Privacy Policy
CommitPath is built for high-school athletes and the families helping them get recruited. We take the privacy of those families seriously — especially because most of our users are minors. This page explains, in plain language, what data we collect, why we collect it, and what we will and will not do with it.
If anything here is unclear, email Judah Musick at judah@edgemobiletechnologies.com and we'll explain it directly.
Who We Are
CommitPath is operated by Edge Mobile Technologies LLC (Texas, USA). When this policy says "we," "us," or "CommitPath," that's who we mean.
Mailing address: Edge Mobile Technologies LLC, [address to be added]
What We Collect
We only collect what we need to run the app. Here's everything:
Account information
- Your name and email address
- A password (handled by our authentication provider, Clerk — we never see or store your password ourselves)
- If you sign in with Google, we receive your name, email, and Google account ID from Google
Athlete profile
This is the information you enter to build your recruiting profile:
- Sport, position, graduation year, height, weight
- High school, club team, jersey number
- Stats and accomplishments
- A short personal statement
- Optional: GPA and test scores
- Optional: family income bracket (used only to estimate financial aid in Fit Reports — never shared)
Media you upload
- Highlight videos, photos, and any other files you choose to upload to your profile. These are stored in Supabase Storage in the United States.
Recruiting activity
- Schools you save (and whether you tagged them reach, target, safety, etc.)
- Fit Reports you generate
- Outreach emails you draft or send to coaches
- Whether those emails were opened or clicked (standard email tracking pixels and link wrapping)
- Conversations you have with SAGE, our AI mentor
Payment information
We don't see your card numbers. Ever.
- iOS subscriptions are handled by Apple through the App Store using StoreKit. Apple sends us a receipt confirming you have an active subscription — nothing else.
- Web subscriptions are handled by Stripe through Clerk Billing. Stripe sees your card. We see a subscription status and the last four digits of your card.
Device and technical information
- When you submit feedback through TestFlight or in the app, we receive your device model, OS version, and a crash log or screenshot if you attached one.
- Standard server logs (IP address, timestamp, what page or API endpoint you hit). These are kept for 30 days for security and debugging.
What We Do With It
We use your information to:
- Run your account and keep you signed in
- Generate Fit Reports for the schools you're considering
- Draft personalized outreach emails to coaches
- Power SAGE's responses with context that's actually about you
- Keep your subscription active
- Email you about your account (receipts, important changes, support replies)
- Fix bugs and improve the app
That's the whole list. We don't do anything else with your data.
What We Do Not Do
We want this to be unambiguous:
- We do not sell your data. Not to colleges, not to recruiting services, not to advertisers, not to anyone.
- We do not share your profile with coaches or schools without your action. The only way a coach sees your information is if you share your public profile link or you send them an outreach email. We never push your data to a school.
- We do not show you ads, and we do not share your data with ad networks.
- We do not use your data to train AI models. When we send information to Anthropic's Claude API to generate Fit Reports, outreach drafts, or SAGE responses, Anthropic does not retrain its models on that content (this is part of their API terms). We don't train any models of our own on your content either.
- We do not read your email. CommitPath sends outreach emails on your behalf through Resend, but we do not have access to your personal inbox.
Who Else Touches Your Data
We use a small number of trusted third-party services to run the app. Each one only gets the data it needs to do its job:
| Service | What it does | What we send it |
|---|---|---|
| Supabase (US) | Stores your account, profile, saved schools, and uploaded media | All profile and recruiting data |
| Clerk (US) | Handles sign-up, sign-in, and passwords | Name, email, password, OAuth tokens |
| Anthropic (US) | Powers Fit Reports, outreach drafts, and SAGE chat (Claude API) | Your first name, sport, position, grad year, and the school you're asking about — nothing more |
| Firecrawl (US) | Scrapes publicly available coach contact info from school athletics websites | No user data; this only fetches public web pages |
| Resend (US) | Sends transactional and outreach emails on your behalf | Your email address and the email you wrote |
| Stripe (US) | Processes web subscription payments | Name, email, card details (we never see the card) |
| Apple (US) | Processes iOS subscription payments via StoreKit | Whatever Apple already knows from your Apple ID |
All of these processors are US-based and are bound by their own privacy policies and data processing terms.
Children and Parental Consent
CommitPath is designed for high-school athletes, who are typically 13–18 years old.
- Under 13: CommitPath is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, please email us and we will delete it.
- Ages 13–17: Athletes in this age range must have a parent or guardian's consent to use CommitPath. When a family signs up, the parent provides that consent during account creation and is treated as the responsible party for the account. Parents can request access to, correction of, or deletion of their athlete's data at any time by emailing us.
Your Rights
You can, at any time:
- See your data. Most of it is visible in the app. For anything that isn't, email us and we'll send you a copy.
- Correct your data. Edit your profile directly in the app.
- Delete your data. You can delete your account from the app's settings, or email us and we'll do it for you. Account deletion removes your profile, uploaded media, saved schools, Fit Reports, SAGE history, and outreach history. We may retain a minimal record (email + deletion date) for legal and fraud-prevention purposes.
- Export your data. Email us and we'll send you a copy of everything we have on you, in a portable format, within 30 days.
- Cancel your subscription. iOS subscribers manage this in Apple ID settings. Web subscribers manage this in the app's billing settings.
If you live in California, the EU, or another jurisdiction with additional privacy rights, those rights apply to you too — email us and we'll honor them.
How Long We Keep Things
- Active account data: as long as your account exists.
- Deleted account data: removed within 30 days of deletion.
- Server logs: 30 days.
- Email delivery records (for sender reputation and bounce handling): up to 12 months.
- Payment records: as long as required by tax law (typically 7 years).
Security
We use TLS encryption for everything in transit, row-level security in our database (so one user's data can't be queried by another), and short-lived authentication tokens. Passwords are hashed by Clerk and never reach our servers.
No system is perfectly secure, and we won't pretend otherwise. If we ever experience a security incident that affects your data, we'll tell you promptly and explain what happened.
Changes to This Policy
If we change this policy in a way that meaningfully affects what we collect or what we do with it, we'll email account holders before the change takes effect. Smaller wording fixes will be posted here with an updated "Last updated" date below.
Contact
Questions, requests, or concerns:
Judah Musick
Edge Mobile Technologies LLC
judah@edgemobiletechnologies.com
Last updated: May 17, 2026