Privacy Policy

Shotcaller Applications LLC · Version 0.4 · United States only Last Updated: October 6, 2026 | Effective Date: October 6, 2026

This Privacy Policy is incorporated into the Shotcaller Terms of Service and End User License Agreement ("Terms"). Capitalized terms not defined here have the meaning given in the Terms.

---

1. WHO WE ARE AND WHAT THIS POLICY COVERS

1.1 Shotcaller Applications LLC ("Shotcaller," "we," "us," "our"), a Florida limited liability company located at 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA, provides software for football coaches and their teams to design plays and formations, manage rosters and schedules, communicate with team staff and parents, and track play outcomes (the "Service").

1.2 This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and what choices and rights you have.

1.3 This policy covers the Shotcaller web application, mobile applications, and websites, and related communications we send you. It does not cover third-party services you reach through the Service, your league's or club's own systems, or the practices of other Users.

1.4 Where the Service is offered. The Service is offered only in the United States. Our infrastructure is located in the United States. We do not offer the Service elsewhere and do not knowingly collect information from individuals outside the United States.

1.5 Our role. For information about your own Account — your name, email, billing, and how you use the Service — we act as a business / controller. For content and Roster Data that a Coach or Team Administrator puts into a Team workspace, we act as a service provider / processor on behalf of that Team, club, league, or school, and process it only on their instructions and as described here.

---

2. THE SHORT VERSION

This is a product where adults exchange information about children, so the summary matters:

• We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not run ads.
• We do not profile users, do not build advertising audiences, and do not use engagement-maximizing design.
• Players under 18 do not have accounts. They appear as roster entries created by a Coach, and their Guardians see their assignments through the Guardian's own Account. We run no behavioral analytics on Players under 18. A Player who is 18 or older may hold an Account like any other adult User.
• No one under 13 may hold an Account. Accounts require you to be 18 or older.
• We do not collect biometric information and do not perform facial recognition on photos or video.
• We run no product analytics, set no non-essential cookies, and send no text messages.
• We do not use your playbooks, plays, or scheme data to train machine learning models.
• Who sees what, in one line: your Team's staff see the roster; families on a Team see names, numbers, positions, each Player's primary guardian by name, the coaches' contact details, and game and season stats. A family's email and phone are never shown to other families.
• Families cannot message each other. Direct messages are only between a Team's staff and a guardian or adult Player. No one can message a Player under 18.
• Team Chat is not end-to-end encrypted. Don't put medical or financial detail in it.

---

3. INFORMATION YOU PROVIDE TO US

3.1 Account information

We do not use passwords. Sign-in is by emailed one-time code, emailed magic link, Google Sign-In, or Sign in with Apple. We never receive your Google or Apple password. If you use Apple's Hide My Email, we receive the relay address Apple creates for you.

3.2 Team, roster, and coaching content

Roster Data about a Minor is entered by an adult Coach or Guardian, never by the Minor. See Section 6.

3.3 Payment information

Paid plans are purchased on the web and processed by Stripe. We never receive, store, or have access to your card number. From Stripe we receive a customer identifier, subscription tier and status, renewal and cancellation dates, and the card's last four digits and brand.

We do not currently sell subscriptions through the Apple App Store or Google Play. If we add in-app purchase, this section will be updated before that feature ships.

3.4 Support, reports, and correspondence

When you contact us or report content, we keep your message, contact details, attachments, the reported content, and the associated account records.

---

4. INFORMATION WE COLLECT AUTOMATICALLY

4.1 Device and technical information

Device and browser type, operating system, app version, language, time zone, and IP address, recorded in server logs. We use these for security, abuse prevention, and troubleshooting.

4.2 Product usage information

We do not run product analytics. We have no analytics vendor and record no feature-usage events about you. What we know about how the Service is used comes from the content you create and from the server logs in Section 4.1. If we add product analytics in future we will describe it here first — and we will never record the behavior of Players under 18, who have no Accounts.

4.3 What we do not collect

• No precise geolocation. We never request GPS access. Venues and fields are text you type.
• No advertising identifiers. We do not collect the IDFA or Android Advertising ID, do not present the App Tracking Transparency prompt, and do not track you across other companies' apps or sites.
• No third-party analytics or advertising SDKs.
• No text messages. We do not send SMS and do not ask for a mobile number in order to text you. If we ever offer a text-message program it will be opt-in, you will be able to stop it by replying STOP, and it will be described here before it begins.
• No session recording, screen replay, or keystroke capture.
• No access to your contacts, photo library, calendar, or microphone beyond the specific file you choose to upload.
• No biometric identifiers. No face detection, face matching, or automated identification of any person from uploaded media.
• No health data collected as such. See Section 12.6 for how we treat availability information.

4.4 Cookies and similar technologies

Our web application uses strictly necessary cookies for authentication and session management. The sign-in cookie is shared between shotcaller.football and app.shotcaller.football so that one sign-in works on both. We use no third-party advertising cookies, no analytics cookies, no tracking pixels, and no cross-site trackers. Because we set no non-essential cookies we show no cookie banner; if that ever changes, this Section and a consent control will change together. Mobile applications use secure local device storage for the same purposes.

---

5. INFORMATION FROM THIRD PARTIES

---

6. CHILDREN AND MINORS

This is the section parents will read. It is written to be read.

6.1 Accounts are for adults. You must be 18 or older to create an Account. No one under 13 may create or hold an Account under any circumstance, and we do not knowingly collect personal information online from a child under 13 as an account holder.

6.2 How a Minor Player's information gets into Shotcaller. An adult — the Player's Coach, or the Player's parent or guardian — enters it as a roster entry. A Player under 18 does not register, does not create a profile, and does not submit anything to us directly. What a Coach typically enters is a name, a jersey number, a position, an availability status, and an age band. A Guardian can edit their own child's name and nickname, and invite or revoke co-guardians, on each Team's roster entry separately; changes on one Team do not carry to another. Jersey number, position, availability and age band are set by the Coach.

6.3 Players under 18 are not in Team Chat and cannot be messaged. Chat participants are adult Coaches, adult staff, adult Guardians, adult Players who hold an Account, and — where the Team belongs to a league or club — adult organization administrators, who are always shown in the visible member list. Direct messages are available only between a Team's staff and an individual Guardian or adult Player: a family may message one or all of the Team's coaches, and a coach may message an individual Guardian or adult Player. Families cannot start conversations with other families, and no one can message a Player under 18. There is no silent or hidden monitoring of Team Chat or direct messages.

6.4 How a Minor sees their assignments. A Player under 18 has no Account and is never issued a link, code, or login. A Guardian who holds an Account can see, through their own sign-in, the playbooks the Coach has published to the Team and any matchups the Coach has shared with that Player's family.

6.5 Direct contact with a Player under 13. Where the Service offers to contact a Player directly, it is restricted for Players identified as under 13, and contact is routed to a Guardian instead.

6.6 What we never do with a Minor's information. No advertising of any kind. No sale or sharing. No profiles. No behavioral analytics on Players. No disclosure except to the Team members who need it, the service providers in Section 7 that host it, and as required by law.

6.7 Rights of parents and guardians. Contact Support@shotcaller.football to review, correct, delete, obtain a copy of, or refuse further collection of your child's information. We verify the guardian relationship, typically by confirming with the Team Administrator, and respond within 30 days. Deleting a Player's roster entry removes that Player from the Team's use of the Service.

6.8 Child safety escalation. If we become aware of apparent child sexual abuse material or apparent exploitation of a Minor, we preserve the content and account records, report to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement as required by law, and terminate the responsible Account immediately and permanently. Records relating to such a report are retained as long as the law requires and are excluded from deletion requests.

6.9 If you believe a child under 13 holds an Account, or that a child's information reached us in error, email Support@shotcaller.football and we will investigate and delete it.

6.10 Game statistics about Players. When a Coach records a game, the Service may store per-Player statistics (for example, completions or flag pulls). These game- and season-level statistics, including those about Minors, are visible to the Team's staff and to the Team's families. Play-by-play records — individual snaps, play calls, and the defensive looks faced — are visible only to the Team's staff. We do not use statistics to rank, profile, or advertise to anyone, and do not show them outside the Team.

6.11 What other families can see about you. On a Team's roster, other families see each Player's name, number, and position, and the name of each Player's primary guardian. Your email and phone are never shown to other families. Coaches' names, roles, emails, and (if added) phone numbers are visible to their Team's families. Availability, injury notes, and other families' guardian lists are never shown to families.

6.12 Profile photos. Adults may add a profile photo, which members of their Teams see beside their name on the roster, in Team Chat, and on announcements. Profile photos are for account holders only; Players under 18 do not have one. We do not run face detection or recognition on profile photos. Remove yours at any time in Your Account.

---

7. HOW WE SHARE INFORMATION

7.1 We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act and equivalent state laws. We have not done so in the preceding twelve months, including with respect to anyone we know to be under 16.

7.2 With other Users, as the product is designed. What each person on a Team can see:

Organization plans are not currently offered, so no organization administrator has access to any Team today. If they are offered in future, an organization's administrators would see rosters and schedules — but never the Team's playbooks, formations, plays, or scheme data, which stay private to the Team unless a Coach explicitly shares them upward, and any administrator in a chat channel would always be visible in the member list.

7.3 With service providers. This is our complete list. Each is bound by contract to process personal information only on our instructions.

During our invitation-only pilot, coaches who choose to send us feedback through the pilot feedback form do so through Google Forms, which receives what they type.

We send no Team Chat message content, no Roster Data, and no coaching content to any analytics or advertising provider, because we use none. We send nothing to a push-notification provider, because we send no push notifications.

7.4 With your Team, club, league, or school. Not applicable today — organization plans are not offered. If they are offered in future, a purchasing organization's administrators would be able to access information associated with its Teams and to direct us to export or delete it, and this policy will be updated before any such plan is sold.

7.5 For legal and safety reasons. We may preserve and disclose information where we believe in good faith it is necessary to comply with law or legal process, enforce the Terms, address fraud or security issues, or protect the rights, property, or safety of any person — particularly a Minor. Where the law permits and it would not defeat an investigation, we will notify you of a legal demand for your information.

7.6 In a business transaction. In a merger, acquisition, financing, or sale of assets, personal information may transfer. We will notify you before your information becomes subject to a materially different privacy policy, and any acquirer remains bound by the commitments in Section 2 as to information about Minors.

7.7 Aggregated and de-identified information. We may create and use information that cannot reasonably identify you, any Team, or any Player. We will maintain it in de-identified form and will not attempt to re-identify it.

---

8. HOW WE USE INFORMATION

We do not use personal information for advertising, for automated decision-making producing legal or similarly significant effects, or to train generally available machine learning models.

---

9. YOUR CHOICES

---

10. HOW LONG WE KEEP INFORMATION

10.2 Deleted content disappears from the Service promptly. It may persist in encrypted backups until those cycle out, and removed chat messages are kept for moderation review as described above.

10.3 Account deletion. You can delete your Account yourself from Your Account. Before you confirm, the Service names every Team you own, because deleting your Account archives those Teams: they become read-only for the remaining staff and hidden from families, and nothing in them is lost. We then end your sign-in immediately and delete or de-identify your personal information within 30 days, except (a) information we must keep by law, (b) billing records, (c) moderation and safety records, (d) your consent records, and (e) content you contributed to a Team, which remains available to that Team. If you want a copy of your information, email Support@shotcaller.football before deleting.

---

11. HOW WE PROTECT INFORMATION

11.1 Safeguards include: encryption in transit and at rest; row-level security enabled on every database table so that direct database access is denied by default and all access flows through our authorization layer; per-request authorization checks binding every record to the Team that owns it; least-privilege staff access; tokenized, rotatable magic links rather than durable public URLs; webhook signature verification on all payment events; and vendor review before onboarding any subprocessor.

11.2 No system is perfectly secure. Keep your devices secure and your sign-in email account protected — because sign-in is passwordless, control of your email address is control of your Account.

11.3 Breach notification. We will notify affected Users and applicable regulators as and when required by applicable state and federal law.

---

12. YOUR PRIVACY RIGHTS

12.1 Which law applies

Depending on your state, you may have rights under a comprehensive privacy law, including in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. We extend the rights below to every US resident, whether or not your state requires it.

12.2 Your rights

• Know / access — what we collect, from where, why, who receives it, and a copy
• Correct — fix inaccurate information
• Delete — erase it, subject to Section 10.3
• Portability — a copy in a portable, machine-readable format
• Opt out of sale, sharing, targeted advertising, and profiling — we do none of these
• Limit use of sensitive personal information — see Section 12.6
• Appeal — challenge a denial
• Non-discrimination — no penalty for exercising a right

12.3 How to exercise a right

Email Support@shotcaller.football from the address on your Account, or use your account settings.

• We verify your identity, normally by confirming control of your Account email.
• We respond within 45 days, extendable once by 45 days with notice.
• An authorized agent may act for you with written authorization.
• If we deny a request we explain why, and you may appeal within 30 days. We answer appeals within 45 days and, on denial, tell you how to contact your state Attorney General.
• Requests are free.

12.4 Opt-out preference signals

Because we do not sell personal information, do not share it for cross-context behavioral advertising, and do not conduct targeted advertising, there is no sale or sharing for an opt-out preference signal such as the Global Privacy Control (GPC) to stop. We treat such a signal as confirmation of a position we already hold. If we ever begin an activity a signal could opt you out of, we will honor the signal before we begin.

12.5 Minors under state law

Several states require opt-in consent before processing a known Minor's data for targeted advertising, sale, or profiling. We conduct none of those activities for any user, so no such consent is sought. See Section 6.

12.6 Sensitive information

• We do not collect government ID numbers, precise geolocation, racial or ethnic origin, religious beliefs, sexual orientation, immigration status, union membership, genetic data, or biometric identifiers.
• Availability and injury information. A Coach or Guardian may set a Player's availability, and Users may mention health matters in chat. Where that constitutes "consumer health data" under the Washington My Health My Data Act, Nevada SB 370, or Connecticut law: we collect it only because a User entered it, use it solely to operate the Service, never sell it, never use it for advertising, and honor withdrawal of consent and deletion requests at Support@shotcaller.football. We ask Users not to enter medical detail — use non-medical availability labels instead. Our separate Consumer Health Data Privacy Notice is at https://shotcaller.football/health-data.

12.7 California

Notice at collection. In the preceding 12 months we collected:

We have sold or shared no category of personal information in the preceding 12 months. Retention is per Section 10.

Shine the Light (Civ. Code §1798.83): we disclose nothing to third parties for their own direct marketing.

Minors' content removal (Bus. & Prof. Code §22581): a registered California User under 18 may request removal of content they posted at Support@shotcaller.football.

Age-Appropriate Design Code. We have designed the Service consistent with its principles to the extent applicable: privacy-protective defaults, no profiling of Minors, no dark patterns, no use of Minors' data beyond providing the Service.

12.8 Florida

Shotcaller is a Florida company. Florida residents may exercise the rights in Section 12.2 under the Florida Digital Bill of Rights where it applies to us. We operate no algorithmically curated feed, no infinite scroll, no autoplay, and no engagement streaks, and do not consider the Service a social media platform within the meaning of Florida's online protections for minors.

12.9 Biometric and genetic information

We do not collect, capture, purchase, receive, or store biometric identifiers or biometric information — face geometry, voiceprints, fingerprints, retina or iris scans — and perform no facial recognition or automated identification from uploaded photographs or video. The Illinois Biometric Information Privacy Act, Texas CUBI, and Washington's biometric statute therefore do not apply to our processing. We collect no genetic information. If this changes we will publish notice, obtain written consent, and publish a retention and destruction schedule before any such processing begins.

12.10 Other states

• Nevada: you may submit a verified opt-out of the sale of covered information to Support@shotcaller.football. We sell none.
• Texas: we do not sell personal or sensitive data, do not process it for targeted advertising, and do not profile.
• Colorado, Connecticut, Oregon, Montana, Delaware, New Jersey, Minnesota, Maryland: the rights and process in Sections 12.2–12.3 apply, including appeal.
• Maryland additionally restricts sale of sensitive data and processing of Minors' data for targeted advertising; we do neither.

---

13. THIRD-PARTY LINKS

The Service may link to third-party sites. We are not responsible for their privacy practices.

---

14. CHANGES TO THIS POLICY

14.1 If we make a material change — a new category of information, a new purpose, a new subprocessor with access to chat content, or a change to the commitments in Section 2 — we will give at least 30 days' notice by email and in-app before it takes effect.

14.2 We will update the "Last Updated" date and keep prior versions at https://shotcaller.football/privacy/archive.

14.3 We will not apply a materially different policy to information already collected without your consent.

---

15. HOW TO CONTACT US

Shotcaller Applications LLC 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA

If you are not satisfied with our response you may contact your state Attorney General.

---

APPENDIX A — PLAIN-LANGUAGE SUMMARY FOR PARENTS

Reproduce this on its own for distribution to parents.

If your child is under 18, they do not have a Shotcaller account. Coaches add players to a roster. What's stored is typically a name, a jersey number, a position, and whether the player is available this week.

Your child is not in the team chat and can't be messaged. Only adults — coaches, team staff, parents, players 18 and older, and league administrators — can see or post in team chat. Parents can message the coaches, and coaches can message a parent, but parents can't message each other through Shotcaller. Any league administrator who joins is shown in the member list; there is no hidden monitoring.

Your child doesn't get a login. If you have an account as a guardian, you see the playbooks the coach has published and anything the coach has shared with your family through your own sign-in.

What other parents see: your child's name, number and position, your name as their guardian, and the team's game stats (including your child's). Your email and phone are never shown to other parents. Your child's availability is only ever seen by you and the coaches.

We don't advertise to anyone, we don't sell anyone's information, and we don't track your child's behavior.

What you can do: email Support@shotcaller.football to see what we hold about your child, correct it, delete it, or tell us to stop collecting it. We'll verify you're the parent or guardian and respond within 30 days.

Photos and video: coaches and parents must have consent before uploading images of any child, and inappropriate content is prohibited. If you see something that shouldn't be there, report it in the app or email Safety@shotcaller.football — we review reports within 24 hours.

---

Version 0.4 — United States only