Privacy Policy

Who we are

Mindset FC is a coach-led mental performance program for high school soccer: a mobile app where athletes complete a short daily practice, and a dashboard where coaches run the program for their team.

Mindset FC is operated by Enjoy Life Education Inc ("Enjoy Life Education", "we", "us"), which is the responsible party and data controller for the information described below. This policy explains what we collect, why, and what we will never do with it.

What we collect

Account information: your email address and the display name you choose.

Team information: roster details your coach enters to run the program, such as your name and team membership.

Journal reflections: the private entries athletes write in the app. These are encrypted at rest — see "Journal privacy" below.

Engagement data: which daily activities were completed and when — streaks, points, and participation.

Device information: a push notification token if you enable notifications, and basic product analytics (screens used, features tapped) so we can improve the app.

Demo requests: if a coach fills out the demo form on our website, we receive the name, email, and program they submit.

Journal privacy

Reflections are the heart of the program, and they are private. No coach, parent, teammate, or school administrator can read what an athlete writes. Coaches see only whether an athlete engaged — never the content.

Journal entries are encrypted at rest in our database. Encryption keys are held separately from the data, so entries are unreadable in the database itself, not just hidden by permissions.

What we never do

We show no advertising. We do not sell personal data, share it with data brokers, or build behavioral profiles. We collect only what the program needs to run.

How we use information

To run the program: deliver the daily curriculum, track engagement for you and your coach, and send the notifications you enable.

To communicate: sign-in links and program emails are transactional — we do not send marketing email to athletes.

To improve the product: aggregate usage analytics tell us which features work. Analytics never include journal content.

Age requirements

Mindset FC is designed for high-school athletes. Every athlete confirms they are 13 or older when they sign up; we do not knowingly allow accounts for children under 13. If you believe a child under 13 has created an account, contact us and we will remove it.

Service providers

We use a small number of infrastructure providers to run the service: Supabase (database and authentication), Vercel (web hosting), Resend (transactional email), Expo (mobile app services and push notifications), and PostHog (product analytics). Each processes data only to provide their service to us.

Data retention and deletion

We keep your data while your account is active. Athletes can delete their account and everything in it directly in the app (Profile → Delete account) — deletion is immediate and permanent, including journal entries.

Anyone can also request deletion at mindsetfc.app/delete-account or by contacting the address below — including coaches and program administrators, whose accounts are managed by their program rather than deleted in the app. We confirm by email and complete requests within 30 days.

After a deletion we keep a minimal record that it happened (a hashed email address and a timestamp — never any content) for 7 years, and team-level statistics that no longer identify you. Some records (such as billing with a school program) may be retained where required.

Security

All traffic is encrypted in transit. Journal entries are additionally encrypted at rest. Database access is controlled with row-level security so users and teams can only reach their own data.

Changes to this policy

If we make material changes, we will update the effective date above and note the change in the app. Continued use after a change means the updated policy applies.

Contact

Privacy questions, access requests, and account deletion: privacy@riverrootstudios.com.