Privacy Policy

• Account registration information: name, email address, date of birth, state of residence, password.
• Profile information: profile photo, bio, team affiliations.
• Content you create: posts, comments, reactions, highlight clips, photos, videos.
• Communications: messages sent through the Platform's direct messaging feature.
• Payment information: if you purchase premium features or subscriptions (processed by third-party payment processors; we do not store full payment card numbers).

• All information listed in Section 2.1.
• Organization verification information: school email address, league affiliation, organization name.
• Team and roster data: team names, player names, parent email addresses entered during roster creation.
• Game film and athletic content: video files, tagged plays, statistics, and performance data uploaded to the Platform.

• All information listed in Section 2.1.
• Parental consent records: the privacy settings you choose for each child, and how and when you chose them.
• For parents adding a child under 13 as a managed roster profile: the child's details and the privacy settings you choose. No government identification is collected or examined.
• Parental control preferences: sharing toggle settings, real name toggle settings, DM level settings, time restriction preferences, and content approval preferences for each linked minor account.

We collect limited information from minor users, and the categories of information collected vary by age tier. Information about a child under 13 reaches us from a guardian or a coach, never from the child.

• Device information: device type, operating system, browser type, screen resolution.
• Usage data: pages viewed, features used, time spent on the Platform, referring URLs.
• Log data: IP address (logged for security), access timestamps, error logs.
• Cookies and similar technologies: as described in Section 8 (Cookies and Tracking Technologies).

This applies wherever you use ReviSports. Our mobile and desktop apps collect this too, not only the website, and Section 2.6 sets out what the apps collect that a website could not.

Analytics, crash reports and performance diagnostics. We measure how the Platform is used and we collect reports when something breaks, on the website and in both apps. That means which features are opened and how long things take, and, when the software fails, a crash report describing what the app was doing at the time, the device model and operating system version, and the technical error. We use it to fix faults and to decide what to improve. Some of this runs through service providers who process it on our behalf under contract, listed in Section 6.1. A crash report is a technical record, not a copy of your content: we do not use it to read your messages, your film, or anything else you have created.

For minor accounts, automatically collected information is minimized to what is necessary for Platform functionality and security. We never sell it. For children under 13 it is never used for advertising of any kind. For users aged 13 to 17 it may inform personalized advertising only where Section 4 permits it and only while that setting is on.

ReviSports publishes a mobile app for phones and tablets and a desktop app for computers. Both sign in to the same account and read the same information as the website, so everything already described in this Section applies to them. What follows is what the apps do that a website cannot, so that nothing about them is left to be inferred.

Every permission below is asked for at the moment you use the feature that needs it, never at start-up, and declining one leaves the rest of the app working.

• Notifications, and the push token that delivers them. If you allow notifications, your device is issued a push token: a random string that identifies the installation, not you. We store it with your account so we can send you the alerts you have turned on in Settings, and for nothing else. It is not an advertising identifier, we do not use it to recognise you anywhere else, and the notifications themselves carry no names or message text. The token passes to Expo and then to Apple or Google purely to reach your device. Declining notifications means you will not get alerts; everything else works normally, and you can change your mind in your device settings. Turning notifications off, or signing out, removes the token.
• Your photo library, in two separate ways. To ATTACH an image to a post, the app asks for photo access when you tap to attach one, and we receive the single item you pick. We do not browse, index or read your library, and nothing is uploaded that you have not chosen. Separately, when you record a clip during a live broadcast, the app SAVES that clip to your own photo library, under an add-only permission: it can write a clip in and it cannot read anything out. Clips saved that way are yours, on your device, and they are outside ReviSports entirely, which means we cannot see them and we also cannot delete them for you. Declining either permission leaves the rest of the app working.
• Files you choose to upload. Uploading game video, a play-data spreadsheet, or a playbook PDF opens your system file picker. We receive only the file you select.
• Your camera and microphone. You can broadcast a game live from your phone. The app asks for camera and microphone access at the moment you start a broadcast, never at launch, and it records and transmits only while a broadcast is running and only what the camera is pointed at. A recording indicator stays on screen the whole time it is running. Declining leaves the rest of the app working exactly as it does now, and you can still cover a game with a separate camera or encoder pointed at your stream key. We do not open the camera or the microphone at any other time.
• Your device location, for advertising geography. With your permission, the app reads your device's location and we use it to choose which local advertising to show you. Your device asks you first and you can refuse, and you can change your mind later in your device settings; refusing does not affect anything else in the app, and advertising falls back to the location of the team or the event. We do not use it to build a record of where you go, we do not attach it to your posts or your film, and we do not share it with a data broker.
• Location and minors follows Section 4, without exception. Location-based advertising is advertising, so every rule in Section 4 applies to it: it is never used for a child under 13, it is switched off entirely for users aged 13 to 17 in Connecticut and Maryland, and it requires that user's own opt-in in California at ages 13 to 15 and in Colorado, New York and Texas. Where personalized advertising is off for an account, for any reason, we do not use that account's device location for advertising either. A parent or guardian can switch it off for a child they manage.
• Your contacts and calendar: not requested. Neither app reads your address book or your calendar. Invitations are sent to email addresses typed in by hand.
• Information kept on your own device. Both apps keep a working copy of things you have already been shown, so they open quickly and, in the desktop app, keep working at a field with no signal. That includes your sign-in credential, held in your device's own secure storage (the Keychain on Apple devices, the Keystore on Android), and team information such as rosters, schedules, playbooks, and film you have downloaded. This stays on your device. Signing out clears the credential, and removing the app removes the rest.
• Buying anything happens on the website. Neither app sells anything or handles payment details. A subscription link in an app opens your browser.

What the apps never do. We do not sell your personal information, at any age, and we never share it with a data broker (Section 6.7). We do not follow you around other companies' apps and websites: what we know about you is what happens on ReviSports, plus the device location you allowed us to use for advertising geography. We do not read your address book or your calendar. And nothing in Section 5's protections for minors is weakened by anything in this Section.

The desktop app asks for no device permissions: no camera, no microphone, no location. It reaches the same servers as the mobile app and holds its credential in your computer's credential store.

• To create and maintain your account and authenticate your identity.
• To provide, operate, and improve the Platform and its features.
• To display your athletic profile, statistics, and content to authorized viewers based on your privacy settings.
• To facilitate team communication and content sharing within the Platform.
• To detect, prevent, and address fraud, abuse, security issues, and technical problems.
• To comply with legal obligations, including responding to lawful requests from public authorities.
• To enforce our Terms of Service and protect the rights, property, or safety of ReviSports, our users, or others.
• To send service-related communications (account confirmations, security alerts, support messages).

• To deliver contextual and, with your consent, personalized advertising.
• To generate anonymized and aggregated analytics and insights from your usage data, which may be shared with or sold to third parties (see Section 6).
• To send promotional communications about ReviSports features, events, and partner offerings (you may opt out at any time).

For minor users, we apply the following restrictions on how we use information. Where a restriction cannot be changed by any consent setting, it says so:

• For children under 13, advertising is CONTEXTUAL ONLY: based on the content being viewed (sport, position, competition level, content geography) and never on the individual user, and that cannot be changed by any setting. For users aged 13 to 17, personalized advertising is permitted where Section 4 allows it, and contextual advertising continues to use no personal information about anyone.
• We do NOT sell, rent, or trade any user's personal information to third parties, at any age, for any purpose, including marketing, analytics, or data brokerage. Where personalized advertising is permitted under Section 4, the only thing passed to our advertising partner is the pseudonymous identifier described in Section 6.2, which is not a sale, a rental, or a trade.
• For children under 13, we do NOT use their information to build behavioral profiles, infer preferences, or create audience segments, and no setting can change that. For users aged 13 to 17, personalized advertising uses interaction signals to select ads wherever Section 4 permits it, which is by default in most states; those signals are never sold, and the user or their parent can switch personalized advertising off at any time in Settings.
• We do NOT use minor users' information for algorithmic content ranking or recommendation, regardless of parental consent settings. Content feeds for minor accounts are chronological.
• We do NOT use minor users' information for any purpose not disclosed in this Policy, regardless of parental consent settings.

ReviSports serves contextual advertising based on the content being viewed, not the individual viewing it. Contextual signals used for ad serving include: sport (e.g., football), position group (e.g., quarterback), content type (e.g., highlight clip), play type (e.g., touchdown), competition level (e.g., varsity), content geography (the location of the team or event, not the viewer), season phase (e.g., regular season), and time segment (e.g., weekday evening). No personal information is included in contextual ad requests.

For users aged 13 and older, ReviSports may serve personalized advertising based on your interactions with the Platform. It is ACTIVE BY DEFAULT with no opt-in required, and you can switch it off at any time using the "Personalized advertising" control in your account Settings. A parent or guardian can also switch it off for a child they manage. You can also exercise the opt-out through the Platform's advertising and cookie preferences, including a “Do Not Sell or Share My Personal Information” control and recognition of the Global Privacy Control signal where applicable. If you switch it off you will continue to see contextual advertising only. We do not sell your personal information. Our advertising partner receives only a pseudonymous identifier, under a written agreement that limits it to delivering and measuring our advertising and forbids using it for its own purposes, so the disclosure is not a sale.

State rules for users aged 13 to 17 are applied automatically by state of residence, and there are exactly two exceptions to the default above. WHERE YOUR OWN CONSENT IS REQUIRED, the Settings control starts switched OFF and personalized advertising begins only if that user switches it on themselves: California at ages 13 to 15, and Colorado, New York and Texas at ages 13 to 17. WHERE IT IS OFF ENTIRELY, in Connecticut and Maryland, users aged 13 to 17 receive no personalized advertising at all and the control is locked off, because those states restrict advertising to a known minor outright rather than allowing the minor to consent. These rules are enforced by the Platform automatically, based on the age and state of residence on the account.

Personalized advertising is managed through a Consent Management Platform (CMP) that applies the correct consent model based on your state or country of residence, reflecting the requirements of applicable law (including the CCPA/CPRA for California residents and the GDPR for EU/EEA residents).

We do not serve personalized or targeted advertising to children under 13 under any circumstances. This prohibition is a hard system rule: it applies regardless of any consent or account setting and cannot be overridden. All advertising shown on pages about a child under 13 is contextual only, and ReviSports sends the child-directed treatment signal with each such advertising request.

We do not collect, use, disclose, or maintain personal information from children under 13 for purposes of individual-specific advertising, consistent with the Children's Online Privacy Protection Act (COPPA). For users 13-17, personalized advertising operates as described in Section 4.2, including the state-specific restrictions and the California under-16 opt-in.

Advertising content shown adjacent to minor-associated content is subject to additional restrictions regardless of age band. The following categories of advertising are prohibited on pages associated with minor accounts: gambling, alcohol, tobacco, vaping, weight loss products, dietary supplements, financial products, political advertising, dating services, and any content rated as inappropriate for minors.

Children under 13 cannot have accounts at all. Not their own, and not one created for them. A child under 13 takes part through a roster profile that their parent or guardian creates and manages from the parent's own account. The primary path is through a coach invitation: a coach creates a team, enters the roster with parent email addresses, and the Platform sends an invitation to each parent. The guardian creates their own ReviSports account and then adds the child's profile.

Teens (13-17) may join the Platform through either of two paths: (a) a coach invitation sent to the teen directly, after which the teen accepts the Terms of Service themselves; or (b) a coach invitation sent to a parent, who creates the teen's account.

Where applicable state law requires parental consent for a teen at their age (see the state-rules table at /legal/state-consent-rules), the teen-direct path is converted to a parent invite automatically when the teen enters their date of birth and state of residence. The coach is notified to issue the invitation to the parent instead.

A set of independent consent controls governs a minor's Platform experience. Who controls them depends on the account type. On club and consumer (personal) accounts, the linked parent/guardian and the athlete themselves (from age 13) share ONE set of controls: either may change any setting at any time, the parent/guardian from the parent/guardian dashboard and the athlete from their own settings page (Settings > Privacy), the most recent change wins, and each is notified when the other changes something. On school accounts, the parent/guardian is authoritative and the student cannot override their choice. Enabling one control never enables any other, and changes take effect immediately.

What the settings start as. A new account's starting settings depend on account type, age, and state of residence, and they are applied once, when the account is created; a later change to these starting rules never reaches back and changes an existing account. For children under 13, only the name on the team roster starts ON (their own team sees it), and everything else starts OFF; whenever we do not have a date of birth, everything starts OFF. For teens 13-17 on a club or consumer account, the name-on-roster and name-with-stats controls (Team scope), private group chats, and commenting on other teams' shared content start ON; content sharing outside the team, every External-scope control, and direct messages still start OFF. For teens 13-17 on a school account, only the name-on-roster and name-with-stats controls (Team scope) start ON, and everything else starts OFF. In states whose law requires a known minor's settings to default to the most private available (currently Texas, Utah, Maryland, and California, read as written), every control for a 13-17 account except the name on the team roster starts OFF; if we cannot determine the state, we treat it the same way. Accounts for adults 18 and over start with the same set as a club/consumer teen, without the state restriction. Personalized advertising has its own state-by-state rules, described in Section 6.2 and Section 4.

The consent controls are:

Scouting reports never show a child's name to another team's coaches: they show jersey number and position only, and no setting changes that.

A child's consent settings are a single record that follows the child, not any team: if the child plays on several teams, the same settings apply on every one of them, and a change made once applies everywhere immediately. There is no way to set them differently for different teams.

Coaches always see full player names regardless of consent settings, as this is necessary for team administration. We do not collect, use, or disclose information from a minor beyond the scope of the consent controls described in this section.

Every minor account has a display username used in all external-facing contexts (any interaction outside the child's own team). This username is chosen by the parent (for under 13) or the child with parental review (for ages 13-17). The username must not contain the child's real name, school name, birth year, or other identifying information. The Platform validates usernames against these rules.

The display username ensures that a minor's real identity is never disclosed outside their team boundary unless the Real Name control (Section 5.3) is on. Comments, reactions, shared content, and DM conversations with external contacts all display the username, not the real name, by default.

While a user is a minor, content posted under a display username retains that attribution permanently. If the Real Name control is switched on later, content posted before that date remains attributed to the display username. Only new content going forward displays the real name.

When a user turns 18 they become a legal adult. The Platform asks them, once, whether to show their real name outside their teams or keep the display username. Nothing changes until they answer, and the Real Name control remains theirs to change at any time afterward. Historical content keeps the attribution it was posted with.

We intend to offer fuller controls over historical minor-years content, letting the now-adult user reveal it under their real name, disconnect it from their profile, or delete it entirely. Until those controls ship, historical content simply remains as posted.

All content on the Platform is subject to moderation. Content and messages involving minor accounts receive enhanced protections:

• Every message sent on the Platform, in Team Chat, group chats, custom groups, and direct messages alike, is screened automatically by artificial intelligence at the moment it is delivered, for bullying and harassment, sexual content, grooming and predatory approaches, threats of violence, self-harm, and hate. The screening is performed by software; no person reads conversations as a matter of course. Section 6.8 describes the process in full, including what is sent to our AI provider and who receives an alert.
• When a concern is confirmed, or someone in the conversation reports a message, ReviSports alerts the accountable adult: the parents or guardians of the minor involved in a club or consumer organization, or the school's designated officials in a school organization, and never the person who wrote the message. Parents and guardians receive these alerts in the parent/guardian dashboard.
• Comments are subject to an automated profanity filter.
• Any user can report content or another user. Reports involving minors are prioritized, and a reported message can be hidden while a ReviSports moderator reviews it.
• If we become aware of apparent child sexual abuse material (CSAM) on the Platform, we report it to the National Center for Missing and Exploited Children (NCMEC) as required by federal law (18 U.S.C. 2258A). Beyond what the law compels, where we believe in good faith that someone is at risk of serious harm we may contact law enforcement, child protective services, a school, or another appropriate authority ourselves, without needing permission from a parent, guardian, or organization, and without telling them first where doing so could put someone at greater risk.

Parents of minor users have the following rights at all times:

• Review all personal information collected from their child by contacting us at the address in Section 15.
• Review all content posted by their child through the parent dashboard.
• Review the direct messages their child has sent, through the parent/guardian dashboard, and receive the safety alerts described in Section 6.8, which carry a copy of the message that prompted the alert. A parent or guardian may also request the personal information we have collected from their child, including their messages, using the first right listed above.
• Modify or revoke any consent control setting (Section 5.3) at any time.
• Request deletion of their child's account or profile and all associated personal information at any time. Deletion requests are fulfilled within 48 hours.
• Refuse to permit further collection, use, or maintenance of their child's personal information, which will result in the deletion of the child's account or profile.

The Platform runs on infrastructure operated by our affiliate, NoBid Inc. This applies to everything on the Platform, not only to the automated screening described below: your account, your team's roster, your messages, your uploaded video, and the personal information of any minor connected to your account are all stored and processed on infrastructure that NoBid owns and operates. NoBid also holds the accounts with the AI providers through which the classification described below is performed. ReviSports and NoBid are affiliated companies under common ownership, and ReviSports pays NoBid for these services. NoBid acts as our service provider: it holds and processes Platform information only in order to provide hosting, storage, and processing to ReviSports, and it does not use that information for its own purposes. We name NoBid here, rather than describing it by role as we do the AI providers below, because it is not a vendor we would swap out. It is the company that operates the Platform, and we think you should know that a company other than ReviSports holds your information.

We also share information with third-party service providers who assist us in operating the Platform, including identity verification services, content moderation tools, and ipapi.co, an IP-geolocation service used only to detect which privacy-law region applies to you for the cookie-consent banner (it receives your IP address only). Service providers are contractually required to use your information only to perform services on our behalf and are prohibited from using it for their own purposes.

The AI services we use, and what each receives. We use third-party AI providers to perform the automated classification described in this Policy, and none of them receives anything beyond what its task requires. There are two roles. A FIRST-PASS provider decides only whether something needs a closer look: it examines every message at the moment it is delivered, and it examines a post, a comment, or profile text when that item is reported to us. It receives the text of the item, and where the item includes images, the images being checked. A SECOND, HIGHER-CONTEXT provider makes the actual decision, and is reached only when the first pass flags something or when a message is reported: for a message it receives a de-identified window of the surrounding conversation, and for a reported post or comment it receives that item. Posts, comments, and profile text are NOT sent to either provider unless the item is reported to us; when they are created they are checked against an automated word filter that runs inside ReviSports and sends nothing to a provider. A provider also processes playbook documents a coach uploads, in order to read the diagrams on the page. None of them receives this content for any purpose other than the classification described, and none is permitted to use it for its own purposes. We describe these providers by role rather than by name because we may change providers or models over time; we will identify the current ones on request, and we maintain a list for the schools and districts entitled to it under their agreements with us.

Where a school district asks us to identify our sub-processors, NoBid and the AI providers described above are the ones relevant to this section, and we will name them.

Advertising is not enabled on the Platform today. When it is, our advertising partner will be NoBid Inc., the same affiliated company that operates the Platform infrastructure described in Section 6.1. We state that plainly because the company that holds your information and the company that would monetize it are the same company, and you should not have to work that out for yourself.

For contextual advertising, served to all users including minors, no personal information is shared with an advertising partner. Ad requests for contextual ads contain only content-level signals (sport, position, content type, and similar) and no user-level data.

For personalized advertising (behavioral targeting), what reaches our advertising partner is a PSEUDONYMOUS IDENTIFIER: an advertising or cookie identifier tied to a browser or device, together with the coarse signals needed to deliver and measure an ad. We do not pass your name, your email address, your date of birth, your school or team, your roster or statistics, your messages, or anything you have uploaded. The identifier lets an ad be delivered and counted; it is not a description of you. Personalized advertising is available from age 13, and there are exactly three ways your account can be treated. Which one applies depends on your age and your state of residence, and you can see the result for yourself on the "Personalized advertising" control in Settings under your account.

On by default, and you can turn it off. This is the ordinary case: adults, and users aged 13 to 17 in every state other than those named below. No opt-in is required, personalized advertising is active by default, and you can switch it off whenever you like using that Settings control. Turning it off does not remove advertising; it means your activity is no longer used to choose which ads you see.

Off until you choose it, where your state requires your consent. Some states require the user's own affirmative choice rather than allowing an opt-out, so in those places the same Settings control starts switched off and personalized advertising begins only if that user switches it on themselves. Nobody else can switch it on for them. This applies in California at ages 13 to 15, and in Colorado, New York and Texas at ages 13 to 17.

Off entirely, and not switchable, for minors in Connecticut and Maryland. Users aged 13 to 17 who reside in those two states receive no personalized advertising at all, and the Settings control is locked off for them, because those states restrict advertising to a known minor outright rather than allowing the minor to consent to it. Where a state instead requires consent, we ask for consent, as described in the paragraph above.

For children under 13 there is no personalized advertising under any circumstances, and no personal information about a child under 13 is ever shared with an advertising partner. That is a system rule rather than a consent choice: it cannot be switched on by a child, by a parent, or by us.

We may create anonymized and aggregated data sets derived from adult users' (ages 18+) Platform activity. This data does not identify any individual user and cannot be re-identified. We may share or sell anonymized and aggregated data to third parties, including sports analytics companies, equipment manufacturers, athletic training organizations, and research institutions, for purposes including market research, trend analysis, and product development.

We do NOT create anonymized or aggregated data sets from the data of children under 13, and their data is never included in any data set sold to or shared with third parties for any purpose, including in anonymized or aggregated form, except as required by law. For users aged 13 to 17 we do not sell their personal information either, and we do not include them in the data sets described above, which are drawn from adult activity only. The pseudonymous advertising identifier described in Section 6.2 is not such a data set.

We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, and search warrants. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

If ReviSports is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or uses of your information, as well as any choices you may have regarding your information.

We will disclose information to law enforcement and the National Center for Missing and Exploited Children (NCMEC) when we discover apparent child sexual abuse material (CSAM) on the Platform, as required by federal law.

We do not sell, rent, trade, or otherwise transfer the personal information of children under 13 to any third party for any purpose, including marketing, advertising, analytics, or data brokerage. This prohibition is absolute, applies regardless of parental consent, and cannot be switched on by anyone. For users aged 13 to 17 we do not sell, rent, or trade personal information either; where personalized advertising is permitted under Section 4, the only thing passed to our advertising partner is the pseudonymous identifier described in Section 6.2, and that partner is contractually barred from using it for anything other than delivering and measuring the advertising.

Date of birth of minor users is treated as an internal-only field. ReviSports does not disclose minor users' date of birth to any third party, including teams, coaches, leagues, opposing organizations, or partners, under any circumstances. Coaches and teams that need age-tier information (e.g., U10, U12, U15) use their own records outside the Platform.

Because most of our community is under 18, every message sent on the Platform is screened for safety. This section states exactly what that means for your information: what is examined, what leaves ReviSports, who receives it, when, and why. The corresponding rules of the service are in Section 6 of our Terms of Service.

What is screened. Every message delivered in Team Chat, a group chat, a custom group, or a direct message, for every account, including conversations in which every participant is an adult. Screening happens at the moment the message is delivered.

Who performs the screening. Artificial intelligence, not people. A fast first-pass model reads each message on its own and decides only whether it needs a closer look. Only if it flags the message does a second, higher-context model read the surrounding conversation (up to twenty messages before and twenty after) and make the decision. Nobody at ReviSports reads conversations as a matter of course.

What leaves ReviSports, and to whom. The text of the message, and for a flagged message the surrounding conversation window, are sent to an AI provider for the sole purpose of classifying them for safety. Different providers handle the two lanes, the always-on screening and the review of a reported message, and Section 6.1 describes them by role. In both cases the excerpt is de-identified before it leaves our systems: speakers appear as anonymous labels and only message text is included. Names, usernames, account identifiers, and timestamps are not sent. Section 6.1 lists both providers and what each receives, including the separate moderation of posts, comments, and profile content, which is not part of message screening. This content is not used for advertising, behavioral profiling, content recommendations, or any purpose other than the safety classification described here.

Flagged content is preserved on purpose. When a message is flagged for something serious, that record is evidence, and evidence that disappears is useless. So flagged content is retained past the ordinary periods in Section 9, both by us and by the AI provider that examined it, and that is deliberate rather than an oversight. It is how a concern can still be reviewed weeks later by a parent, a school, an investigator, or a court, and how a pattern involving the same person can be recognised at all. Content that is not flagged is not kept by a provider for this purpose.

Providers report serious findings themselves. Our providers run their own abuse-monitoring systems alongside the classification we ask them for, and they carry their own legal obligations. Where a provider identifies child sexual abuse material, or the sexual coercion or enticement of a minor, it reports that to the appropriate authorities directly. That is in addition to our own reporting to the National Center for Missing and Exploited Children described in Section 5.6, it is not something we or you can switch off, and we would not want to: it means the most serious findings reach the authorities through two independent paths rather than one. It also means such a report can be made without our involvement.

What we keep. When a concern is confirmed, we record the incident: the message, the conversation it was in, the sender, what the review found, and when. We keep that record so the incident can still be reviewed if the message is deleted or edited immediately afterward, and so we can demonstrate to a parent, a school district, or a regulator how a concern was handled. Messages that raise no concern create no such record.

Who receives an alert, and when. An alert is sent only when the review confirms a concern, the language filter is tripped, or someone in the conversation reports a message, and it goes to exactly one of the following (for a report, the person who made it counts as one of the people involved):

• In a school organization: the school's designated officials (owner, administrator, athletic director). The school then handles the matter under its own policies and its data privacy agreement with us.
• In a club or consumer organization, when anyone in the conversation is under 18 or we cannot confirm their age: the parents or guardians of the minor involved, and in a direct message the guardians on both sides. If no parent or guardian is on file, the organization's owner and administrators receive it instead.
• In a club or consumer organization, when every participant is confirmed to be 18 or older: ReviSports' own staff, and nobody else. The organization is not told, and no parent or guardian is involved. A ReviSports employee reviews the incident and decides whether any response is warranted. If we cannot confirm that every participant is an adult, we treat the conversation as involving a minor and apply the rule above.

The person who wrote the message is never the one who receives the alert about it. If they are the only person who would have, ReviSports' own staff receive it instead.

Alerts are delivered inside the Platform and carry a short copy of the message. Push notifications to your phone deliberately carry no names and no message content.

Why we do this. For minors, to protect them from bullying, harassment, sexual content, grooming, threats, and self-harm, and to meet our obligations under COPPA, under FERPA and state student-privacy law where a school district is involved, and under our agreements with the schools and organizations that use the Platform. For conversations among adults, the purpose is narrower: enforcing our Terms of Service and community guidelines, which is why those incidents stay inside ReviSports. In every case, apparent child sexual abuse material is reported to NCMEC as federal law requires. Beyond what the law compels, where we believe in good faith that someone is at risk of serious harm we may contact law enforcement, child protective services, a school, or another appropriate authority ourselves, without needing permission from a parent, guardian, or organization, and without telling them first where doing so could put someone at greater risk. Section 6.4 describes the other circumstances in which we disclose information.

We apply geo-targeted cookie consent based on your location:

• Consent-Required Regions (EU, EEA, UK, Switzerland, Brazil, Canada, Argentina, Uruguay, South Korea, Japan, Singapore, Thailand, Philippines, India, New Zealand, South Africa, Israel): Analytics and advertising cookies load in cookieless mode by default. A consent banner is displayed. You must affirmatively consent before any non-essential cookies are activated.
• CCPA States (California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Jersey, New Hampshire, Tennessee, Indiana, Kentucky, Maryland, Minnesota, Rhode Island): Full tracking loads by default. An opt-out banner is displayed. You may opt out of the sale or sharing of your personal information at any time.
• All Other Regions: Full tracking loads by default. No banner is required.

Regardless of geographic location, the following rules apply to minor accounts:

• Children Under 13: No behavioral tracking cookies are set under any circumstances. This is a hard system rule, not a consent choice. Analytics operates in cookieless (anonymous, aggregated) mode permanently. Advertising cookies are never loaded. This rule cannot be overridden by any consent mechanism.
• Ages 13-17: Advertising and analytics cookies are active by default except where prohibited by law. Personalized advertising is ACTIVE BY DEFAULT for ages 13 to 17, with no opt-in required, and the user can switch it off at any time using the "Personalized advertising" control in their account Settings. Two exceptions, both applied automatically by state of residence. FIRST, where a state requires the user's own consent, the control starts switched OFF and personalized advertising begins only if that user switches it on themselves: this applies in CALIFORNIA at ages 13 to 15 under the California Privacy Rights Act, and in COLORADO, NEW YORK and TEXAS at ages 13 to 17. SECOND, in CONNECTICUT and MARYLAND, ages 13 to 17 receive no personalized advertising at all and the control is locked off, because those states restrict it outright rather than allowing a minor to consent. A parent or guardian can also switch personalized advertising off for a child they manage, from the parent/guardian dashboard.
• Ages 18+: Standard geo-targeted consent as described in Section 8.1.

We implement Google Consent Mode V2 to ensure that our analytics and advertising tools respect user consent choices and minor account restrictions.

We separate two different things. Your data (your raw film, rosters, and personal information) stays yours and under your or your school's control. We never sell, lease, or rent it, and we never independently disclose it. Engine learning is different: as our models process film, they refine generalized mathematical patterns we call “Model Optimizations” (the weights and parameters inside the engine). Those optimizations contain no personal data and cannot reconstruct your film or identify anyone.

Player and jersey-number tracking is performed automatically, in working memory, by the algorithms, for the purpose of generating your analytics. We do not build a human-catalogued index of identities, and no person reviews your footage in order to train our models. The footage flows through the pipeline; what the engine keeps is mathematical abstraction, not your images.

We run a single, unified engine across all of our tiers and markets, including youth, little-league, and high-school football. Generalized patterns learned from film in one tier improve the analysis the engine delivers in every tier. Only the de-identified Model Optimizations are shared this way; raw film and personal data are never pooled or moved between customers or tiers by us. ReviSports exclusively owns the Model Optimizations and the engine; you keep ownership of your film and data.

Because athletic departments routinely exchange film for scouting and game preparation, the Platform lets you (or your coach, or your school) share, exchange, or pool film with other teams at your discretion, subject to the controls described above and, in a school workspace, the district's settings. Sharing that you direct is your decision, not a disclosure by us. You may also appear in film an opposing team uploads or shares.

When you delete content or your account (or, for school data, when the district instructs deletion), we permanently scrub the raw video and its metadata from our active production systems on the timelines in Section 9. Because the Model Optimizations are de-identified mathematical weights already absorbed into the engine and contain none of your personal data, deleting the source film does not require us to reverse or alter the optimizations already derived. It is not technically feasible to remove a single contribution from a trained model.