Capture it. Protect it.
Prove it.

You're already investing in your child's tennis: the lessons, the tournaments, the 6 a.m. drives, the years. That journey is being built whether or not anyone writes it down. TierBreak exists to capture it, to protect it, and to prove it's working. This page is about the middle word, because a place that holds a child's development is only as good as its promises, and ours are in writing.

Three words, one job

• Capture: one owned record of everything your athlete builds: every match point by point, every session, every goal, the résumé a coach or recruiter can read in two minutes. Logged as it happens, owned by your family.
• Protect: that record is about a child, so restraint is the product, not a setting. The rest of this page is how.
• Prove that the work is working: goals your athlete accepts, a real mental curriculum, coaches each in their own lane, and evidence from your athlete's own matches, measured against their former self, never a leaderboard.

Ten lines we will never cross

Most privacy pages tell you what a company does. This one tells you what we've made permanent. These ten commitments are ratified in our internal constitution (2026-07-18). A line is only ever removed by a later, dated, public change that names the line and the reason. Never quietly, never as a side effect of a release.

1. No leaderboards; no ranking one child against another as identity. The whole loop is you versus your former self.
2. No kid-to-kid social; no DMs. No child-to-child messaging, friend graph, or public profile. The only cross-account channel is coach-to-family.
3. No directory of other people's children. Data about a player comes from the family or from an official, consented, per-user API, never scraped or embedded from someone else's database of minors. Narrowed 2026-10-01, by name and with the reason (it was "No scraping in the product", restated 2026-09-28 when the tournament planner shipped): so a family can find events, see the size and strength of a field, and see how their player measures up, the tournament planner reads USTA's public tournament calendar, entry lists and player profiles, the same pages anyone can open in a browser. The calendar and entry lists are read by TierBreak's server and by a TierBreak computer; the profiles are opened only in a browser on that computer, which keeps the pull's files for 14 days. From a field it keeps each player's rating, rating confidence and ranking points as bare numbers, with no name, no ID and nothing that ties a number to a child, and deletes them 30 days after the event; the count of entrants per event is kept three years, with no person in it. Two reads start from an ID a family typed: their own player's public profile (Advanced and Elite), and, on Elite, the rating of an opponent whose USTA ID the family added to their own opponent record and confirmed, read about once a week and kept on that record alone, never joined with another family's; the same record notes when that opponent is on the entry list of an event the family saved. It never signs in, never reads draws or results, and never looks a child up by name. What continues: TierBreak keeps no directory of other people's children, and an opponent's number is kept only for the family that typed their ID.
4. No credential brokering. We never store or proxy your USTA / UTR / third-party passwords to fetch your data.
5. No public browsing of minors. There is no searchable directory of children. A child's record is visible only to their family and the coaches that family grants. A family's record of an opponent, including a rating Elite reads from the USTA ID the family typed, is visible only to that family; a coach sees an opponent's name on a match, never their rating.
6. No ads. We never sell or rent personal data, and we disclose it only to the coaches your family chooses and the service providers named in the privacy policy. No ad SDKs, no third-party tracking SDKs, no data brokering, ever.
7. The journal is sacred. A young athlete's written reflections never enter an export, are never sold, and stay private to the athlete. They touch AI only when the family turns it on, athlete by athlete: the opt-in handwriting clean-up, and the athlete-only Your patterns reading (added 2026-08-06) whose result returns to the athlete and no one else. Never automatically, and never visibly to a parent or coach. See the Journal Covenant.
8. We never push a child's data outward. Data flows in: from the family, from USTA's public pages as line 3 describes, and from official channels a family consents to. Nothing about a child is resold or transmitted out. The one exception is initiated by you, not us: a parent may deliberately share a single tracked match with the other family, an opponent's or a doubles partner's, previewed in full before it is sent, describing the recipient's own athlete, and never re-shareable onward. Nothing is ever shared automatically or publicly.
9. No minor NIL. We will not broker, host, or monetize a minor's name, image, or likeness.
10. No self-signup under 13; no child data in marketing. An under-13 sign-in exists only where a guardian created it and can withdraw it, and every marketing surface is adults-only.

Structural, not a slogan

Promises are easy. These are built into how the software works; you don't have to take our word for the ones you can check yourself.

Coach access, scope by scope. You grant it, you see it, you revoke it.

AI is explained in plain words and switched per athlete, by you.

Capture is opt-in, one step at a time.

• An append-only consent ledger. Every consent and every revocation is a permanent, timestamped entry pinned to the exact privacy-policy version you agreed to. It can be added to, never edited or rewritten.
• Coaches see only a subset of what the family sees, enforced by the database. You grant a coach specific areas, revocable instantly. Every coach view is logged and visible to you. There is no private coach-to-child channel, and a coach can never see anything the family can't.
• Safeguarding is content-free. If something an athlete writes suggests they may be struggling, the app nudges a guardian to check in, without ever showing the words. Safety never overrides the athlete's privacy; it works around it.
• No third-party SDKs. No advertising or analytics trackers are in the app at all. We don't collect location, contacts, browsing history, or advertising IDs.
• AI is opt-in and named. Seven optional features use Anthropic's Claude: match recaps, the parent-only car-ride brief, opponent dossiers, opponent-prep chat, the college timeline brief, cleaning up a photographed page, and the athlete-only Your patterns journal reading. Each runs only when you explicitly opt in FOR A GIVEN ATHLETE, sends only the data that feature needs, and the server refuses the call if no consent is on record for that player. One child's yes is never another child's; under 13, AI is off entirely, and not even a guardian can switch it on. Journal reflections are sent only for the reading the athlete asks for themselves, and the result comes back to the athlete alone.

You own it, and you can leave with it

The record is your family's, not ours to hold hostage.

• Export any time. A Training Résumé PDF a coach can read in two minutes, plus your matches, ratings, and training as data you can take anywhere.
• Deletion is honest. Delete one child's profile or the whole account, in-app, immediately. It's a hard delete: erased, not archived. What survives is a content-free receipt that the deletion happened; nothing about the child.

The wind-down covenant

TierBreak is run by a small team, and honesty about that is part of the trust. So we put the hardest promise in writing, in our Terms of Service, not just here: if TierBreak ever winds down, your family gets at least 90 days' notice, a full export of everything you've logged, and verified deletion of what remains. Your athlete's journey does not disappear because a company did, and it does not linger somewhere after you've asked it gone.

When a line ever moves

The ten commitments above are meant to outlast any single quarter's pressure. If one is ever narrowed or lifted, it happens in the open: a dated, public entry that names the line and the reasoning, never silently. That public record of restraint is the point: it only means something because we can't take it back quietly.

Questions about any of this? privacy@tierbreak.app, or read the full privacy policy and terms.