Privacy Policy

Overview

Actisavvyis the platform; each city, league, club, or school that runs programs on it (a “Program”) decides what to collect from its own families. We provide the software and safeguards; the Program is responsible for how it uses its members' information. This policy covers Activity Savant, Inc.'s practices as the platform operator. Your Program may also provide its own notice.

Two promises up front: we do not sell your personal information, and we do not use it for cross-context behavioral advertising. We collect the minimum needed to run a program.

Information we collect

• Account information— a parent/guardian's or staff member's name, and an email address or mobile number. Passwords are stored only as a salted, one-way hash — never in readable form.
• Player (child) information — provided by a parent or guardian: name, date of birth and gender (used to place a child in the correct age/gender division), and the guardian relationship. Optionally, emergency contacts and any allergies or medical conditions a program needs to keep a child safe on the field.
• Participation information — registrations, team assignments, tryout/evaluation results and skill ratings, check-ins, and typed waiver signatures.
• Payment information — when online payment is used, card and bank details are entered directly with our payment processor. We do not store your card number; we keep only the amount, status, and a reference to reconcile it.
• Communications — messages, receipts, and notifications a program sends you.
• Limited technical information — one essential cookie that keeps you signed in, plus routine server logs (such as IP address and timestamps) used only to secure the service. We do not run advertising trackers.

How we use information

• To run registrations, build teams, schedule games, and operate the programs you join.
• To keep children safe — for example, gating staff who work with children on background-check clearance, and making medical/allergy notes available to the right authorized adults.
• To communicate with you about your registrations and programs.
• To secure the service, prevent fraud and abuse, and comply with legal obligations.

We do not use children's information for advertising or profiling, and we do not sell it.

Children's privacy (COPPA)

Actisavvy is designed to be used by parents, guardians, and program staff— not by young children on their own. A child's information is provided by their parent or guardian during registration, and we collect only what a program needs to let the child participate.

• We do not knowingly allow children under 13 to create their own accounts or provide information without a parent/guardian.
• A parent or guardian may review, correct, or deletetheir child's information, and may refuse further collection or use, by contacting us or their Program.
• We do not condition a child's participation on providing more information than is reasonably necessary.
• We do not disclose a child's information to third parties except the service providers and Program staff needed to deliver the program (see How we share).

If you believe a child provided us information without a parent's involvement, contact us at privacy@actisavvy.com and we will delete it.

California privacy rights (CCPA/CPRA & more)

If you are a California resident, you have rights over your personal information under the California Consumer Privacy Act, as amended by the CPRA:

• Know / access the categories and specific pieces of personal information we hold about you.
• Delete personal information we hold, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information — though we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
• Limit the use of sensitive personal information — we already use it only for the purposes described here.
• Non-discrimination — we will not deny service or charge you differently for exercising these rights.

Minors.We do not sell or share the personal information of any user we know to be under 16. This is consistent with the CPRA's requirement of opt-in consent for minors.

“Eraser” law (Cal. Bus. & Prof. Code §22581). A registered minor in California (or their guardian) may request removal of information or content associated with their account by contacting us.

CalOPPA & Do Not Track.Because we do not track users across third-party websites, we do not respond differently to browser “Do Not Track” signals — there is no cross-site tracking to disable.

Categories of personal information collected(CCPA): identifiers (name, email/phone); protected classifications (age/date of birth, gender); commercial information (registrations and orders); internet activity limited to essential sign-in; and sensitive personal information (a child's date of birth and any medical/allergy notes), used only for the disclosed program purposes.

To exercise any right, email privacy@actisavvy.com or contact your Program. We verify your identity before acting, and you may use an authorized agent. We respond within the timeframes the law requires.

How we protect your data

Security is built into how the platform works, not bolted on. In plain terms:

• Encrypted in transit and at rest. All traffic uses HTTPS/TLS, and data is stored on encrypted cloud infrastructure (Cloudflare).
• Passwords are never stored in readable form — only a salted PBKDF2 (SHA-256, 100,000 iterations) hash.
• Sessions are protected. Sign-in tokens are cryptographically signed, HTTP-only, and served securely; signing out immediately revokes them across your devices.
• Brute-force resistant. Repeated failed sign-ins are rate-limited.
• Strict program isolation.Each Program's data is walled off from every other Program — one organization can never read another's families.
• Least-privilege access.Sensitive fields such as medical notes are visible only to a child's guardians and the authorized staff who need them; staff who work with children are gated on background-check clearance.
• Data minimization & no stored card numbers. We collect only what a program needs, and payment card data is handled by a PCI-compliant processor — we never store it.

No system is perfectly secure, but if a breach affecting your information ever occurs, we will notify affected users and the appropriate authorities as required by law (including California Civil Code §1798.82). See our Trust & Safety Center for more.

How we share information

We share personal information only:

• with the Program you join and its authorized staff, to run your registration and participation;
• with service providers under contract (such as cloud hosting, and email/SMS and payment processing) who are bound to protect it and use it only to provide their service to us; and
• when required by law or to protect the safety of a child or the public.

We do not sell personal information and do not share it for advertising.

Retention & deletion

We keep information for as long as it is needed to run your programs and to meet legal, accounting, and safety obligations, then delete or de-identify it. Temporary demonstration data is automatically purged. You or your guardian may request deletion of your account and associated information at any time (subject to records a Program must keep).

Your choices & rights

• View and update most of your information directly in your parent or staff portal.
• Request access, correction, or deletion by emailing privacy@actisavvy.com.
• Opt out of non-essential messages using the unsubscribe option in those messages; essential account and safety messages will still be sent.

Changes & contact

We may update this policy; we'll post the new version here with a revised date and, for material changes, provide a more prominent notice. Questions or requests: privacy@actisavvy.com, or write to Activity Savant, Inc., Central Valley, California.