.
• Error monitoring is configured to minimize the personal data captured in crash reports.

In the event of a data breach that may affect your personal information, we will notify you as required by applicable law. For California residents, we will notify you in the most expedient time possible. For residents of other states, we will provide notice within the timeframe required by your state’s breach notification law (commonly 30–90 days). Breach notices will be sent to the email address on your account.

9. Data Location

Chalk processes and stores data in the United States through Supabase infrastructure hosted on AWS. By using Chalk, you consent to your information being transferred to and processed in the United States. We do not currently offer a GDPR-compliant service for users in the European Union or United Kingdom.

10. AI-Powered Features

Chalk may use AI to assist with internal content generation. No AI feature is currently surfaced to users. Where AI processing does occur, relevant context about your team may be included in the request — for example, your team’s sport, upcoming event types, and recent practice activity. We do not send full roster data or individual player contact details to AI providers.

AI provider:Chalk uses Anthropic’s Claude API. Your usage and the team context described above are transmitted to Anthropic’s API to generate responses. Anthropic’s use of this data is governed by the Anthropic Privacy Policy.

Not used for training: Chalk uses the Anthropic API under terms that do not permit Anthropic to use your data to train their models.

11. Changes to This Policy

We may update this Privacy Policy as Chalk evolves. When we make meaningful changes, we will update the “Last Updated” date at the top of this page. If the changes are significant, we will notify you by email or by a notice in the app at least 14 days before the changes take effect.

12. Contact Us

Privacy questions, data requests, or concerns — email legal@chalksports.aiwith the subject line “Privacy Request.” For COPPA requests, use the subject line “COPPA Request.” We aim to respond to all privacy inquiries within 5 business days.