Privacy Policy

1. Who we are

Game1, Inc. ("Game1", "Company", "we", "us") is a Delaware corporation with a registered office at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. We provide standardized testing and predictive analytics for youth soccer academies and the families of their players (the "Services").

This Privacy Policy explains what personal data we collect, how we use it, and your rights. It applies to game1.ai, our parent-facing web app, our iOS app, and any other Service that links to it.

For privacy questions: privacy@game1.ai.

2. Who this policy applies to

The Services involve three categories of individuals:

• Authorized Users — adults (parents, legal guardians, coaches, scouts, academy staff) authorized to use the Services on behalf of themselves or, where applicable, on behalf of an academy.
• Player Data Subjects — youth soccer players whose performance data is uploaded to the Services by an academy or by a parent.
• Visitors — individuals browsing game1.ai without an account.

Throughout this policy, "you" means an Authorized User unless we say otherwise.

3. The data we collect

3.1 Information you provide

When you register or use the Services, you provide:

• contact details (name, email, role);
• account credentials (your password is stored as a hash);
• information about a player (name, date of birth, sex, club or academy, height, weight, test-session results);
• communications you send us (support, feedback).

3.2 Information your academy provides

If your child plays for, or you work with, an academy that uses the Services (a "Customer"), the Customer may transmit information about a player ("Customer Data") to Game1 in connection with the Services, including the player's name, date of birth, sex, height, weight, academy affiliation, and standardized test results. The Customer is solely responsible for obtaining all rights, authorizations, and consents necessary for that transmission, including, where applicable, valid parent or legal-guardian consent for minors.

3.3 Information we collect automatically

Standard log data (IP address, device, OS, app version, timestamps), product-usage events through our analytics provider (Section 8), and crash and performance diagnostics. We do not use cookies or similar technologies to track you across other websites or apps owned by other companies.

3.4 Camera and on-device measurement

The Game1 testing app may use your device's camera to measure physical performance — for example, sprint timing, jump height, and movement technique. All camera processing happens on your device. Images and video frames are not transmitted to Game1 or stored on the device after measurement, and they are not used to train our prediction model. Only derived numerical metrics (such as a sprint time or jump height) are transmitted. Your device will request permission before the first use; you can withdraw permission at any time in your device settings.

3.5 Information we do not collect

We are not a medical service. We do not provide medical advice and do not intentionally collect diagnoses, injury history, treatment information, or medical records. Some information we collect — such as height, weight, sex, sprint time, jump height, and movement metrics — relates to physical attributes and athletic development, and we use it only for athletic performance testing, player development, analytics, and the other purposes described in §4. We also calculate an estimate of a player's physical maturation (sometimes called "biological age") as a statistical estimate derived from standard measurements such as height, weight, age, and sex. This estimate is used for age- and development-appropriate athletic benchmarking only. It is not a medical or clinical assessment: we do not use medical imaging or skeletal/bone-age scans, we do not assess pubertal or sexual-development stage, and we do not use it to diagnose, screen for, or predict any health condition. The Services are not intended for the upload of sensitive personal information (such as health or medical records); if you provide such information to us, you do so at your own risk and you are solely responsible for any consents required for the disclosure. We do not buy data from data brokers, and we do not collect location data beyond what is inferred from your IP address.

4. How we use data

We use Customer Data, Authorized User data, Player Data Subject data, information you provide, information provided by a Customer, data derived from use of the Services, and public soccer-career information for the following purposes, in each case subject to applicable law and any applicable Customer agreement:

• to provide, operate, administer, personalize, and support the Services;
• to create, display, and maintain player profiles, test histories, benchmarks, scores, reports, recommendations, rankings, comparisons, and other insights;
• to make player profiles, results, reports, metrics, and insights available to the relevant Customer and its Authorized Users according to product features, account settings, and Customer instructions;
• to make identifiable player data available to other users, academies, coaches, scouts, clubs, recruiting partners, event operators, or program partners outside the relevant Customer's organization only with the explicit consent of the player's parent or legal guardian (or of the player, where the player is an adult) — except for disclosures to our service providers under §7, disclosures of aggregated or de-identified data, and disclosures required by law or to establish, exercise, or defend legal claims;
• to communicate with you about the Services, accounts, support, security, product updates, events, programs, offers, and other opportunities, with opt-outs or consent where required by law;
• to analyze, measure, debug, secure, monitor, protect, and improve the Services and our systems;
• to develop, test, train, validate, improve, and operate prediction models, analytics, benchmarks, and other current or future Game1 products and services;
• to conduct research, statistical analysis, product analytics, benchmarking, market analysis, and business planning;
• to prevent fraud, abuse, misuse, security incidents, and violations of our terms or applicable law;
• to comply with legal obligations and to establish, exercise, or defend legal claims; and
• to create, use, disclose, publish, commercialize, and retain aggregated, de-identified, or otherwise non-identifiable information for research, benchmarking, product development, commercial, security, operational, and other lawful business purposes.

We also collect publicly available soccer-career information (such as club rosters, college rosters, professional contracts, league profiles, match records, recruiting profiles, and similar public information) for purposes including model validation, research, benchmarking, profile enrichment, and service improvement.

For Customer Data uploaded by an academy, we make identifiable player data available outside that Customer's organization only with the explicit consent of the player's parent or legal guardian (or of the player, where the player is an adult). Product features, account settings, Customer instructions, and Customer-authorized configuration govern how identifiable player data is shared within the Customer's organization and with its Authorized Users, and govern the sharing of aggregated or de-identified data; they do not by themselves authorize disclosure of identifiable player data to recipients outside the Customer's organization. This does not restrict disclosures to our service providers acting on our behalf under §7, or disclosures required by law or to establish, exercise, or defend legal claims. If a Customer agreement is more restrictive than this Privacy Policy, the Customer agreement controls for that Customer's data.

If we offer optional Consumer Add-Ons directly to parents, legal guardians, or players ("Consumer Add-Ons"), we will process the relevant account, payment, usage, and service data under the separate terms presented to you for those Consumer Add-Ons, in addition to this Privacy Policy.

We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising. Making your profile, results, or insights available to a college, university, or recruiting program at your direction, where any such recipient pays only for access to our platform and recruiting tools and not for access to your personal data, is not a "sale" or "share" of personal data. We may disclose personal data to service providers, Customers, Authorized Users, other users, partners, or other third parties as described in this policy, through the Services, under a Customer agreement, at your direction, with your consent, or as otherwise permitted by law.

5. How our predictions work, and how they should be used

The Services produce statistical estimates of future player performance based on standardized test data and basic profile information. The following limits apply.

Decision-support only; no guarantees. Outputs, scores, benchmarks, recommendations, analyses, and other results generated by the Services are provided for informational and decision-support purposes only. The Services do not provide medical advice and are not intended to diagnose, treat, cure, or prevent any disease or injury. Game1 does not guarantee any specific outcomes, including without limitation athletic performance improvements, team selection, roster placement, college recruiting outcomes, scholarships, professional opportunities, or any other results.

Customer (or Authorized User) is solely responsible for all decisions. The Customer, or the Authorized User in a B2C context, is solely responsible for all decisions and actions taken based on use of the Services. Decisions about a player's place in a program, scholarship, or career path are taken by the Customer, the Authorized User, the player, and the player's family — not by Game1, and not automatically by an algorithm.

Intended use. The Services are intended as a player-development and performance-insight tool for human-reviewed coaching support. They are not intended as a sole basis for any decision concerning admission to an educational institution, employment eligibility, scholarship eligibility, or access to essential services. Where a third party uses our outputs outside that intended use, that party is responsible for that use and any resulting decision.

Training data; objection. We use data we lawfully hold, including Customer Data, parent-uploaded data, derived metrics, usage data, public soccer-career information, and outputs generated by the Services, to train, test, validate, operate, and improve our prediction models, analytics, benchmarks, and related services. If you object to your or your child's identifiable data being used to improve models, write to privacy@game1.ai and we will exclude the relevant identifiable records from future training where required by law or where we otherwise agree to do so. This does not require us to delete aggregated, de-identified, or non-identifiable data, or to unwind models already trained before we processed your request, unless applicable law requires otherwise.

6. Children's privacy (COPPA)

The Services are built around testing children and teenagers, including children under the age of 13. We take children's privacy seriously and handle children's personal information in accordance with the U.S. Children's Online Privacy Protection Act ("COPPA") and applicable state children's-privacy laws.

Operator and notice. Game1, Inc. is the operator responsible for personal information collected about players through the Services, and can be reached at privacy@game1.ai or Game1, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. The information we collect from or about a child is limited to what is described in §3 (such as name, date of birth, sex, club or academy, height, weight, and standardized test results and the metrics derived from them), used for the purposes described in §4. We do not condition a child's participation on the disclosure of more information than is reasonably necessary.

Player data about minors reaches the Services through two channels, each with its own consent model:

• Academy uploads (consent gatekeeper). Where an academy (a Customer) uploads data about a minor, the academy represents and warrants that it has obtained verifiable parental consent and all other rights, authorizations, and consents required by COPPA and other applicable law before transmitting the data to Game1. Game1 relies on that representation and does not contact parents directly to obtain or verify consent for academy uploads.
• Direct uploads via the parent-facing app (verifiable parental consent). Where a parent or legal guardian provides data about their own child through our parent-facing app, the account holder must be an adult parent or legal guardian. We obtain verifiable parental consent before collecting personal information about the child: the account holder confirms their identity and guardianship and consents to our collection and use of the child's information as described in this Privacy Policy.

Parental rights. At any time, a parent or legal guardian may, by writing to privacy@game1.ai, review the personal information we hold about their child, request that we correct or delete it, and refuse to permit our further collection or use of it. Where the relevant data was uploaded by an academy, we will coordinate the request with that academy. If we learn that we have collected personal information from a child under 13 without the required parental consent, we will delete it promptly.

If you believe we hold data about a child without lawful authority, contact privacy@game1.ai.

7. Service providers and partners

We use third-party service providers and business partners to operate, support, improve, market, and distribute the Services (including hosting, authentication, database infrastructure, product analytics, app distribution, payment processing, customer support, communications, event or program operations, security, and professional services). Service providers that process personal data on our behalf are bound by written agreements requiring them to use data only for the purposes we have instructed and to protect it appropriately. A current list of service providers is available on request at privacy@game1.ai.

We may also work with Customers, academies, coaches, scouts, clubs, recruiting partners, event operators, program partners, and similar sports ecosystem partners. We make identifiable player data available to such partners outside the relevant Customer's organization only with the explicit consent of the player's parent or legal guardian (or of the player, where the player is an adult); product features, settings, instructions, and configuration govern within-organization access and the sharing of aggregated or de-identified data. Where we make a player's personal data available to a college, university, recruiting program, or similar recipient, that recipient is bound by written terms that limit use of the data to legitimate recruiting purposes and prohibit reselling it, using it for advertising, or exporting it in bulk.

Where payments are processed (for example, in connection with Consumer Add-Ons), payment data is handled by third-party payment processors. Game1 does not store full payment card details.

Our policy is that AI-assisted developer tools (such as OpenAI, Anthropic, and the Cursor IDE) must not be used with live Customer Data.

8. Cookies and analytics

We use essential cookies (sign-in, basic preferences), which are always on. We use product-analytics, measurement, and similar technologies, including PostHog Inc. on PostHog's EU instance, to understand how the Services are used, improve the product, measure campaigns, and support our business. Where the law requires consent for analytics or similar technologies, we will ask for it. We do not use third-party advertising cookies to track you across other companies' websites or apps for cross-context behavioral advertising. Visitors who are required to consent to analytics cookies will see a banner on first visit; you can change your choice at any time via the "Cookie settings" link in the footer.

9. Where we process data

Game1 is based in the United States. We and our service providers may store and process personal information in the United States and in other countries, including Switzerland and the European Union, where our hosting and analytics providers operate. Where personal information is processed across borders, our service providers are bound by written contracts requiring them to protect the information appropriately.

10. Retention

We retain data for as long as necessary to provide the Services and for related business purposes. Where the relevant Customer agreement specifies a retention period (for example, retention of Customer Data following termination of the Customer agreement), that period applies. We may retain aggregated or de-identified data indefinitely for development, research, security, and operational purposes. We retain backup copies for up to 30 days after they are generated, after which they are overwritten in the normal course.

You may request earlier deletion at any time by writing to privacy@game1.ai. Some data may be retained for a limited additional period where required by law or to defend legal claims.

11. Security

Our technical and organizational measures include encryption at rest and in transit, multi-factor authentication for personnel with access to production systems, role-based access control on the principle of least privilege, audit logging, regular backups, and vendor due diligence. If we discover a security breach affecting your personal information, we will notify affected individuals and the appropriate regulators or authorities within the time frames required by applicable law.

NO METHOD OF ELECTRONIC STORAGE OR TRANSMISSION IS PERFECTLY SECURE. THE SERVICES ARE PROVIDED ON AN AS-IS BASIS. EXCEPT AS EXPRESSLY SET FORTH IN A WRITTEN AGREEMENT WITH GAME1, GAME1 DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

12. Physical activity; assumption of risk

The Services may include exercise recommendations, physical training protocols, performance testing workflows, drills, or other physical activity guidance ("Physical Activity Content"). The following apply.

• Not professional advice. Physical Activity Content is generated for informational and decision-support purposes only and does not constitute the advice of a licensed physician, physical therapist, certified athletic trainer, or other qualified healthcare or fitness professional. Game1 makes no representation that Physical Activity Content is appropriate for any particular individual.
• Assumption of risk. Participation in any physical activity carries inherent risk of bodily injury, including serious injury or death. By using the Services or permitting your child to use the Services, you acknowledge these inherent risks and agree that Game1 shall not be liable for any bodily injury, illness, harm, or death arising out of or related to participation in any physical activity recommended, suggested, or facilitated by the Services.
• Customer responsibility. Customers are responsible for (i) ensuring participants receive appropriate medical clearance before engaging in any physical training program, (ii) supervising all physical activities conducted in connection with the Services, and (iii) modifying or disregarding any Physical Activity Content that the Customer or its staff determines to be inappropriate for a specific individual.

13. Your privacy rights

Depending on your state of residence, you may have rights over your personal information, including the right to know and access the personal information we hold about you, the right to correct inaccurate information, the right to delete your information, the right to opt out of the sale or sharing of personal information and of targeted advertising, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. Parents and legal guardians may exercise these rights on behalf of a minor.

To exercise any of these rights, write to privacy@game1.ai with the email associated with your account, the right you wish to exercise, and any context that helps us locate the right records. We will respond within 45 days, which we may extend by an additional 45 days where reasonably necessary, with notice to you. We may need to verify your identity before acting, and will not ask for more information than is necessary to do so. An authorized agent may submit a request on your behalf with proof of authorization. If we deny your request, you may appeal by replying to our response; if your appeal is denied, you may also contact your state attorney general. Where the data in question was uploaded by a Customer, please contact your Customer in the first instance.

13.1 California and other U.S. state disclosures

This section provides additional disclosures for residents of California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act) and of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah), to the extent those laws apply to you.

Categories of personal information we collect. In the preceding 12 months, we have collected the following categories: identifiers (such as name, email, and account identifiers); customer-records information (such as a player's name, date of birth, sex, club or academy, height, weight, and test results); internet or network activity (log and product-usage data); audio or visual information (camera-based measurement, which is processed on your device so that only derived numerical metrics are transmitted to us); and inferences (such as performance predictions, benchmarks, and the physical-maturation estimate described in §3.5). The sources of this information, the purposes for which we use it, the recipients to whom we disclose it, and our retention criteria are described in §3, §4, §7, and §10.

Sensitive personal information. Information about a known child, and a player's precise physical measurements, may be treated as sensitive personal information under some state laws. We use and disclose it only to provide the Services and for the other purposes permitted by law, and not to infer characteristics about you. You may direct us to limit the use of your sensitive personal information by writing to privacy@game1.ai.

No sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioral or targeted advertising, as those terms are defined under applicable state laws. We have not sold or shared the personal information of any consumer, including any consumer under 16 years of age, in the preceding 12 months.

Disclosure for a business purpose. We disclose personal information to service providers and contractors who process it on our behalf under written contract, and — only with the explicit consent of the player's parent or legal guardian (or of an adult player) — to academies, coaches, scouts, clubs, recruiting partners, and similar recipients, as described in §4 and §7.

California "Shine the Light." We do not disclose personal information to third parties for those third parties' own direct-marketing purposes.

Non-discrimination. We will not discriminate against you for exercising any of these rights.

14. Privacy contact

For all privacy and data-protection enquiries: privacy@game1.ai.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If a change materially affects your rights, we will notify you by email (where you have an account) or by an in-app or in-site notice. Non-material changes take effect when posted, and we will update the "Last updated" date at the top of this page. Past versions can be requested at privacy@game1.ai.

16. How to contact us

This Privacy Policy is published by Game1, Inc.