Trust

TierBreak Privacy Policy

Last updated: 2026-08-17

TierBreak ("TierBreak", "we", "us") provides a tennis training and competition tracking app for junior players and their families. This policy explains what we collect, how we use it, and the choices and rights you have, with specific attention to the privacy of children under 13.

Who holds the account

An adult sets up the family account. Nobody under 13 can sign themselves up: the sign-up asks for a date of birth before it collects anything else, and an under-13 answer stops there.

A player aged 13 or over can be invited to their own sign-in, and accepts that invitation themselves.

A player under 13 is not invited. Their guardian creates the sign-in directly, from the player's profile, while signed in to their own account, and only after reading what it means and agreeing. Being signed in as the guardian is how we know the agreement is really theirs. We record it. The sign-in is created on an address at a domain we own and never deliver mail to, so there is no inbox a child could use to reset their own password: recovery always goes through the guardian, who can set a new password at any time. The guardian can withdraw the agreement whenever they like, which turns the player's sign-in off. A child is never asked their own age by us: we use the date of birth their guardian recorded, so a child is never in the position of having an account taken away for answering honestly.

Whoever is signed in, the guardian remains in control of a player under 13 and can read, correct, export and delete everything about them.

What we collect

We collect only what's needed to provide the app:

• Account data: email address and authentication credentials (handled by our auth provider, Supabase). If you sign in with Apple or Google, we receive the identifier they provide; we do not receive your Apple/Google password.
• Player profiles you create: name, date of birth or birth year, gender, home state, optional profile photo, and any rating IDs you choose to save (such as a USTA ID, for when official ratings arrive through a consented channel).
• Ratings you enter: rating values your family types in (for example a World Tennis Number or UTR, singles or doubles), stored with their history and labeled as family-entered. If official rating data later becomes available through consented channels, it is stored alongside your entries; official records are labeled as such and your entered history is kept.
• Activity you log: training sessions, match scores and point-by-point data, mental-game and wellness notes, goals, and tournament scouting notes.
• Crash and diagnostic data: if the app crashes, our own first-party reporter (no third-party crash SDK) records the error, the app version and the device's OS version so we can fix it. No advertising identifier, no location, no journal content.

We do not collect precise geolocation, your device contacts, advertising identifiers, or biometric data, and the app contains no third-party advertising or analytics SDKs. This website (not the app) uses Cloudflare Web Analytics to count page views: it sets no cookie, builds no fingerprint, and records no identifier, so it cannot tell one visitor from another or connect a visit to a family.

How we use it

To operate the app: to show charts and trends, compute ratings projections, generate recaps, and provide the features you use. We do not use your data for advertising, and we do not sell or rent personal information.

Launch waitlist

If you give us your email on our website's launch waitlist, we use it for a single purpose: to email you when TierBreak opens on the App Store. This is a form for adults; we do not ask for any information about a child. We store only your email address (and the fact that you asked to be notified); we do not sell or share it, and every message includes a one-click unsubscribe. You can also unsubscribe anytime by emailing privacy@tierbreak.app.

Children's privacy (COPPA)

A child under 13 can use TierBreak, with their guardian's agreement, and that agreement is what permits everything that follows. We comply with the Children's Online Privacy Protection Act (COPPA):

• A child cannot sign themselves up. Our sign-up asks for a date of birth before it collects anything else, and an under-13 answer stops there. The only way a child under 13 gets a sign-in is by invitation from their guardian's account.
• Consent before the account exists. Before we create a sign-in for a child under 13, their guardian is shown what we collect, what their child will be able to do, and what their child will not be able to do, and they have to agree. We record that agreement. Nothing about that child is collected through their own sign-in until it exists.
• Withdrawal turns the sign-in off. A guardian can withdraw that agreement at any time, in Settings. It is not a preference we note down: the child's sign-in stops working the moment it is withdrawn. Their record stays with the family, visible to the guardian, until the guardian deletes it.
• No AI for a child under 13. None of the AI features run for them, and a guardian cannot switch them on. Nothing a child under 13 writes is sent to Anthropic or any other company.
• A child's journal is not private from their guardian. The guardian can read everything their child writes, and the child is told that when they write it rather than discovering it later. This is the one place we deliberately give a young athlete less privacy than an older one, because a guardian's right to see their child's record is not ours to sign away.
• Parent as controller. The parent/guardian account holder decides what to enter about their child, can review and edit it at any time, and can delete it.
• Data minimization. We store only tennis-development information about a child, never more than needed to provide the app.
• No advertising or third-party sharing. We do not target ads to children, do not sell children's information, and do not disclose it to third parties for their own use. Any official rating information (such as USTA or WTN) flows into the app through official channels you connect, with your consent; we never push your child's information out.
• Consent is recorded twice, for two different things. Once when a guardian creates a player profile for a child under 13, and again, separately, if that child is later invited to their own sign-in. They are different decisions and we do not treat the first as permission for the second.
• Parental rights. A parent/guardian can review, correct, export or delete their child's information in the app, withdraw either consent directly in Settings without having to delete anything, and contact us with any request at the address below.

If you believe we have inadvertently collected personal information directly from a child under 13, contact privacy@tierbreak.app and we will delete it.

Who can see what within a family

A TierBreak family can include more than one person with their own login: typically a parent or guardian who manages the account and, optionally, a player aged 13 or older who has their own athlete login.

• Parents and guardians who manage the account can see the development data for the players in their family: training, matches, progress, ratings, wellness, and mental-training metrics. They can also create and manage player profiles. This is by design: families track development together.
• A player with their own login sees only their own information, never another player's in the family. That is true at every age.
• A 13+ player's written reflections are private to them. The free text a young athlete writes in journaling and post-match reflections is private to that athlete by default and is not shown to their parent or guardian. The athlete can choose to share individual entries with their family. Structured progress (scores, trends, and the metrics that show whether the training is working) remains visible to the managing parent or guardian.
• A safety check-in. If something an athlete writes suggests they may be struggling, TierBreak may prompt their parent or guardian to check in, without showing the parent what was written. This is a prompt to start a conversation, not a clinical assessment, and it is not a substitute for professional help. If you or someone you know may be in crisis, contact local emergency services or a crisis line such as 988 (US Suicide & Crisis Lifeline).
• A connected coach sees a subset of what the family sees. If your family invites a coach, you choose which areas they can view (training, matches & results, shot & point analytics, mental progress, schedule, goals), and you can revoke access at any time. A coach can never see a written reflection unless the athlete chose to share that entry with the coach specifically. Every coach view is logged and visible to the family, and there is no private channel between a coach and a child: anything a coach can see, the managing guardian can see too.

Sharing a match with the opponent's family

A parent or guardian can choose to share one tracked match with another family in that match, so both kids get the record of a match they both played. This is always a deliberate act by the sending guardian: nothing is shared automatically, publicly, or with anyone but that one family, and the link is an authenticated, single-use invitation; there is no public page.

There are two cases, and they are not the same. In singles, a guardian may share with the opposing player's family. In doubles, a guardian may share with their child's partner's family only. The opposing pair's families are not offered, because a doubles match contains two other households' children and one family's decision cannot speak for them.

For a doubles partner, the sender chooses how much detail travels, and is shown both options before sending. The default sends every point with the detail that describes the partner's own child. The sender may instead choose to send everything their family tracked from that side of the court, including their own child's shot detail and serve placement. The choice is recorded with the share, and both families are shown which one was made.

What travels is the score, the facts both benches could see, and the details that describe the recipient's own athlete. In singles the match is retold from the recipient's side, with the score inverted to their point of view. In doubles nothing is inverted, because both children played the same points from the same side of the net; only the two names on that side change places, so the recipient's own child reads first in their record. The opposing pair's shot detail and court positions never travel in either case.

The sending athlete's own tracking detail stays home unless the sender deliberately chooses to include it for a doubles partner as described above. Every note, reflection, and AI-written recap stay home in every case. The sender previews exactly what will be shared before sending, the athlete can see every share made of their matches, and a received copy can never be shared onward.

Notifications and the home-screen widget

All TierBreak reminders (daily reminder, streak nudges, event reminders, the weekly recap) are local notifications scheduled on your device. We operate no push-notification servers and no data about your athlete leaves the phone to produce a notification. Notifications are optional: decline iOS permission and the app stays quiet. The Win the Day home-screen widget works the same way: the app shares its small summary (ring progress, streak) with the widget entirely on-device through Apple's app-group storage; nothing is transmitted.

Storage, security, and retention

Data is stored in Supabase (PostgreSQL). Every request is authenticated with a verified JSON Web Token (fail-closed), and our application scopes every record to your family, so no other family can read or write your data; database Row-Level Security adds a further layer of isolation on core records. Connections use TLS.

How long we keep things

You can delete at any time, and that overrides everything below. Deleting a player profile removes that player's data; deleting your account (Settings, then Delete account) removes your family's records, meaning profiles, sessions, matches, journals and goals, along with your sign-in record. It happens immediately rather than being queued, and it is not recoverable.

If you never ask us to, these limits apply on their own:

• While you are using TierBreak, we keep your record. That is the point of it. A season only means something next to the ones before it.
• Twenty-four months after the last sign-in, the account and everything in it is deleted. You do not have to do anything, and we do not hold a dormant family's data indefinitely on the chance they come back.
• Written reflections older than twenty-four months are erased on a rolling basis. The day itself stays, so streaks, totals and the numbers an athlete tracked are not rewritten years later, but the words are gone. The private things a twelve-year-old wrote should not still be sitting on a server when they are fifteen.
• Age-screen answers are discarded once the check is done. We never store a date of birth from that screen, only whether the answer was 13 or older, and that record is removed when the account is.

Two anonymous operational records remain after a deletion, and neither contains a name, an email address, or anything about a child: a churn record (the date, and counts of how many players, sessions and matches the family had) and an audit receipt proving the deletion took place. We keep them to understand why families leave and to be able to show that deletions actually happen.

Data breach notification

If we discover a breach that compromises your personal information, we will notify affected users without undue delay and in accordance with applicable law, typically by email to the account address, describing what happened, the data involved, and the steps we are taking. We will also notify regulators where required.

Third-party services

• Supabase: authentication and database hosting.
• Cloudflare: serves this website and fronts our API, and provides the cookieless page-view counts described above. It is not used for bot challenges that run scripts in your browser.
• Official rating providers (e.g. USTA): only if and when you connect an official, consented channel. TierBreak does not fetch, scrape, or refresh ratings from public sources; until an official channel is connected, the ratings shown are the values your family enters.
• Apple / Google: only if you choose Sign in with Apple or Google.
• AI processor (Anthropic): powers match recaps, opponent scouting summaries, the parent-only post-match car-ride brief, the grounded opponent-prep chat, the college pathway brief, the optional “Clean up with AI” handwriting transcription, and, only when the athlete themself asks, the athlete-only “Your patterns” journal reading, which sends the athlete's own reflection text and returns its result to the athlete alone. The prep chat also sends what you type into it. Every AI feature requires a recorded AI consent FOR THAT ATHLETE: the choice is made per player, not once for the household, so agreeing for one child is never agreement for another. For a player under 13 only a parent or guardian can give it, and a guardian can withdraw it at any time. Content is sent only to produce the result you asked for. Anthropic does not use it to train models, sell it, or use it for advertising. TierBreak never stores the scanned handwriting photo.

Your choices and rights

You can access and edit your data in the app, export it on request, and delete individual player profiles or your entire account at any time (Settings → Delete account). To make a privacy request, email privacy@tierbreak.app.

Changes

If we make a meaningful change to this policy, we'll update the date above and surface a notice in the app on next launch.

Contact

Privacy requests: privacy@tierbreak.app
General support: support@tierbreak.app