Children's Privacy Notice (COPPA)

Children's Privacy Notice

Last updated: 11 October 2026

US COPPA Compliance · GDPR Art. 8 · Global Children's Data

This Children's Privacy Notice is directed at parents and guardians whose children may be tracked in LVL·UP by their tennis coach. It explains how LVL·UP handles information about players under 13 years of age, what we collect and do not collect, and the rights you have as a parent or guardian. For a broader account of our privacy practices, see the full Privacy Policy and the Junior Player Privacy Notice (GDPR-focused).

1. About LVL·UP and COPPA

LVL·UP Tennis operates a professional coaching planner at lvluptennis.com. The Service is used by tennis coaches — adults who subscribe to plan sessions, track player progress, and build training programmes.

The Children's Online Privacy Protection Act (COPPA), enforced by the US Federal Trade Commission (FTC), imposes requirements on operators of websites and online services that are directed to children under 13, or that have actual knowledge they are collecting personal information directly from children under 13.

LVL·UP's Classification Under COPPA

LVL·UP is not directed at children. The Service is a professional tool for adult coaches. Children do not register for LVL·UP accounts, do not log in to the Service, and do not interact with it directly, apart from the shared off-court session link described in Section 2. LVL·UP passes all nine criteria the FTC uses to determine whether a service is "directed to children": the subject matter is professional sports coaching; all visual content, marketing, and language is adult-professional in tone; no animated characters, child-oriented music, celebrities who appeal to children, or child-facing incentives are used; all testimonials and depicted users are adult coaches.

Accordingly, COPPA does not apply to LVL·UP as a service directed to children. However, because coaches may enter information about players under the age of 13 into the system, we believe transparent disclosure of how that data is handled is the right practice — regardless of whether COPPA strictly requires it.

Coach responsibility. Under COPPA and equivalent laws, the coach is the party who collects information about an under-13 player and inputs it into LVL·UP. LVL·UP is a professional recordkeeping tool, like a physical coaching notebook stored in the cloud. The coach is responsible for ensuring they have appropriate parental consent before recording information about any minor. LVL·UP's Terms of Service explicitly place this obligation on the coach, and LVL·UP provides consent tools to help coaches discharge it (see Section 5 below).

2. Does LVL·UP Collect Information Directly From Children Under 13?

No. LVL·UP does not collect any personal information directly from children under 13. Children do not have LVL·UP accounts. Children do not fill in forms, enter data, or communicate with LVL·UP in any way. All information about child athletes in the system is entered by their coach — an adult professional — with one exception: once a parent has consented, the coach can share an off-court (fitness) session link, and the player can log on it what they did, how they feel (1–5), any sore area and a short note, with no account, no login and no name.

LVL·UP does not:

Contact children directly by email, push notification, or any other channel
Market products or services to children
Display advertising to children
Use personal information about children for any purpose other than providing the coaching planner service to the coach
Sell, share, or disclose children's personal information to third parties for marketing or advertising purposes
Build profiles of children for behavioural advertising or commercial exploitation

3. What Information a Coach May Enter About Under-13 Players

When a coach adds a player profile in LVL·UP, they may enter the following information. This is the complete list — the Service does not collect anything beyond these fields:

Data field	Purpose in the app	Available for under-13?
Player name	Identifies the player in the coach's session plans and notes	Yes
Age group (e.g. U12, U10)	Tailors programme intensity and drill selection to the player's competitive age category	Yes
Playing hand (left / right)	Used in tactical and technical drill planning	Yes
Sex (male / female)	Compares results with the right professional averages	Yes (may be stored before consent, with the name)
UTR or playing level	Matches the player to appropriate drills and programme difficulty	Yes
Squad or group name	Organises the player into the coach's training groups (e.g. "Red Ball", "Junior Elite")	Yes
Coaching notes and focus areas	The coach's professional observations on technique, tactics, or areas to develop	Yes
Session logs	A record of sessions attended and activities completed, with the coach's rating and notes	Yes
Performance test results	Results from structured performance benchmarks the coach conducts	Yes
Attendance	Which of the coach's sessions the player came to	Yes
Coach's-eye ratings and skill tallies	The coach's Below / At / Above rating in five areas, and hit/miss counts on skills	Yes
Match records	Matches the coach charts point by point (Match IQ) or enters as a result, including college team matches: points, score, opponent's name and rating, event	Yes
Scouted opponents	Name and club of an opponent the coach charts	Yes
UTR history and other ratings	Past rating readings, including a rating from another system, and the number of tournaments played, used to show progress	Yes
Off-court (fitness) setup	Age, height readings (used to estimate the growth-spurt stage) and training details	Yes
Off-court session logs	What the player logs on a session link the coach shares: exercises done, effort, how they feel (1–5), any sore area and a short note — no name	Only with parental consent
Off-court (fitness) injury stage and body regions	Used in the coach's off-court (fitness) setup	Only with parental consent
Full injury log	Diagnosis, severity, notes, return-to-play status	No — adults (18+) only
Restriction record	Body area and side, on-court restriction, start and return dates, status (active / managing / cleared)	Only with the parent's separate restrictions consent; no diagnosis

🔒 Full injury log: adults (18+) only. The LVL·UP injury log (diagnosis, severity, notes, return-to-play) is disabled at the application level for every player who has not been explicitly confirmed as 18 years of age or older. This applies to all under-18 players, including those under 13, and cannot be overridden by the coach. For an under-18 player, the coach can keep only a restriction record — body area and side, the on-court restriction, start and return dates, and status — and only if the parent has ticked the separate, optional restrictions box on the consent page (unticked by default). It never records a diagnosis or injury type, medical notes, treatment, medication, how it happened, documents or images. With the parent's consent, the coach's off-court (fitness) setup may also record an injury stage and the body regions affected. No date-of-birth data is collected; the app stores an age group (e.g. "U12") and, where the coach or parent enters it, an age in years.

Each time the coach saves or changes a restriction, the app prompts the coach to send the parent a copy. This opens the coach's own email app — LVL·UP itself sends nothing. If the copy is not sent, the coach sees a reminder after 24 hours. Parents who consented before can be sent a new link to add the restrictions box.

4. How Children's Information Is Stored and Protected

Where it is stored. All player data is stored in Supabase, a database platform hosted on Amazon Web Services in the United States (us-east-2, Ohio). Data is encrypted in transit (HTTPS) and encrypted at rest at the database layer. An earlier version of this notice said the database was in Frankfurt, Germany; that was incorrect, and this notice was corrected on 6 October 2026.

Who can access it. Only the coach who created the player profile can access the data. On a club account, the club director and the coaches of the player's group can also see the player's name, age group, group, UTR, attendance and consent status; a restriction record is never shown to them. LVL·UP staff do not access individual coaching records in the normal course of operations. Row-level security enforced at the database level blocks any other cross-account data access.

What LVL·UP does not do with the data. Children's information is not shared with advertisers, data brokers, analytics platforms, or any third party other than Supabase (storage/sync), only where applicable, Netlify (hosting infrastructure), and, in one case only, Anthropic: LVL·UP’s voice assistant, which is not offered to coaches, is switched on only for the coaching account of LVL·UP’s owner and one coach testing it at the owner’s invitation. If your child is coached on one of those two accounts, your child’s name, age, UTR, groups, attendance and the coach’s notes may be sent to Anthropic when the coach speaks to the assistant, to produce its reply. It is never used to train AI models. LVL·UP does not sell data of any kind.

Revision note, 11 October 2026: the previous version said a child’s first name and logged numbers went to Anthropic only when a coach tapped "Suggest a draft". That button was removed on 11 October 2026. The previous version did not mention the voice assistant, which has run on the owner’s own account since 5 October 2026; the paragraph above now does.

How long it is kept. Player data is retained for as long as the coach's LVL·UP account is active. When the coach deletes their account, all associated player data — including any under-13 player records — is removed from production systems within 30 days. Parents may also request deletion at any time (see Section 6). A parent can ask for any restriction to be deleted at any time by replying to the coach or emailing hello@lvluptennis.com; the coach can delete it at any time; and a cleared restriction is deleted automatically 12 months after it is cleared.

5. Parental Consent — How LVL·UP Helps Coaches Obtain It

LVL·UP recognises that coaches have a legal obligation to obtain appropriate parental consent before recording information about minor players, particularly those under 13. We provide the following tools to help coaches discharge that obligation:

Parental consent form (/consent) Coaches can generate a secure, tokenised consent link for any player and send it to the player's parent or guardian. The link expires after 7 days. Parents are shown a clear summary of what data is stored, who can see it, and how to request deletion — before they consent.

Junior Player Privacy Notice (/player-privacy) A dedicated parent-facing notice — available in plain English — explains exactly what LVL·UP stores about under-18 players, what needs a parent's separate consent (restriction records), what is never stored (diagnosis and medical details), where the data lives, and what GDPR rights parents have.

Coach onboarding acknowledgement During signup, every coach must acknowledge that they are the data controller for player information and are responsible for obtaining all consents required by applicable law — including parental consent for minors.

In-app terms reminder The in-app Terms of Service modal explicitly states that coaches confirm they hold a lawful basis to collect and store information about each player, including under-18 players, and that they will honour any access, correction, or deletion requests from players or their legal guardians.

Parents: if you have not been asked for consent. If your child's coach uses LVL·UP and has not sent you a consent form, you can contact them directly to ask whether your child's information is stored in the app and request that they send the consent link or delete your child's profile. You may also email LVL·UP directly at hello@lvluptennis.com — we will assist in identifying the relevant coach account and ensuring appropriate action is taken within 7 days.

6. Parental Rights Under COPPA and GDPR

As the parent or legal guardian of a player under 13, you have the following rights with respect to information about your child held in LVL·UP:

Under COPPA (US Law)

Review: You may request to review the personal information collected about your child.
Delete: You may request the deletion of your child's personal information. We will delete the player's profile from LVL·UP's systems within 30 days of a verified request.
Refuse further collection: You may direct LVL·UP and the coach to stop collecting or using your child's personal information. Note that this may mean the coach can no longer use LVL·UP to plan sessions for your child.
Opt out of disclosure: We do not disclose children's personal information to third parties for commercial purposes. You do not need to opt out of something that does not occur.

Under GDPR / UK GDPR (EU and UK)

Access (Art. 15): Request a copy of the personal data held about your child.
Rectification (Art. 16): Request correction of inaccurate or incomplete data.
Erasure / Right to be forgotten (Art. 17): Request deletion of your child's data.
Restriction (Art. 18): Request that processing be paused while a query or dispute is being resolved.
Objection (Art. 21): Object to the processing of your child's data on grounds relating to your particular situation.
Withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint: You may lodge a complaint with your local supervisory authority: in the UK, the ICO at ico.org.uk; in the EU, your national data protection authority; in the US, the FTC at reportfraud.ftc.gov.

To exercise any of the above rights, email hello@lvluptennis.com with the subject line "Children's Data Request" and include: the child's first name and age group, the coach's name or club if known, and the action requested. We will respond within 7 days for children's data requests (faster than the standard 30-day window for adult requests).

7. Verifiable Parental Consent Process

When a coach chooses to use LVL·UP's built-in consent tool for a player, the following process applies:

The coach generates a unique consent link from within the app and sends it to the parent or guardian by their preferred method (email, message, etc.).
The parent or guardian opens the secure link at lvluptennis.com/consent/[token]. The link is only valid for 7 days.
The parent is shown: the player's name, the specific data fields that will be stored, who can see the data, the separate, optional restrictions box (unticked by default), how to request deletion, and a link to the full Privacy Policy.
The parent taps "I consent on behalf of [player name]." This action is timestamped and stored in LVL·UP's database as the consent record for that player.
Consent may be withdrawn at any time by emailing hello@lvluptennis.com.

Note on the consent architecture. The consent page is designed to meet the standard of "verifiable parental consent" as interpreted by the FTC under COPPA — specifically, the "email plus" method: the parent takes an affirmative action (clicking consent), a confirmation is sent, and LVL·UP maintains a timestamped record. For higher-risk processing (e.g., health data for under-18 players), a stronger consent method would be required. The full injury log (diagnosis, severity, notes) is not available for under-18 players. The restriction record holds no diagnosis and needs a separate, optional tick on the consent page, unticked by default.

8. Our Commitment to Children's Privacy

LVL·UP was designed from the ground up with junior athlete privacy as a priority consideration, not an afterthought. The adults-only injury log, the separate opt-in for under-18 restriction records, the dedicated parental consent infrastructure, and the transparent disclosure of what data is collected about minor players reflect our belief that children's data deserves a higher standard of care.

We are committed to:

Never collecting more information about children than is needed for the coaching planner to function
Never using children's information for any commercial purpose other than providing the service to their coach
Never storing a diagnosis, medical notes, treatment or medication for under-18 players, and keeping a restriction record only with the parent's separate, optional consent
Responding to parental data requests within 7 days
Reviewing and updating this notice annually or upon any material change to how children's data is handled
Maintaining and publishing our full Data Protection Impact Assessment as required by GDPR Art. 35

9. Changes to This Notice

We may update this Children's Privacy Notice from time to time as the Service evolves. Material changes will be posted on this page with an updated date, and coaches will be notified by email at least 14 days before such changes take effect.

10. Contact — Children's Privacy

LVL·UP Tennis

Email: hello@lvluptennis.com

Subject line: Children's Data Request

Response time: within 7 days for all children's data queries

For general privacy queries, see the full Privacy Policy. For GDPR-specific parental rights (EU/UK), see the Junior Player Privacy Notice. For our complete data risk assessment, see the DPIA.