Privacy Policy

How we collect, use, and protect your information.

Who we are

Hekate Sports ("Hekate," "we," "us") is a team performance management platform for ultimate frisbee programs, operated by Lantern's Light. We can be reached at support@hekatesports.com.

Information we collect

Account information

• Name, email, and role (coach, captain, player, parent, director)
• Authentication credentials managed by Amazon Cognito
• Team and program affiliations you choose to join

Content you create

• Events, attendance responses, and scheduling metadata
• Goals, practice plans, and thread messages
• Film, clips, annotations, and scouting entries
• Uploaded files (playbooks, resources) stored in Amazon S3

Minors (players under 18)

For users whose role is "player," we apply stricter data protections:

• No profile images are collected or displayed
• Personal location and phone number are not exposed beyond name and email
• Parent linkage enables visibility into coach-player communications for SafeSport compliance

How we use your information

• To operate the platform — deliver events, messages, film, and reports to the right people
• To enforce role-based access (coaches see coach views; parents see linked-player views)
• To communicate with you about your account and service updates
• To improve the product through aggregate, non-identifying usage patterns

We do not sell your personal information. We do not show third-party advertising.

Who can see what

Within a team, access is governed by role:

• Coaches & directors see full rosters, attendance, goals, and film for their team(s)
• Captains can manage attendance polls and resources but have limited roster visibility
• Players see their own goals, threads, and team-wide content marked visible to them
• Parents see only information linked to their player(s)

Data retention

We retain your information for as long as your account is active. You can request deletion at any time via our Data Deletion page. When an account is deleted, personal data is removed within 30 days; team content you contributed (e.g., scouting reports) may persist in anonymized form.

Security

Hekate runs on AWS (Lambda, DynamoDB, S3, Cognito). All traffic is encrypted in transit (TLS). Authentication tokens are managed by Amazon Cognito. Uploaded files are served via time-limited presigned URLs. We do not store payment card data.

Your rights

• Access — email us to receive a copy of your data
• Correction — edit your profile in-app, or contact us
• Deletion — submit a request via our Data Deletion page
• Withdraw consent — leave your team or delete your account at any time

Children & SafeSport

Parent accounts are designed for visibility into minors' communications. Coaches cannot initiate 1:1 private communication with players without parent visibility. Directors are auto-added as coaches on every team in their program for oversight.

Third-party services

• Amazon Web Services (hosting, storage, authentication)
• YouTube (optional: film ingestion from YouTube links)

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to active account holders.

Contact

Questions, requests, or complaints? Email support@hekatesports.com.