Privacy Policy

YOU.PRJCT+ (“YOU.PRJCT+,” “we,” “our,” or “us”) is operated by The Schertzinger Company. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to our mobile application (the “App”), the youprjct.com website, and the parent portal accessed by guardians of minor athletes.

YOU.PRJCT+ is a personal-excellence platform built primarily for athletes aged 13–18. Because our users include minors, we treat privacy and safety as primary product obligations — not as compliance afterthoughts. We do not sell user data. We do not run third-party advertising. We do not profile users for behavioral marketing.

By using YOU.PRJCT+, you agree to this Policy. If you do not agree, do not use the App. Your use is also governed by our Terms of Service and the End User License Agreement (EULA) presented inside the App on first launch.

• Service delivery. Authenticate you, sync your data across devices, and surface your work to the right people (yourself, friends, teammates, and where you’ve opted into public discoverability).
• Personalization. Compute streaks, levels, leaderboards, and pulse metrics from your activity. Train AI coach (Harry) prompts on the conversation in the immediate session — never on your underlying data outside that session.
• Safety & the accountability cascade. Coaches, parents, and helpers within your accountability cascade can see effort-level signals (training hours, win streak, days-won) so they can encourage you toward your goals. They cannot see your private reflections, personal goals, or content you mark private. This is a feature, not a side effect — the cascade is what makes the platform safer than open social media for young athletes.
• Moderation. Detect and respond to reports of objectionable content or abuse, including removing content and restricting accounts.
• Communications. Deliver transactional emails (sign-in confirmations, receipts, password resets, parent-portal verification) and the push notifications you’ve opted into (friend requests, comments, salutes, day-won digests).
• Subscriptions. Process App-Store subscriptions via RevenueCat and parent-portal payments via Stripe.
• Improvement. Understand aggregate usage to ship better features. Aggregate analytics never identify you individually.
• Legal. Comply with applicable law and respond to lawful requests.

We do not sell your data. We do not run third-party ads. We do not use your data to train external AI models.

We use the following processors. Each is bound to use your data only to perform the service for us:

Harry is the in-App AI coach. When you message Harry, the following happens:

• Your prompt is sent to Anthropic (the AI provider) along with a brief system instruction describing Harry’s role and any relevant context you’ve volunteered earlier in the conversation.
• The response is returned to your device and stored on our servers tied to your account so the conversation can continue across sessions.
• Anthropic processes the conversation under their Privacy Policy and Commercial Terms. Under those terms, your prompts and responses are not used to train Anthropic’s models.
• YOU.PRJCT+ does not use your Harry conversations to train any external AI model. We do not sell or share Harry conversations with advertisers or data brokers.
• Harry is a coaching aid, not a licensed professional. Harry is not a substitute for medical, psychological, or other professional advice. If you tell Harry something that suggests you or someone else is in danger, our moderation team may review the conversation under our safety procedures.

• All traffic between the App and our servers is encrypted in transit (TLS).
• Data at rest is encrypted on Supabase and on our cloud-storage providers.
• Row Level Security policies in our database restrict access to your own data and the data of people in your accountability cascade.
• Authentication is delegated to Apple Sign In or one-time-link email.
• Access by YOU.PRJCT+ staff is limited, logged, and used only for support, abuse investigation, or fixing bugs.

No system is perfectly secure. If we ever detect a breach that affects your data, we will notify you in accordance with applicable law.

• Active accounts. We retain your data for as long as your account is active.
• Deleted accounts. When you delete your account, we delete or anonymize your personal data within 30 days. Some aggregated, non-identifying records may persist (e.g., counts used for analytics).
• Reports. Records of reports submitted via the Report flow may be retained for up to 12 months for safety review, even after the reporting account is deleted.
• Legal obligations. Some records (payment receipts, tax records) are retained as long as legally required.

You can exercise the following rights from the App, the parent portal, or by emailing us:

• Access: View your data inside the App.
• Correction: Edit your profile, social handles, and account fields directly.
• Deletion: Delete your account from Settings; we will purge your personal data within 30 days.
• Portability: Email us to request a structured copy of your data.
• Block & report: Block any user from their profile; report any user or content for safety review.
• Visibility controls: Opt out of the Community Leaderboard from Edit Profile at any time.
• Notifications: Toggle push notifications in Settings or in your device OS.
• Withdraw consent: If you previously consented to a specific use, withdraw it by contacting us. Withdrawal does not affect prior lawful processing.

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to:

• Know what personal information we collect about you and why.
• Request a copy of the personal information we hold about you.
• Request deletion of your personal information.
• Opt out of any “sale” or “sharing” of your personal information — though we do not sell or share personal information for cross-context behavioral advertising under any definition.
• Not be discriminated against for exercising these rights.

To exercise these rights, email reports@youprjct.com. We may need to verify your identity before responding.

If you live in the European Economic Area or the United Kingdom, you have the rights granted by the General Data Protection Regulation (GDPR) and UK GDPR, including the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. The legal bases on which we process your data are:

• Contract: To deliver the App you signed up for.
• Legitimate interests: To run, secure, and improve the App.
• Consent: For optional features like push notifications, parental consent for minors, and any future research participation.
• Legal obligation: To comply with law.

You can file a complaint with your local data-protection authority. To exercise your GDPR rights, email reports@youprjct.com.

YOU.PRJCT+ is operated from the United States. If you access the App from outside the United States, your information may be transferred to, processed, and stored in the United States and other countries where our service providers operate. We rely on standard contractual clauses and other lawful mechanisms for transfers out of the EEA and the UK.

We may update this Privacy Policy from time to time. When we make material changes we will notify you inside the App and update the “Last updated” date above. If a change requires re-acceptance under applicable law, we will ask you to re-accept before you continue using the App.

For questions about this Privacy Policy, to exercise your rights, or to report a concern:

Email: reports@youprjct.com

Company: The Schertzinger Company