Privacy Policy

Rizora.io LLC

Rizora is a closed, verified platform where athletes build a development record and, when they choose, put it to work in recruiting. Most of the athletes on Rizora are minors, so we built the platform around a few commitments that shape everything in this policy:

• No public profiles. Recruiting profiles can only be seen by verified accounts, and only to the extent the athlete or their parent or guardian allows. There are no public profile links.
• The athlete and their family hold the keys. Programs, coaches, and trainers see an athlete's information only through a grant the athlete or guardian gives, and grants can be revoked at any time.
• We don't sell personal information, we don't use it for targeted advertising, and paying for Rizora never changes a score, an evaluation, or where someone appears in search.

This Privacy Policy explains what we collect, how we use it, who can see it, and the choices you have. It applies to rizora.io, the Rizora mobile apps for iOS and Android, and any other service that links to this policy (together, the "Services").

If you are a parent or guardian, please also read our Children's Privacy Notice, which explains how we handle information about athletes under 13 and the rights you have over your child's information. Our Data Retention Policy explains how long we keep each kind of information.

1. Who we are

Rizora.io LLC ("Rizora," "we," "us") operates the Services and is responsible for your personal information under this policy.

Rizora.io LLC 30 N Gould St, Ste R Sheridan, WY 82801 United States

Privacy and legal questions: legal@rizora.io Security issues: security@rizora.io Everything else: team@rizora.io

2. Who uses Rizora

Rizora has separate account types, and each one is its own environment with its own permissions. No account type can see into another.

• Athletes (age 13 and older), including high school, youth, and college athletes.
• Parents and guardians of athletes who are minors.
• High school staff (coaches, athletic directors, and staff) and youth program staff (club and league coaches and directors).
• College program staff (college coaches and recruiting staff, which we call "programs").
• Trainers (private trainers who are identity-verified before they can work with athletes).
• Evaluators (credentialed people who score athletes against a structured rubric).
• Rizora staff, who verify accounts, review reports, and keep the platform safe.

We do not allow anyone under 13 to create an account. See section 9.

"Minor" on Rizora means an athlete who is under the age of majority in their home state. In most states that is 18; in a few it is higher (for example, 19 in Alabama and Nebraska and 21 in Mississippi).

3. Information we collect

3.1 Information you give us

Account information. Your name, email address, and the account type you choose. We use passwordless sign-in: you log in with a one-time code sent to your email, so we never store a password. Depending on your account type, we may also collect:

• Athletes: date of birth (collected only for athlete accounts, to apply age rules), home state, school or team, graduation year, sport, positions, goals, and current training. College athletes also add and verify a college email address, which we re-verify periodically.
• Parents and guardians: your relationship to the athlete, confirmation that you are 18 or older, your consent choices, notification preferences, and who approves and pays for purchases.
• High school and college staff: your school or program, role, the teams and positions you work with, and a school or work email address. We verify staff using information such as a school's public staff directory, and a program's head coach or athletic director approves additional staff.
• Youth program staff: your program or club, city and state, role, and teams.
• Trainers: your listing details, city and state, specialties, certifications, background-check status, and the testing equipment you use for verified measurements.

Athlete development information. Workouts and programs assigned to or built by the athlete, workout completions, effort ratings (RPE) and notes, streaks, practice and game schedules, and goals.

Measurables. Performance numbers such as 40-yard dash, vertical jump, or shuttle times. Every measurable is labeled with how it was captured: by the app (phone scan or camera timing), by a verified trainer with listed equipment, by a high school coach on the sideline, or self-reported. Measurables are kept as a history; a new number is added rather than overwriting an old one.

Photos, video, and clips. Highlight clips and capture video you upload. We strip location (GPS) and other embedded metadata from media when it is uploaded.

Injury reports. If an athlete reports an injury, that report is the most restricted information on Rizora. See section 5.4.

Nutrition information (paid Develop plans), such as meal plans, preferences, and imported school menus.

Program information created by staff, such as rosters, depth charts, practice plans, and playbooks.

Messages you send through the Services, and reports you submit to us.

Assistant conversations. Messages you send to the Rizora AI assistant and its replies, plus any action it proposes and whether you confirmed it. See section 6.

Payment information. When you buy something, our payment processor, Stripe, collects your card or bank details directly. We receive limited information such as the last four digits, card brand, billing ZIP code, and payment status. We never see or store full card numbers.

Support and verification records. Information you send when you contact us, and the evidence we review when we verify a staff member, trainer, or college athlete.

3.2 Information others give us about you

• A parent or guardian may give us information about their athlete, including when they invite a child under 13 (see the Children's Privacy Notice).
• An athlete who is a minor gives us their parent's or guardian's email address or phone number so we can invite them to consent.
• A coach may add an athlete to a roster, record sideline measurables for rostered athletes, or invite an athlete or parent to connect.
• A trainer may submit a measurement taken during a session. It stays pending until the athlete confirms it.
• Evaluators submit structured evaluations that feed an athlete's Readiness Score.

3.3 Information collected automatically

When you use the Services we collect technical information needed to run and protect them: IP address, device and browser type, operating system, app version, push-notification token (if you allow notifications), pages and screens viewed, actions taken, crash logs, and timestamps. See our Cookie Policy for details on cookies and similar technologies.

We do not collect precise location from your device.

3.4 Information from public sources

We maintain a directory of college programs and conferences built from public, openly licensed sources. This directory describes institutions, not athletes.

4. How we use information

We use personal information to:

• Provide the Services: create and secure accounts, route you to the right workspace, run workouts, rosters, practice plans, playbooks, measurables, clips, matching, messaging, and purchases.
• Apply age and consent rules: determine whether an athlete is a minor, keep sensitive features locked until a guardian consents, and send guardian approvals and copies.
• Verify people: confirm staff, trainers, evaluators, and college athletes before they get access, and re-verify them periodically.
• Keep data trustworthy: label measurables by capture method, flag numbers far outside an athlete's history, and review trainers whose numbers repeatedly stand out.
• Power recruiting features the athlete chooses: show a profile to the programs the athlete or guardian has shared with, compute match scores and the Readiness Score, and anonymize clips for college athletes who buy that service.
• Send notifications: workout reminders, guardian alerts, consent requests, purchase approvals, new matches, and PR alerts, according to your notification settings and quiet hours.
• Run the AI assistant (section 6).
• Process payments, refunds, and renewal reminders.
• Provide support and respond to requests.
• Protect people and the platform: detect fraud, abuse, impersonation, and attempts to identify anonymous athletes; enforce our Terms of Service and Community Guidelines; and keep an audit log of sensitive actions.
• Improve the Services using usage information, preferably in aggregated or de-identified form.
• Comply with law and respond to lawful requests.

What we don't do. We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not show third-party ads. We do not use payment or subscription status to change any score, evaluation, match, or search ranking; those systems cannot read payment records. We do not use athlete names, images, or likenesses in Rizora's marketing without separate, explicit permission (and guardian permission for minors).

5. Who can see your information

5.1 Inside Rizora: what other users see

Rizora is closed. What another user can see depends on their account type and on grants you control.

Parents and guardians of a minor athlete can see the athlete's assigned workout programs, notifications sent to the athlete, actions the AI assistant took or proposed for the athlete, consent settings, and purchases. Parents do not see the athlete's assistant chat transcripts, unless a conversation is flagged for violating our Community Guidelines. When an athlete reaches the age of majority in their home state, the athlete controls their own account. A parent or guardian who already has access keeps that access until the adult athlete revokes it.

High school and youth program staff see a rostered athlete's information only when the athlete's guardian (or the athlete, if an adult) has granted roster visibility to that program. Revoking it takes effect immediately.

Trainers can see an athlete's workout assignments, completions, and Develop measurables only with a live grant from the guardian (or the adult athlete). Trainers can submit measurements, which become verified only when the athlete confirms them. Trainers cannot record body weight for minors. Trainers have no access to recruiting profiles, matches, college program messaging, or clips.

College programs see only athletes who have chosen to share with that specific program:

• High school athletes are identified to a verified college program once the athlete publishes a recruiting profile and shares with that program. Sharing can be a summary (position, class, verified measurables, and Readiness Score, without a name) or a full profile. Home state is shown. Parents and guardians can block specific programs.
• Current college athletes are anonymous by default. Before an athlete unlocks their identity for a program, the program sees only a pseudonym, position, class-year band, match score, and clips that have passed anonymization review. Home state is not shown before unlock. The athlete's current program is always blocked, and athletes can block any other program or an entire conference; a blocked program cannot see them at all. Rizora does not allow any messaging between college programs and currently enrolled college athletes.

Programs can message athletes who have shared a full profile with them. When the athlete is a minor, their parent or guardian is copied on every message.

Program notes and prospect stages are private to that program and are never shown to athletes. When an athlete revokes a program's access, blocks the program, or closes their account, the program can no longer see the athlete's profile, measurables, or clips, and we delete that program's private notes and prospect-stage records about the athlete.

Activity your team can see. When you're on a team, your coaches can see your activity on team materials, such as whether you completed assigned workouts, your workout streaks, and which shared plays you have viewed. They cannot see your activity outside that team.

Evaluators see the information they need to complete an evaluation. Evaluations of current college athletes are blind. Families of high school athletes can see the names of the evaluators who evaluated them. Evaluators and the scoring system are walled off from any athlete representation service.

5.2 Rizora staff

A small number of Rizora staff can access personal information when needed to verify accounts, investigate reports, provide support you request, review clips for anonymization quality, and keep the platform secure. Staff access to sensitive records is logged.

5.3 Service providers

We share information with companies that help us run the Services, under contracts that limit their use of it to providing services to us. Our current core providers are:

We may also use providers for video processing, customer support, and security monitoring. We will update this list when it changes.

5.4 Health information

Injury reports can be seen only by the athlete, their parent or guardian, and a trainer the family has designated with a live grant. They are never shown to high school, youth, or college program staff and never feed matching, scoring, or recruiting. Rizora never diagnoses. A serious or repeated injury report pauses the athlete's training plan until a qualified person reviews it.

We ask for consent before collecting injury reports and other health-related information, and we never sell it. Residents of Washington, Nevada, and other states with consumer health data laws should also read our Consumer Health Data Privacy Notice.

5.5 Legal and safety reasons

We may disclose information if we believe in good faith it is necessary to comply with law or legal process, protect the safety of any person (especially a child), report suspected child exploitation to the National Center for Missing & Exploited Children or law enforcement, investigate fraud or security issues, or enforce our terms.

5.6 Business transfers

If Rizora is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. Any successor must honor this policy for the information it receives, or give you notice and a choice before using it differently.

5.7 With your direction

We share information when you tell us to, such as when you share a profile with a program, connect with a trainer, or export a clip.

6. The Rizora AI assistant

Rizora uses AI throughout the platform, including a chat assistant for each account type, personalized notifications, and a parser that turns photos and PDFs (such as practice schedules or school lunch menus) into structured data.

• It acts as you. The assistant can only see what you can see. It cannot read other users' private information.
• It asks before it saves anything. When the assistant suggests a change, such as logging a workout or adding a practice block, it shows you the proposed change, and nothing is saved until you confirm. Confirmed changes are recorded in our audit log.
• Some things are off limits to it. The assistant cannot change consent settings, sharing grants, verification, payments, or scores.
• It follows age-aware guardrails. It will not give medical advice and routes injury and health questions to a parent, coach, or medical professional. For minors, nutrition guidance focuses on fueling and performance, never weight loss, calorie restriction, or body-shape goals.
• Server-side only. All AI requests go through our servers. We send our AI provider only what is needed to answer the request, and we log usage and cost.
• Model training. Our AI provider, Anthropic, processes requests on our behalf and does not use them to train its models under our commercial terms. Rizora does not use your assistant conversations to train AI models.

AI output can be wrong. Please use judgment, and always talk to a qualified professional about health, injuries, and nutrition.

We keep assistant messages for 90 days and then delete them. Records of confirmed actions stay with the information they changed.

7. Clip anonymization (college athletes)

College athletes can buy anonymization of a highlight clip. To anonymize a clip, we process the video to remove or obscure identifying details such as faces, jersey numbers, team logos, audio, scoreboards, and location cues. Processing may use automated video tools, and a Rizora staff member reviews every clip before release. The athlete approves the result before any program can see it.

We use face detection only to find and obscure faces. We do not create face templates or use them to recognize who someone is.

7A. Scores, matches, and automated processing

Rizora calculates some things automatically, such as match scores between athletes and programs, measurable trends and benchmarks, and flags on numbers far outside an athlete's history. The Readiness Score combines structured evaluations by people (it appears only after a minimum number of independent evaluations) and is benchmarked by position and level.

These are tools that programs, coaches, and families use alongside their own judgment. Rizora does not decide admissions, roster spots, scholarships, or offers; programs make those decisions. Scores never use payment information, and they don't use protected characteristics such as race, religion, or sex.

If you believe a score, match, or flag about you is based on inaccurate information, you can ask us to review it and correct the underlying information by emailing legal@rizora.io.

8. Your choices and rights

Everyone on Rizora can, at any time:

• Access and download the personal information in their account, in a portable format.
• Correct inaccurate information. Because measurables are a historical record, we correct them by adding a correction rather than erasing the original, and disputed trainer measurements are flagged for staff review.
• Delete their account from account settings or by emailing legal@rizora.io. We delete account data within 30 days after the account is closed, except for the limited records described in our Data Retention Policy.
• Control sharing: grant, limit, or revoke roster visibility, trainer grants, and program disclosure; block programs and conferences.
• Control notifications: turn notification types on or off and set quiet hours.
• Opt out of marketing email using the unsubscribe link. We will still send account and transactional messages.

Parents and guardians of minors can also review their athlete's information, change or withdraw consent, decline further collection, and request deletion. See the Children's Privacy Notice.

State privacy rights. Depending on where you live, you may have additional rights, such as the right to know what categories of information we collect and disclose, to limit the use of sensitive information, to appeal our decision on a request, and to not be discriminated against for exercising your rights. We extend the rights above to all users regardless of state. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of, and we honor Global Privacy Control signals as an opt-out preference. We do not knowingly sell or share the personal information of anyone under 16. Because we don't track you across other sites, our practices are the same whether or not your browser sends a "Do Not Track" signal.

California. California residents under 18 may ask us to remove content or information they posted on Rizora (California Business and Professions Code § 22581); you can delete most of it yourself, or email legal@rizora.io. Removal may not remove copies others have received, such as messages already delivered. We do not disclose personal information to third parties for their own direct marketing, so there is nothing to report under California's "Shine the Light" law. See section 17 for our Notice at Collection.

Accessible format. If you need this policy in another format, email team@rizora.io.

How to make a request. Email legal@rizora.io from the email address on your account, or use the options in your account settings. We may need to confirm your identity before acting. An authorized agent may make a request on your behalf with proof of authorization. We respond within 45 days. If we deny a request, you may appeal by replying to our decision, and we will respond to the appeal within 60 days.

9. Children under 13

No one under 13 can create a Rizora account, and our sign-up flow blocks it. Information typed into the sign-up form by someone under 13 is not kept.

A youth or high school coach may keep a minimal roster entry for a player under 13 (first name, last initial, jersey number, and position), with no login, no photos, and no measurables. A parent or guardian may manage a limited profile for a child under 13 only after we have obtained verifiable parental consent. The Children's Privacy Notice explains exactly what we collect, how we use it, and the rights parents have.

If you believe a child under 13 has given us personal information without parental consent, contact legal@rizora.io and we will delete it.

10. Security

We protect information with access controls enforced in the database itself, private storage with short-lived links, metadata stripping on uploads, encryption in transit and at rest, passwordless sign-in, and an append-only audit log of sensitive actions. No system is perfectly secure, and we cannot guarantee absolute security. Our Security page explains our practices and how to report a vulnerability.

If we learn of a security incident that affects your personal information, we will notify affected users, and parents or guardians of affected minors, as required by law and without unreasonable delay.

11. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy. Account data is deleted within 30 days after an account is closed, assistant messages are deleted after 90 days, and pending connection requests expire after 30 days. Some records, such as payment and tax records, audit logs, and information under a legal hold, are kept longer. See our Data Retention Policy for the full schedule.

12. Where information is stored

Rizora is offered in the United States, and we store and process information in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States.

13. Text messages

If we text you, it is for account notifications, such as a guardian invitation or approval request. See our SMS Terms. You can reply STOP to opt out at any time.

14. Links to other services

The Services may link to other websites and services, such as Stripe's checkout and billing portal. Their privacy policies, not this one, govern information you give them.

15. Changes to this policy

We may update this policy as Rizora changes. We will post the new version here with an updated date. If we make a material change, we will notify you by email or in the app before it takes effect, and where the law requires (including for information collected from children), we will ask for consent again.

16. Contact us

Questions or concerns about privacy: legal@rizora.io Rizora.io LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States

17. Notice at Collection and state disclosures

This table summarizes, using the categories in California and other state privacy laws, what we collect, why, and who receives it. We do not sell any category, and we do not share any category for cross-context behavioral advertising.

We use sensitive personal information only for purposes permitted by law, so there is no need to request that we limit its use.

Sources. We collect information from you, from other users (parents, coaches, trainers, evaluators), automatically from your device, and from public sources about schools and programs.