Privacy Policy

* **Information You Provide:** * Account Information: Username, email address, password, date of birth. For parents linking accounts, we collect their account information. * Profile Information: First name, last name, avatar image, cover photo, bio, location (city, state, country - specify if optional/required), social links (optional), favorite sports/interests (optional). * User Content: Photos, text, and stats you add to create digital sports cards; posts, comments, messages you share on user feeds or team chats; media you upload. * Team Information: Team name, description, logo, location (if creating/managing a team). * Parental Consent Information: Parent/guardian email address (collected temporarily to initiate consent), payment information for verification (processed securely by our payment partner [e.g., Stripe], we do not store full credit card numbers). [Adapt based on chosen VPC method] * Communications: Information you provide when contacting support or communicating with us. * **Information Collected Automatically:** * Usage Data: Log data (IP address, browser type, pages visited, time spent), device information (OS, device type), cookies and similar tracking technologies (explain purpose - necessary function, analytics - provide opt-out if applicable). [Be specific about tracking & analytics, especially regarding children]. COPPA restricts persistent identifiers used for tracking under-13s without consent.

* To provide and operate the service (account creation, card generation, social features). * To personalize your experience (suggestions, feed content). * To communicate with you (service updates, support, consent emails). * To process payments (for VPC, physical card orders - processed by [Payment Processor]). * To ensure safety and security, enforce terms, and prevent fraud. * To comply with legal obligations, including COPPA's VPC requirements. * For analytics to improve the service (using aggregated or anonymized data where possible, especially for under-13s).

We do not sell your personal information. We may share information with:

* **Service Providers:** Third parties who help us operate (hosting [e.g., Supabase], analytics [e.g., Google Analytics - check their COPPA compliance], payment processing [e.g., Stripe], customer support tools). These providers only access data necessary to perform their tasks and are obligated to protect it. * **Other Users:** Your username, profile information (based on your visibility settings or defaults for under-13s), and content you share publicly or with specific connections/teams are visible to others as part of the service. * **Parents/Guardians:** Linked parents/guardians can access and manage their child's account information and settings as described in this policy and our terms. * **Legal Requirements:** If required by law, subpoena, or other legal process, or to protect rights, property, or safety. * **Business Transfers:** In case of merger, acquisition, or asset sale (users will be notified).

[Your App Name] is committed to protecting the privacy of children.

* **Age Gating:** We require users to provide their date of birth during registration. * **Under 13 Users:** If a user indicates they are under 13 years old, we require Verifiable Parental Consent (VPC) before collecting any personal information beyond what is necessary to obtain consent (e.g., parent email for consent request). * **Consent Methods:** We obtain VPC through [Clearly describe your chosen method(s) - e.g., parent account creation and invitation, OR the $1 credit card verification via Stripe]. * **Limited Accounts:** Accounts for users under 13 remain limited (no posting, limited visibility, restricted interaction) until VPC is obtained. * **Data Collection (Under 13):** We collect the minimum information necessary from children under 13 to participate in the service, as described in Section 1. We do not condition participation on disclosing more information than is reasonably necessary. * **Data Use/Sharing (Under 13):** Information from users under 13 is used as described in Section 2 & 3, with specific restrictions: profiles are private by default, content sharing is limited (e.g., not public), and we take extra care regarding analytics and third-party sharing. * **Parental Rights:** Parents/guardians of users under 13 have the right to: * Review the personal information we have collected from their child. * Request the deletion of their child's personal information. * Refuse further collection or use of their child's information (this may require account deletion). * Consent to collection/use but not disclosure to third parties (unless inherent to the service). * To exercise these rights, please contact us at [Provide Clear Contact Method - Email, Form]. We will require verification of your identity as the parent/guardian.

* **Access & Update:** You can access and update most of your profile information through your account settings. * **Account Deletion:** You can request deletion of your account [Explain process - e.g., via settings or contacting support]. Parents can request deletion of their child's account. * **Communications:** You may opt-out of non-essential email communications. * **Cookies:** Manage cookie preferences through your browser settings.

We implement reasonable technical and organizational measures (like encryption, access controls, RLS) to protect your information. However, no system is 100% secure.

Your information may be processed in countries outside your own. We ensure appropriate safeguards are in place for such transfers.

We may update this policy. We will notify you of significant changes (e.g., via email or in-app notice). Continued use after changes constitutes acceptance.

If you have questions about this policy or privacy practices, please contact us at: [Your Company Name] [Mailing Address, if applicable] [Privacy Contact Email Address - e.g., privacy@[yourdomain].com] [Link to Contact Form, if applicable]