Privacy Policy
Legions Lacrosse ("the program", "we") runs a development program for lacrosse athletes and the performance platform at app.legionslacrosse.com. Most of our athletes are under 18, so we keep this short, plain and strict. If anything here is unclear, write to admin@legionslacrosse.com.
The one-line version. We collect the numbers it takes to coach an athlete well, show them only to the athlete, his family and his coaches, never sell them, and delete them when a family asks.
What we collect
- Applications. What a family tells us when they apply: the athlete profile below, club teams, coach references, social media pages, a highlight link or clip, and a short statement. An application that is not accepted is kept for one year, so the family can be reconsidered at a later intake, then deleted along with any clip.
- Accounts. Name, email address, phone, mailing address (for the jacket, the ring and anything on paper), role (parent, athlete, coach, director) and a password we store only as a hash.
- Athlete profile. Name, birth date, graduation year, position, school, team and jersey number, entered by a parent or the program.
- Testing. Results from Calls and home measurements: height, weight, sprints, jumps, agility, strength and lacrosse skill tests, with who recorded and verified each one.
- Training. Workouts logged, daily check-ins (sleep, soreness, mood, energy), training plans, calendar entries the family adds, goals, journal entries and coach notes.
- Body composition. Readings taken at the Body Pod station on Call day, entered by the family, or imported from a scale.
- Film and photos. Video of tests and skills uploaded by coaches or families, and food photos a family chooses to log.
- Fuel. Meals a family logs by photo, by typing or by scanning a barcode. A barcode scan sends only the product's number to the Open Food Facts database to fetch the label; nothing about the athlete goes with it. The energy gauge is computed on our server from the Body Pod reading and the training that was logged.
- Wearables. If an athlete or parent connects a WHOOP (or another device through Terra), we receive that athlete's recovery (score, heart-rate variability, resting heart rate, respiratory rate, blood oxygen, skin temperature), sleep (hours, stages, timing, efficiency, consistency and WHOOP's sleep need), daily strain and energy burned, each workout's summary with its heart-rate zones, and WHOOP's basic profile and body measurements. We never receive location or second-by-second heart-rate streams. Nothing is pulled until the family connects the device, and only for that athlete.
- Payments. Dues and Call fees are handled by Stripe. We keep a record of what was paid and when; card numbers never reach us.
- Messages. Posts in the program's Forum and email you send to the program.
- Website visits. Our own pages record which pages were seen, for how long, the device and browser, where the visit came from (a link on Instagram, a search, a tagged address on a flyer) and the general location of the connection. No cookies and no third-party trackers: two random ids live in your browser's own storage, the connection address is turned into a location and a daily code and is not kept, and the only people who see any of it are the program's admins.
How we use it
- To run the program: verify results, place them against the athlete's class, build and adjust his training plan, track growth and readiness, and send monthly report cards.
- To let coaches coach: every number a coach sees is tied to an athlete in a group he is responsible for.
- To help the coaches watch the whole picture. Software reads each athlete's own numbers daily and flags who needs a coach's attention; a Legions coach decides what to do about it. The same assistant, which the program calls Max, answers routine questions from families by email and in the app, and anything beyond routine goes to the program director. Anthropic's Claude API processes that data under its commercial terms, which do not use customer data to train its models. AI analysis of food photos and film happens only with the family's consent.
- To send notifications the family has turned on: in-app, push and email reminders, report cards and replies.
We do not sell personal data, show advertising, or use athlete data for anything other than the program.
Wearable data, including WHOOP
WHOOP data comes in only after the athlete or his parent signs in to WHOOP from the athlete's profile and approves the connection. We use it to show that athlete's own recovery, sleep and strain inside his profile, to adjust his plan and readiness, and in his monthly report. It is visible to the athlete, his parents, his coaches and the program director, and to no one else. It never appears on any public page, the Pro Board, or a recruiting page, and it is never sold or used for advertising.
The family can disconnect at any time from the athlete's Recovery tab, or by revoking Legions Lacrosse in the WHOOP app. We stop collecting immediately. The history already stored stays in the athlete's profile so his record is not broken; email us and we delete it.
Who can see what
- The athlete sees his own profile.
- Parents and guardians see their own children and control consents, sharing and connections.
- Legions coaches see the athletes in their groups.
- A club, school or college coach sees an athlete's profile only when the family invites him, within the limits the family sets, and the family can withdraw that at any time.
- The program director sees everyone, and every change to a result is logged with who made it.
Nothing is public by default. The Colosseum boards inside the app show effort counts and names, never test numbers, and a family can hide an athlete from them or use a short display name. A verified result appears on the public Pro Board only when the family turns it on, test by test (the athlete himself can choose which tests from age 13), and a recruiting page is shared only through a link the family creates. Both can be switched off at any time and the information comes down immediately.
Minors
A parent or guardian applies for an athlete under 13, gives or withholds each consent, and can see and change everything in the athlete's profile. From 13, an athlete may apply on his own and name a parent or guardian, who then gets their own sign-in to the same profile. An athlete of any age may have his own login, but only a parent or guardian can create it (that is the parent's consent to it); the parent sees everything in it and can close it at any time, and an athlete's login never lets him change the family's consents or make a payment. We never use athlete data for advertising, and the AI overseer is instructed never to diagnose, recommend weight loss or set calorie targets for an athlete.
Service providers
A short list of companies that handle data for us, each only for the job named: Amazon Web Services (hosting and encrypted backups, United States), Anthropic (AI analysis), Google Workspace (program email), Stripe (payments), WHOOP and Terra (wearable connections the family chooses to make), and Catapult (GPS data, when a team's units are connected). Verified results are exported to Primus only when a family has given that consent.
Keeping it and deleting it
We keep an athlete's data while he is in the program and for two seasons after, so a returning athlete keeps his history. A parent can ask for a copy of everything we hold on their child, or ask us to delete it, by emailing admin@legionslacrosse.com. We complete deletion within 30 days, keeping only the payment records the law requires.
Security
Everything travels over HTTPS and is stored on encrypted disks with nightly encrypted backups. Access is by role, every athlete record is checked against who is asking, and changes to results are kept as an audit trail rather than overwritten.
Changes
If this policy changes in a way that matters, families get a notice in the app and by email before it takes effect. The date at the top is the date of the current version.
Contact
Legions Lacrosse · admin@legionslacrosse.com · www.legionslacrosse.com