STIXX AI

Overview

This Privacy Policy explains what data STIXX AI (the "Service") collects, how we use it, who can see it, and the choices you have. It applies to coaches, clubs, and players who use the Service.

Data we collect

Account data: name, email, password hash, role (org admin / coach / player), and any profile details you choose to provide (position, handedness, graduation year, team affiliation).
Club & roster data: organization name, location, level, roster size, logo, members, and invitations you send.
Content you upload: game footage, practice clips, highlight reels, timestamps, notes, drill assignments, and tags.
Derived data: AI observations, Field IQ™ scores, performance metrics, attendance and consistency stats, and other outputs the Service generates from Your Content.
Usage data: device, browser, IP address, log events, feature usage, and similar technical signals needed to run and secure the Service.

How we use your data

To operate the Service and provide features to you and your club.
To generate AI-assisted observations, drills, and analytics on the content you submit.
To keep your team in sync (rosters, invites, notifications).
To secure accounts, prevent abuse, and debug issues.
To communicate product updates, security notices, and account messages.

Use of data for product improvement and research

We reserve the right to use data from the Service — including footage, derived metrics, AI outputs, and aggregated usage signals — to maintain, improve, train, and develop the Service, our underlying models, and related products. We may also use this data, in aggregated or de-identified form, to produce research, benchmarks, and to write and publish research reports about lacrosse performance.

Where we publish research, content is aggregated or de-identified so it cannot reasonably be used to identify an individual club or athlete. We do not sell personal data.

Sharing

Inside your organization: roster data and team-scoped content is visible to members of that organization according to our access rules.
Player profiles: private by default. Players choose what to connect or share.
Service providers: hosting, storage, analytics, AI inference, and email/SMS providers process data on our behalf under contract and only as needed to run the Service.
Legal: we may disclose data when required by law, to protect the Service, or to protect users.

Retention

We keep your data for as long as your account is active and as needed to provide the Service. After deletion, residual copies may persist briefly in backups before being overwritten on schedule.

Security

We use industry-standard safeguards including encryption in transit, role-based access controls, and row-level security at the database layer. No system is perfectly secure; you are responsible for keeping your credentials safe.

Your rights and choices

Access and export your data from settings.
Delete your account at any time from settings.
Request correction of inaccurate data, or restriction of certain processing, subject to applicable law.

Children

The Service is not intended for users under 13. If you become aware that a child under 13 has provided us data, contact us so we can remove it.

International transfers

We may process and store data in countries other than the one you live in. Where required, we use appropriate safeguards for cross-border transfers.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to you in-app or by email.

Contact

For privacy questions, reach out through the in-app support channel.