Privacy & data

Public timing-company feeds and meet programs: AccuRace, AthleticLive, MileSplit, PrimeTime, and HyTek exports submitted by coaches. We never scrape transcripts, GPAs, or any educational record. Optional profile fields (GPA, test scores) are self-reported by the family.

Email [OPERATOR: privacy@wiathlete.com] from the address tied to the account (or a parent emails for an under-18 athlete). We action requests within 30 days. Public meet results stay in the historical record but the athlete’s name is replaced with an anonymous placeholder. Full retention rules: Privacy Policy section 6.

Yes. We follow COPPA for under-13 athletes:

• We don’t solicit any data directly from a child.
• We don’t collect email, phone, photos, or social handles for under-13.
• We don’t send any direct communication to a child.
• We don’t profile a child for advertising.

Full posture: /coppa.

FERPA protects educational records (transcripts, class grades). Athletic performance — times, distances, places — is directory information under 34 CFR §99.3 and is FERPA-exempt. The same data appears in printed meet programs, host-school athletics pages, conference websites, and MileSplit. We display school-of-record and grade because both are explicit directory-information categories. Full detail: /ferpa.

Sub-processors that power the platform:

• Supabase — database, US-region.
• Vercel — web hosting.
• Stripe — payment processing.
• Resend — email delivery.
• Cloudflare — DNS + bot protection.

We do not sell data. We do not share with advertising networks. We do not use your data to train third-party AI models. Full sub-processor list with purpose: Privacy Policy section 4.

• Public meet results: indefinitely (historical record).
• Coach and parent contact data: deleted within 30 days of a verified request.
• Optional profile data (GPA, test scores, etc.): deleted on parent request; auto-purged within 30 days.
• Recruiter audit log: 5 years (NCAA standard).
• Payment data: held by Stripe per their schedule (typically 7 years for tax + chargeback compliance).
• Server logs: 30 days.

Yes — you have the right under GDPR, CCPA, and our privacy policy. Email [OPERATOR: privacy@wiathlete.com] with verification of your identity (account email, or for athletes a parent-verifiable address). We respond within 30 days.

Essential cookies (auth session, payment session, fraud protection) are always set. Optional analytics and error monitoring are off until you accept the cookie banner. You can clear browser storage to reset your choice and we’ll re-prompt on the next visit. Detail: Privacy Policy section 5.

Verified college recruiters can search the athlete database and add athletes to a watchlist. They cannot direct-message athletes — only HS coaches. Every recruiter action is audit-logged for 5 years. You can hide your profile from recruiter discovery via the parent-managed visibility flag on the profile-edit page.

Every email has an unsubscribe link at the bottom — one click and you’re out. If the email looked like recruiter outreach, it actually came from your HS coach (we don’t allow direct recruiter→athlete email). Still feeling weird about it? Email hello@wiathlete.com.

Write to [OPERATOR: privacy@wiathlete.com] on district letterhead. Typical asks (bulk apply directory-info opt-outs, suppress a specific student) are actioned within 10 business days. Detail: /ferpa.

Email hello@wiathlete.com with the subject “Security” or “Abuse.” Security issues are triaged within 24 hours. We follow responsible disclosure — report it, give us a fix window, and we’ll credit you publicly when you want it.