Last Updated: 2026-09-07
This Privacy Policy explains how [Catch LLC], a New York limited liability company (to be formed) ("Catch," "we," "us," or "our"), collects, uses, shares, and protects information in connection with the Catch rowing-team management application (the "Service").
Placeholder notice: the bracketed entity name above is a placeholder until the LLC is formed and named. This document has not yet been reviewed by an attorney — see the cover note delivered alongside this file for what still needs legal review before this is treated as final or published to real users.
This Policy applies to coaches, athletes, recreational users, and any other person who creates an account or whose information is entered into the Service by a coach or team administrator ("you," "users").
The Service is intended for use by rowing teams and their members. It is not directed at children under 13, and self-registration is not permitted for anyone under the age of 16 — see Section 6 ("Children's Privacy") for details.
We collect only what the Service needs to function. We do not run any analytics, advertising, or tracking SDKs in the app today, and we do not collect more than the categories below.
Some information the Service handles is more sensitive, particularly for users under 18:
We treat this category of information with the highest level of access restriction the Service supports. It is never sold, and it is not used for any purpose beyond operating the team-management features it supports.
We use the information above only to:
We do not use your personal information for targeted advertising, and we do not build advertising profiles.
We do not sell, rent, or trade your personal information to any third party. This is true today and is a deliberate business decision — our revenue comes from team subscriptions/licenses to use the Service and from affiliate or brand partnership arrangements (see Section 4.2), not from monetizing your data.
We share information only with the vendors necessary to run the Service:
Each provider is contractually and/or technically limited to using data only to provide their service to us — not for their own independent purposes.
Catch may include affiliate links or brand partnerships (e.g., rowing equipment or apparel brands) as a revenue source. Clicking an affiliate link or engaging with a brand partnership does not involve us sharing your personal Catch account data with that brand unless a specific feature explicitly discloses otherwise at the time you use it. Any future feature that would share your personal information with a brand partner will be clearly disclosed, and, where required by law, will require your opt-in consent.
We may disclose information if required to do so by law, or in a good-faith belief that disclosure is necessary to comply with legal process, protect our rights, or protect the safety of any person.
If Catch is ever involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
We take reasonable technical and organizational measures designed to protect your information, including:
No method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security, and no security measure is impenetrable. In the event of a data breach affecting your personal information, we will notify affected users and any relevant regulators as required by applicable law (see Section 6 below for how this applies to New York residents specifically).
If we become aware of a security breach that compromises your personal information, we will notify you without unreasonable delay, consistent with applicable law — including, for New York residents, the notification obligations under New York's data security laws (the "SHIELD Act"). This notice will describe, to the extent known, what happened, what information was involved, and what steps we and you can take in response.
The Service is not directed at children under 13. Self-registration requires being 16 or older — an account giving a date of birth under 16 is refused at sign-up. Athletes under 16 are added to a team by their coach, and a parent or legal guardian must approve their participation through the guardian-consent process before that athlete can use the Service.
Flag for legal review: if a coach ever enters information about a team member who is younger than 13 (rather than that child creating their own account), this may still trigger obligations under the U.S. Children's Online Privacy Protection Act (COPPA) depending on the circumstances. This is a specific, open question that should be resolved with legal counsel before the Service is used by any program that includes athletes under 13 — see the cover note delivered with this document.
If we learn that we have collected personal information from a child under 13 in a manner inconsistent with applicable law, we will take steps to delete that information.
We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated personal information by contacting us at the address in Section 11. We will delete or anonymize your information within a reasonable time, except where we are required or permitted by law to retain it (e.g., financial records, dispute resolution).
Coach-entered records about a team (such as historical attendance or erg results tied to a team, rather than to you personally) may be retained by the team even after an individual athlete's account is deleted, since that data belongs to the team's own operational history.
Depending on your location, you may have rights to access, correct, or request deletion of your personal information, or to object to certain processing. To exercise any of these rights, contact us using the information in Section 11. We will respond within a reasonable time.
Your information is stored and processed by our infrastructure provider, Supabase. [Confirm and state the specific hosting region(s) here once decided/verified — not yet confirmed as of this draft.]
Questions about this Privacy Policy, or requests regarding your information, can be sent to:
[contact email — to be added] [Catch LLC — mailing address, once formed]
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (such as an in-app notice or updated "Last Updated" date) before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.