Privacy Policy
This policy explains what data Elevated Baseline collects, why, and your rights — with particular attention to data about children. It covers the elevatedbaseline.com website and the Two-Minute Drill mobile app.
Effective July 31, 2026.
What we collect about you
When a coach, assistant, or parent creates an account we store your name, email address, and a securely hashed password — or, if you sign in with Google, the name and email Google shares with us. We also store the content you create to run your team: rosters, formations, plays, notes, and the invitations you send. We do not collect your location, contacts, or photos, and we do not show ads or use advertising trackers.
What we collect about your child
For a rostered player who is a child, we store their roster information — their name, jersey number, and position — plus training and quiz results as they are added. We do not knowingly collect anything beyond what's needed to run the child's own coach-assigned training.
Why we collect it
This data exists solely to operate your child's team roster and play sheet training. We never use it for advertising or any unrelated purpose, and we never sell it or share it with third parties or with other families on the team. Only your child's parents/guardians and the coaches of your child's team can see it.
Your rights as a parent
As the parent or guardian of a rostered child, you may:
- Consent — review and give verifiable consent before your child's information is used.
- Revoke — withdraw consent at any time, which hides your child's roster information.
- Delete — request deletion of your child's data.
You can exercise all of these from your My Kids page once your child is linked to your account.
Who we share data with
We share data only with the service providers that run Elevated Baseline — cloud hosting and database infrastructure that store data on our behalf, and Google if you choose Google sign-in. They process data only to provide the service. We never sell personal information and never share it for advertising.
Security
All traffic is encrypted in transit (HTTPS), passwords are stored only as salted hashes, and access to team data is limited by role — coaches and consented parents see only their own team's information.
Retention
We keep data only as long as it is needed to operate your team, and we delete it on request. Child data deletion follows the standards of the COPPA rule (16 CFR § 312.10).
Direct notice to parents
Before a child's information is used, we provide the consenting parent a direct notice describing exactly what is collected, how it is used, who can see it, and the parent's rights. That notice is the Parental Consent text the parent agrees to.
Contact
Questions about this policy, your data, or a deletion request: tyler@threebits.io — or see our Support page.