Privacy notice
Last updated October 21, 2026. Pilot version: this notice is being reviewed and may change. We'll say so here when it does.
- XO Loop is for adult coaches and team staff. Coaches add their own team's players, schedule and notes.
- We don't sell your information, show ads, or use tracking or analytics.
- We never ask for a child's birthdate, photo, address or contact details. Please enter players by first name and last initial.
- To see, download or delete your information, email depasquale0521@gmail.com.
Who we are
XO Loop is a coaching app for youth sports teams, in a free pilot in the United States. Questions about this notice or your information go to depasquale0521@gmail.com.
What we collect
| Your account | Your email address and password (stored scrambled, never readable), your first and last name, and the name your team sees (like "Coach K"). |
|---|---|
| Your teams | Team names, age groups and formats. Players' names as you type them, shirt numbers and positions. Coaches you add and their roles. |
| Games and practices | Dates, times and places (field addresses), opponents, scores, goals and assists, lineups and minutes played, your game and practice notes, your notes on each player, and reviews the AI writes for you. |
| Drills | Drills you build, ratings and comments you give drills. |
| Your device | If you turn on game-start alerts, a code your browser gives us to send them. Your browser also keeps you signed in and remembers your screen settings. |
| Feedback you send | If you use Account › Send feedback: your message, which screen you were on, the app version, and the team you were looking at, linked to your account so we can reply by email. It's free text. The app replaces player names it recognizes, web links (which can carry sign-in codes), email addresses and phone numbers before it's sent, but it can miss nicknames and short names, so please leave names and personal details out. |
| Error reports | When something in the app fails while you're signed in: a short code for the problem (like E-7K3F), which screen you were on, the app version and the team you were looking at, linked to your account, plus fixed technical details we choose: the kind of error and where in our code, or which of our requests failed and how. Never what you typed, player names, error messages or web addresses. |
| Usage counts | How many AI requests you make, for which team and roughly what each cost, so we can keep the AI within its daily and monthly limits and within your plan's allowance. These records hold no content. If you delete your account, the totals stay with whoever pays for the plan (your club or your own plan), without your name or account. |
| Saved AI results | The answer to each AI request is kept for up to 24 hours, so a dropped connection never has to run it again. Only you can get it back, and only while you still have access to that team. It's deleted when you leave the team, the team or a player is removed, or your account is deleted, and it's never copied into backups. |
Children's information
XO Loop is meant for adults, not for children to use. Coaches enter information about the young players on their own team, and parents can view a team when a coach invites them.
- Please enter players by first name and last initial, or initials. Full names aren't needed.
- We never ask for a child's birthdate, photo, home address, phone number or email. Players' ages are only the team's age group.
- Your notes are free text. Please keep them about the game and avoid health, family or other sensitive details.
- A parent or guardian can ask us to remove their child's information. See "Deleting your information" below.
Why we use it
Only to run XO Loop for you: to show your teams to the people you invite, plan practices, record games, send the alerts you turn on, sign you in, and keep the service working and safe. We don't use your information for advertising, and we don't sell or rent it.
Who else receives it
We use a few services to run XO Loop. Each one handles information to provide its service to us. Its own terms say what else it may do, such as keeping records for security or because the law requires it.
| Supabase | Stores everything above and handles sign-in. Servers in the United States. |
|---|---|
| Vercel | Hosts the website and the parts of XO Loop that run on a server. |
| Anthropic (Claude AI) | Only when you use an AI feature, such as the practice assistant, reading your game notes, a game review, Fix it or Build a drill. It receives what that feature needs: your request or notes, your team's name, age group, format and formation, and for notes and reviews the roster (first names, with a last initial only when two players share one), the score, and minutes played. Before anything is sent, players' and coaches' last names from your rosters become an initial, and emails and phone numbers are removed. One exception: a last name that is also a teammate's first name (for example "Taylor", when you have both Jordan Taylor and Taylor Smith) is shortened only when the full name is typed, not when it appears on its own. Other names you type, such as a sibling or a nickname, may still be sent, so please use first names. Build a drill opened on its own, outside a team, removes only emails and phone numbers. Anthropic says it deletes these within 30 days, but may keep them for up to 2 years if its safety systems flag them, or longer if the law requires. Deleting something in XO Loop doesn't delete what was already sent to Anthropic. |
| Google (Gmail) | Sends our sign-in, password and invitation emails, so it sees the email address they go to. |
| Push alert services (Google, Apple, Mozilla, Microsoft) | Deliver game-start alerts to people who turned them on. The alert is encrypted and says only "Game has started" with the two team names. |
| Your browser's voice typing | If you use the microphone in Build a drill, your browser turns speech into text. In Chrome, Google does this. Game notes use your phone keyboard's own voice typing. |
| LocationIQ and Photon | Look up field addresses while you type one. They receive what you type and your home field's rough area. |
| Open-Meteo | Gives the weather for upcoming events. It receives the field's location, rounded. |
| jsDelivr and cdnjs | Deliver some of the code our pages run. Like any website, they see your device's internet address, but no XO Loop information. Our fonts come from our own site. |
We'd share information otherwise only if the law requires it.
Who on your team can see what
Only people a coach invites can see a team. What each person sees depends on their role: coaches and team managers see the team's details, and parents see a simpler view. Full names of coaches are visible only to the person and the team's managers.
How long we keep it
We keep your information while your account and teams are active. When you delete a game or a practice in the app, it's removed from our live database straight away. A team's owner or head coach can also remove a player and their history: their notes and ratings are deleted, their goals, saves and minutes are kept only as "Removed player" so team totals stay right, and their name becomes "a player" in game and practice notes. The app then lists anything that might still mean them, such as a nickname or a first name a teammate shares, so the coach can check it. Taking a player off the roster only (the other choice) keeps their name in past games. Deleting a team removes it from our live database straight away, with its games, practices, stats, notes, invitations and who had access to it. Information already sent to an outside service, such as the AI, follows that service's rules (see above). Our hosting provider keeps its own technical logs for a short time, as its terms set. Feedback you send is kept 90 days and error reports 30 days, then deleted; Nathan reads them, and you can ask us to delete them sooner. We keep an encrypted backup of the database every night for 35 days, so we can recover from a mistake or an outage. Deleted information drops out of the backups within those 35 days. So that a backup can never bring deleted information back, we keep a short record of what was deleted, by id only (no names, notes or emails), for 40 days, and re-apply it to any restored backup before the app is used again.
Deleting or downloading your information
- Coaches: you can delete games and practices in the app, and owners and head coaches can remove a player and their history (see above). Deleting a team removes everything about it. You can delete your account in the app (Account › Delete my account): it removes your sign-in, your names and settings, your place on every team, and any team where you're the only person. Teams run by other coaches stay, without you. Owners and head coaches can download a copy of a team's information (Team › Settings › Download this team's data), or email depasquale0521@gmail.com from the email address you sign in with. We'll answer within 30 days, usually within a week.
- Parents and guardians: you don't need an account. Email depasquale0521@gmail.com with your child's team and first name. We'll check that you're the child's parent or guardian, then work with the team's coach to remove your child's information. If the coach doesn't act, we'll do it ourselves.
Keeping it safe
Information is sent over encrypted connections, each team can be seen only by people invited to it (the database enforces this), and passwords are never stored in readable form. No system is perfect: if something goes wrong that affects your information, we'll tell you.
Changes
If we change this notice, we'll update the date at the top. For bigger changes, we'll tell coaches in the app or by email first.