What data Priority collects
We collect information you enter or upload: Athlete profile and intake data (sport, stage, position, goals, physical and performance measurables, academics where offered, links to film or documents, and optional free-text). Performance-oriented fields you choose to provide (for example times, test results, or stats) are treated as self-reported unless a separate verification path says otherwise. Recovery and wellness check-in data (such as soreness, fatigue, sleep, readiness, subjective workload, and related notes). Weekly routine, training load, and rest patterns when captured through intake or check-ins. NIL, endorsement, or economic-interest fields only when you voluntarily submit them as part of your narrative—these are informational profile signals, not verified legal or financial facts. Coach, club, school, or team relationship metadata (invitations, roster-style membership, role codes). Generated outputs derived from your inputs (reports, summaries, benchmark comparisons). Authentication identifiers from our auth provider when you sign in (such as user id and email). Billing data processed by our payment provider for purchases or unlocks—we do not store full payment card numbers on Priority servers. Technical and operational data (IP address, device/browser signals, timestamps, cookies and local identifiers described below, product analytics events, and logs for security and reliability).
Visitor analytics, UTM data, cookies, and local storage
We assign or read an opaque visitor or device identifier to recognize repeat browser sessions, enforce fair-use limits, associate visitor-scoped reports with the same device before sign-in, and reduce fraud. This may live in a first-party cookie (including httpOnly cookies where used), browser local storage, or both—it is a random text id, not your name or email. We capture optional UTM and campaign parameters when you arrive via tagged links. We record session heartbeats (last-seen style pings) separately from named product analytics events (such as page views, intake progress, report generation, exports, share-link opens, unlocks, and payments) so session presence does not duplicate every funnel step as raw telemetry. We derive coarse geography (country or region) from standard hosting headers—not GPS. Internal admin views avoid displaying raw IP addresses as an everyday identifier. Restricting cookies or storage may limit features.
Athlete profiles, performance fields, recovery, routine, and reports
Profiles combine self-reported intake, measurable fields you supply, recovery history, optional weekly routine or workload summaries, and generated report outputs. **Benchmark comparisons** use configured reference datasets and methodology context—they may be partial by position, level, or geography and remain informational. Recovery and wellness entries reflect what you submit and may influence summaries shown to you and authorized coaches; they are **not** clinical records on our systems.
Parents, guardians, and minors
Priority is intended for users at least 13 years old. We do not knowingly permit registration for children under 13 or knowingly collect personal information from children under 13 for account purposes. If you believe we have collected such information in error, contact us below—we will take appropriate steps including deletion where required. Users between 13 and the age of majority may require parent or guardian authorization or oversight for accounts, purchases, or certain sharing, depending on applicable law and your organization’s deployment. Parents or guardians should review coach connections, organizations, exports, and share links tied to a minor’s profile.
Coach and team relationship data
When you accept invitations or join workspaces, we process relationship and role metadata so coaches, schools, clubs, or leagues can collaborate according to permissions you and the organization configure. Coaches see athlete-scoped content permitted by those roles—not unrestricted internet-wide visibility. Organizations are responsible for lawful consent and policy alignment for their environment.
PDF exports and share links
You may export reports to PDF or share tokenized or time-limited links where enabled. Recipients with a valid link may view content until expiry or revocation. Distribution beyond Priority is your responsibility. We may log technical metadata when links are opened for security and analytics.
How we use information
We use data to operate and personalize the workspace experience, generate informational reports and visualizations, power recovery and routine summaries you initiate, measure product and campaign performance, secure accounts, troubleshoot, communicate transactional notices, comply with law, and enforce our terms. We do not sell your personal information for unrelated third-party advertising.
How data is stored and accessed
Information for this deployment resides on secure cloud infrastructure and databases. Access uses authenticated user ids, organization and role checks, visitor identifiers when applicable, and scoped keys for legacy or device-bound flows. Role-based controls determine what athletes, coaches, admins, and invitees can view.
Security safeguards
We implement administrative, technical, and organizational measures appropriate to the nature of the service (such as encryption in transit for browser sessions where supported by configuration, access controls, monitoring, and vendor diligence). No online service is perfectly secure—you should use strong passwords, protect devices, and treat share links and PDFs like sensitive materials.
Service providers (who may process data on our behalf)
We rely on vendors for authentication (for example Kinde), payments (for example Stripe), hosting and analytics infrastructure (for example Vercel), notifications when enabled, and operational tooling. They process personal information only as subcontractors according to their agreements with us and their own notices. We do not sell your personal information.
Deletion, access requests, and your choices
Depending on role and deployment, you may access, correct, or delete certain records (reports, profile fields, recovery entries) in-product. You may disconnect from organizations where supported. To exercise privacy rights—including access or deletion requests under applicable law—email us below. We may verify identity before honoring sensitive requests. Some information may be retained as required by law, fraud prevention, backups within limited periods, or unresolved disputes.
Methodology, benchmarks, and external reference material
Reports may incorporate deterministic scoring, completeness checks, benchmark datasets, evidence items you attach, verification labels where available, and operator-curated sport knowledge or methodology references used for context (including externally sourced benchmark metadata where configured). Those layers improve transparency but do not guarantee recruiting outcomes or completeness of third-party facts—external sources remain subject to their own accuracy and licensing. For a fuller plain-language description of how outputs are assembled and limited, see the Methodology page at /methodology on this site (including methodology and legal disclaimers there).
Who we share information with
We share data with service providers that power the product (hosting, auth, payments, analytics infrastructure). We share athlete-scoped content with coaches, organizations, and teammates when you join workspaces or accept invitations that expose it. You initiate sharing when you send PDFs or links outside Priority. We disclose information when required by law, to enforce terms, or to protect security and users. We do not sell personal information to data brokers for unrelated advertising.
No guarantees
Reports, benchmarks, routine summaries, and NIL-related narrative fields are informational and depend on self-reported inputs and available reference data. They are not medical, legal, financial, recruiting, or eligibility guarantees.
Contact
For privacy questions, data deletion or access requests, or legal inquiries about this deployment, contact [email protected].
Retention, transfers, and regional notice
Retention varies by account status, workspace policies, backups, security logs, and legal obligations. Information may be processed in the United States or other countries where we or vendors operate; cross-border transfers may occur as described here and in vendor documentation.
