Privacy Policy

Last updated: March 12, 2026

Endzone Engine ("we," "us," or "our") operates the Endzone Engine application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password. If you sign in through a third-party provider (Google or Apple), we receive your name and email from that provider.
• Profile Information: Any additional information you add to your profile, such as your team name, role, or position.
• Content: Playbooks, plays, formations, practice plans, wristband designs, and any other content you create within the Service.
• Payment Information: If you subscribe to a paid plan, payment is processed by Stripe (web) or through Apple App Store / Google Play Store (mobile). We do not store your full credit card number. We receive a customer identifier and subscription status from these providers.
• Communications: If you contact us for support, we collect the information you provide in your message.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, and app version.
• Usage Data: Features used, actions taken, timestamps, and general interaction patterns.
• Network Information: Online/offline status for sync functionality. We do not collect IP addresses for tracking purposes.

1.3 Information from Third Parties

• Authentication Providers: If you sign in via Google or Apple, we receive your name and email address as authorized by you.
• Payment Providers: Stripe, Apple, and Google provide us with subscription status and transaction identifiers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process subscriptions and payments
• Sync your data across devices when you are online
• Enable team collaboration features (sharing playbooks, practice plans, and assignments with team members you invite)
• Send transactional emails (account verification, password resets, subscription confirmations)
• Respond to support requests
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Team Members: If you use team features, your name, role, and shared content (playbooks, practice plans) are visible to members of your team.
• Service Providers: We use third-party services to operate the Service, including:
  • Supabase — database hosting and authentication
  • Stripe — payment processing (web)
  • Apple / Google — in-app purchase processing (mobile)
  • Anthropic (Claude) — AI play generation and PDF import (see Section 3.1 below for details)
• Legal Requirements: We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Endzone Engine, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.1 AI Features and Anthropic

When you use AI-powered features (such as play generation or PDF import), the images and text you submit are sent to Anthropic's Claude API for processing. Specifically, this may include:

• Images of play diagrams or PDF pages you upload for import
• Text prompts describing plays you want to generate

This data is processed by Anthropic in accordance with their privacy policy and API terms of service. Anthropic does not use API inputs to train their models. No personal account information (name, email, payment details) is sent to Anthropic. By using AI features, you consent to this data being transmitted to Anthropic for processing.

3.2 Third-Party Data Protection

We require that all third-party service providers we work with maintain data protection practices that are consistent with this Privacy Policy and applicable data protection laws. Our agreements with these providers include obligations to safeguard your data and limit its use to the purposes for which it was shared.

4. Data Storage and Security

Your data is stored locally on your device using an offline-first architecture and synced to cloud servers hosted by Supabase when you are online. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Row-level security policies ensuring users can only access their own data
• Secure authentication with token-based sessions
• Soft-delete architecture to prevent accidental data loss

No method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your account information and content for as long as your account is active. Deleted content is soft-deleted (marked as deleted but retained for sync consistency) and permanently purged within 90 days. If you delete your account, we will delete your personal information within 30 days, except as required by law.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate information.
• Deletion: Request that we delete your personal information.
• Portability: Request your data in a portable format.
• Opt-Out: Unsubscribe from marketing emails at any time (transactional emails related to your account are not affected).

To exercise any of these rights, contact us at the email address listed below.

7. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@endzoneengine.com

Address: 25807 Westheimer Pkwy Ste 430, Katy, TX 77494