Your data.
Protected.

1. Scope

This Policy applies to K1 Athletics-operated websites, applications, portals, and online services that reference or link to this Policy.

Depending upon the Service, K1 Athletics may process information relating to schools, school districts, athletic organizations, students, student-athletes, parents, guardians, coaches, school personnel, athletic directors, volunteers, donors, sponsors, event participants, streaming personnel, website visitors, and authorized K1 Athletics personnel.

When K1 Athletics provides a Service on behalf of a school, district, athletic organization, booster organization, or other institution, that institution may control certain information while K1 Athletics processes the information on its behalf.

2. Information We May Collect

Account and Contact Information

• Name
• Email address
• Telephone number
• School or organization
• Job title or role
• Username and account identifiers
• Authentication and security information

Student and Athlete Information

Authorized athletic or school systems may contain information including:

• Student or athlete name
• School and team
• Sport
• Grade or graduation year
• Jersey number
• Position
• Height and weight
• Athletic biography
• Approved photographs
• Team participation and rosters
• Schedules and event participation
• Athletic accomplishments
• Fundraising participation

K1 Athletics seeks to limit collection of student information to information reasonably necessary to provide the applicable Service.

Donor and Fundraising Information

Information may include names, contact information, donation information, campaign participation, communication preferences, transaction identifiers, and information required to provide receipts or maintain financial records.

Payment Information

Payments may be processed by third-party payment processors. K1 Athletics does not intentionally store complete payment-card numbers or card security codes when payment processing is performed by an external payment provider.

Technical Information

Our systems may process IP addresses, browser and device information, access times, requested resources, authentication activity, session identifiers, security events, cookies, and system or error logs necessary to operate and secure the Services.

3. How We Use Information

K1 Athletics uses information for legitimate purposes associated with providing and securing the Services, including to:

• Operate K1 Athletics Services
• Maintain athletic and roster information
• Provide schedules and event information
• Administer fundraising programs
• Process donations and transactions
• Operate streaming and event services
• Authenticate users
• Manage roles and permissions
• Provide support
• Detect and investigate security incidents
• Maintain system reliability
• Meet legal and financial obligations

4. Student Information and FERPA

When K1 Athletics receives education records or protected student information from a school or school district, K1 Athletics handles that information only for purposes authorized by the educational institution and applicable agreements.

K1 Athletics does not claim ownership of student records supplied by a school or district. Schools and districts retain authority over their records as provided by applicable law and contractual requirements.

K1 Athletics will reasonably assist institutions with authorized requests involving access, correction, export, retention, or deletion of information under their control.

5. Children Under 13

Some K1 Athletics Services involve youth athletic organizations or participants under 13.

K1 Athletics does not knowingly collect personal information directly from a child under 13 in circumstances requiring parental consent without obtaining required authorization or consent.

Where information is supplied by a school, athletic organization, parent, guardian, or other authorized party, K1 Athletics processes that information only for the purposes for which it was provided and subject to applicable law.

Where COPPA applies, K1 Athletics will provide required notices, parental rights, and consent mechanisms.

6. United States Data Residency

K1 Athletics maintains a U.S.-based data residency standard for protected customer information.

Production databases and primary storage systems containing protected K1 Athletics customer PII are required to use U.S.-based storage. Backup systems containing protected customer information are also required to maintain such information within the United States unless a different arrangement is expressly authorized.

K1 Athletics evaluates service providers that process protected information and seeks to use U.S.-based processing and storage for systems containing student information or other sensitive PII.

7. Encryption and Data Security

Encryption in Transit

K1 Athletics protects sensitive information transmitted across public networks using encrypted connections.

K1 Athletics Services use HTTPS/TLS for supported web communications. Administrative and system-to-system communications containing sensitive information must use encrypted protocols where technically applicable.

Unencrypted transmission of passwords, authentication credentials, or sensitive PII across public networks is prohibited.

Encryption at Rest

Systems storing sensitive PII are required to use encryption at rest where supported and appropriate to the sensitivity of the information and underlying platform.

These protections may apply to production databases, file storage, server volumes, backups, portable copies, and other storage systems containing sensitive information.

User passwords are not stored in readable plaintext. Passwords are stored using industry-standard one-way password hashing mechanisms.

8. Access Controls and Account Security

Access to nonpublic information is restricted according to business need and user authorization.

K1 Athletics uses role-based access controls designed to restrict users to the organizations, districts, schools, teams, functions, and information necessary for their responsibilities.

Security safeguards may include multi-factor authentication, secure password hashing, session management, role-based authorization, security-event logging, secure cookies, request protections, and restricted administrative access.

Data Segregation

K1 Athletics is designed to logically separate nonpublic information belonging to different organizations, districts, schools, teams, and authorized users.

9. Data Minimization, Retention and Deletion

K1 Athletics seeks to collect and retain only information reasonably necessary to provide the Services, satisfy contractual requirements, maintain required records, protect system security, and comply with applicable law.

Information is retained only for as long as reasonably necessary for the purpose for which it was collected or as otherwise legally required.

When information is no longer required, K1 Athletics will delete, anonymize, or securely dispose of it in accordance with applicable retention procedures.

Information contained in system backups may remain until the applicable backup expires through its normal retention cycle.

Upon termination of an organization's relationship with K1 Athletics, the organization may request return or deletion of protected information, subject to applicable legal, financial, security, and backup retention requirements.

10. Service Providers and Subprocessors

K1 Athletics may use service providers for infrastructure hosting, email delivery, payment processing, communications, security, content delivery, streaming, analytics, and technical support.

K1 Athletics evaluates providers according to the nature and sensitivity of information they process. Providers receiving protected information are expected to maintain reasonable administrative, technical, and physical safeguards and use the information only for authorized purposes.

K1 Athletics does not authorize service providers to sell student information supplied through K1 Athletics Services.

11. Streaming, Photographs and Public Athletic Information

K1 Athletics provides sports broadcasting, event streaming, roster, schedule, and athletic information services.

Athletic events may be photographed, recorded, livestreamed, archived, or publicly distributed when authorized by the applicable school, league, athletic organization, venue, or event organizer.

Information intentionally designated as public athletic information may include an athlete's name, team, jersey number, position, grade or graduation year, athletic statistics, accomplishments, approved photographs, and event participation.

12. Fundraising and Donations

Information collected through fundraising services may be used to administer campaigns, attribute donations, provide receipts, maintain transaction records, communicate with donors, and satisfy accounting or legal requirements.

K1 Athletics does not sell donor contact information.

13. Cookies and Similar Technologies

K1 Athletics may use cookies and similar technologies necessary to authenticate users, maintain sessions, remember preferences, prevent fraud, protect accounts, measure system performance, and maintain reliable operation.

K1 Athletics does not use confidential student records for cross-site behavioral advertising.

14. Security Monitoring and Incident Response

K1 Athletics may maintain security and administrative logs necessary to detect unauthorized access, investigate incidents, diagnose technical problems, maintain system availability, and establish accountability.

When a suspected or confirmed security incident occurs, K1 Athletics will take reasonable steps to contain the incident, determine its nature and scope, protect affected systems, preserve investigative information, remediate identified vulnerabilities, and determine whether protected information was accessed or acquired without authorization.

Required notifications will be made in accordance with applicable law and contractual obligations.

15. Privacy Rights and Requests

Depending upon applicable law and the nature of the information, individuals may have rights to request access to, correction of, or deletion of personal information and information regarding how that information is used.

When K1 Athletics processes information on behalf of a school, district, or organization, requests involving institution-controlled records should ordinarily be directed to that institution. K1 Athletics will reasonably assist the institution with appropriate requests.

K1 Athletics may verify the identity or authority of the person making a privacy request before releasing, changing, or deleting protected information.

16. Changes to This Policy

K1 Athletics may update this Policy as its Services, security practices, legal requirements, or technology change.

Material revisions will be reflected by an updated effective or revision date. Additional notice will be provided when required by law or contractual obligation.