Privacy Policy

1. Children’s privacy (COPPA)

PathWind is not directed at children. PathWind accounts are for adults 18 and over. Children never have accounts and never log in. Parents and guardians enter information about their children to manage schedules and track activity records. No child interacts with the app or with any AI feature directly.

Information entered about a child (first name, birth year, photo, team memberships, stats, and coach feedback) is stored under the parent’s or guardian’s account. A parent or guardian can permanently delete all of a child’s information at any time from the Profile screen in the app. Deletion is immediate and complete — nothing is retained.

If you believe a child has created an account without a parent’s knowledge, contact us at hello@pathwind.life and we will delete it promptly.

2. What we collect

About you (parents, guardians, and coaches):

• Email address and a securely hashed password
• Display name and profile photo (optional)
• Home address and work address (optional; used for drive-time estimates and itinerary planning)
• Weekly availability: which days you work, whether you can drive, and any notes you add
• Ratings you give to other members of your team community (anonymous to the recipient)
• Which version of the Terms of Service you accepted and when

About children, entered by you:

• First name
• Birth year (used to age-tailor wellness tips; not a full date of birth)
• Photo (optional)
• Team memberships and event attendance
• Game and activity stats, recorded by coaches
• Developmental feedback (coach ratings across four categories, plus an AI-generated summary)

3. Who sees what

Access is enforced at the database level (row-level security), not just in the app.

• Guardians see only their own family’s data.
• Co-guardians in the same family see the same data as the primary guardian.
• Coaches see roster data (first names only, no birth year or address) and stats for their own team. They cannot see another team’s data.
• Trust scores are visible to guardians and coaches who share an active team, but who rated whom is never revealed.
• PathWind staff can access the database for support and maintenance. We do not browse user data without a reason.

4. AI features — what is sent and to whom

PathWind uses the Anthropic Claude API for four features. All calls go through our servers; the API key is never in the app. Here is exactly what is sent for each feature:

• Schedule import (text or image): pasted schedule text, or a photo or PDF of a paper schedule. Images may contain child names if they are printed on the schedule. Also sent: the season year, team sport, and default venue.
• Daily itinerary: your display name, home address, work address, drive availability, working days, any notes you added, and per event: a child’s first name, event title, location, and times.
• Pre-game wellness tips: the sport, a child’s first name, and their approximate age band (derived from birth year).
• Development summary: a child’s first name, the sport, and the four category scores (1–5) a coach entered. No free text from the coach.

Under Anthropic's API terms, inputs are not used to train their models. Results are returned immediately and stored only in your account. You can review Anthropic’s privacy policy.

5. Other third-party services

• Supabase — database, authentication, and file storage for all app data. Supabase privacy policy.
• OpenWeatherMap — receives event coordinates or venue name for weather conditions; also geocodes home and work addresses to coordinates when you save your profile.
• Windy.com — event coordinates are embedded in a radar map URL loaded inside the app. No API key or account is used.
• Google Places — receives your location and a search keyword to find nearby food spots on game day. No child information is sent.
• Vercel — hosts the PathWind web app and receives standard HTTP request data (IP address, browser type). Vercel privacy policy.

We do not sell your data. We do not use your data for advertising.

6. Deletion

Delete a child’s data: Profile screen → child’s name → Delete. You will be asked to type the child’s name to confirm. All stats, attendance, photos, feedback, and ratings are removed immediately and permanently.

Delete your account: Profile screen → Delete account. If you are the only guardian in your family, your children’s data is fully deleted first. If a co-guardian remains, your profile is removed and the family continues under their account.

To request deletion by email: hello@pathwind.life.

7. Retention

Data is kept for as long as your account is active. When you delete a child or delete your account, the relevant data is deleted immediately — there is no grace period or backup retention. Coach-entered stats that reference a deleted child are deleted along with the child record.

8. Security

All connections use HTTPS. Passwords are hashed by Supabase Auth and never stored in plain text. Database access is restricted by row-level security policies so that each user can read only their own data and data explicitly shared with them. During beta we are continuously reviewing our security posture. If you find a vulnerability, please report it to hello@pathwind.life.

9. Changes to this policy

If we make material changes we will notify you in the app and update the date at the top of this page. Continued use after a material change means you accept the updated policy.