Overview
Stanfield OS, LLC operates Stanfield OS™, The Mirror™, Choose or Lose™, and related services. We are committed to protecting the privacy of all users, with special attention to minors under 18. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights regarding that data.
We designed this policy with one principle: your child's behavioral data exists to help them grow. It will never be sold, exploited, or used against them. That is non-negotiable.
1. Information We Collect
1.1 Account Information
- First name and last initial of the athlete
- Email address (parent's email for athletes under 13)
- Graduation year (used to compute age band)
- Parent/guardian contact information
1.2 Behavioral Data (The Mirror / Choose or Lose)
- Per rep: choice made (choose or lose), reaction time in milliseconds, whether the timer expired
- Per session: total choices, total losses, choose rate percentage, average reaction times, pattern classification
- Longitudinal: all sessions over time, trend data, behavioral shift patterns
1.3 What We Do NOT Collect
- NO personal health information (PHI)
- NO audio, video, or biometric data
- NO location data
- NO social media profiles or contacts
- NO free-text diary or journal entries during Mirror gameplay
- NO third-party tracking cookies or advertising pixels
- NO data from other apps on the user's device
2. How We Use Your Data
- To provide the athlete with personalized behavioral training through The Mirror
- To show the athlete's coach and parent their behavioral patterns and development progress
- To improve the Service through de-identified, aggregate analysis
- To communicate with users about their account and the Service
3. How We Do NOT Use Your Data
We will NEVER:
- Sell individual or aggregate data to any third party, for any reason, under any circumstances
- Share data with advertisers, data brokers, or marketing platforms
- Provide data to insurance companies, pharmaceutical companies, or government agencies without a valid court order
- Share data with college recruiters, admissions offices, or scholarship committees
- Use data to rank, grade, or evaluate athletes against each other
- Use data to make clinical diagnoses or represent the Service as a medical/psychological tool
- Display advertising of any kind within the Service
- Use AI or machine learning to make predictions about individual athletes' behavior, mental health, or future actions
4. Children's Privacy (COPPA Compliance)
- For athletes under 13: We require verifiable parental consent before creating an account or collecting any data. The parent's email is the primary contact. The child cannot create an account independently.
- For athletes 13 - 17: We notify parents of account creation and provide full access to view, download, or delete their child's data at any time.
- We collect only the minimum data necessary to provide the Service.
- We do not condition participation on the collection of more data than is reasonably necessary.
- Parents may review their child's data, request deletion, or revoke consent at any time by contacting brad@stanfieldos.com.
5. Data Storage and Security
- All data is stored with Row Level Security (RLS) enforced at the database level
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Athletes can only access their own data. Coaches can only access data for athletes assigned to them.
- Authentication is handled via secure JWT tokens. No passwords are stored in plaintext.
- Infrastructure is SOC 2 Type II compliant
- We conduct regular security reviews of our codebase and database configuration
6. Data Retention and Deletion
- We retain behavioral data for as long as the athlete's account is active, to provide longitudinal development tracking.
- Upon account cancellation, all personally identifiable data is deleted within 30 days. De-identified aggregate data may be retained for research purposes.
- Parents or athletes may request immediate deletion of all data at any time by contacting brad@stanfieldos.com. Deletion will be completed within 15 business days.
- If an athlete turns 18, ownership of the account and all associated data transfers to the athlete. Parents are notified of this transition.
7. Data Sharing
We share data only in these limited circumstances:
- With the athlete's assigned coach (behavioral patterns, session data, choose rate)
- With the athlete's parent or legal guardian (all data)
- With service providers who help us operate the platform (hosting, payments) these providers do not have access to behavioral data
- If required by valid court order or legal process, with notice to the affected user when legally permitted
We do not share data with any other party. There are no exceptions.
8. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you or your child
- Correction: Request correction of any inaccurate account information
- Deletion: Request complete deletion of all data
- Portability: Request your data in a machine-readable format (CSV/JSON)
- Withdraw consent: Revoke consent for data collection at any time
- Object: Object to any use of data not described in this policy
To exercise any of these rights, contact brad@stanfieldos.com. We will respond within 15 business days.
9. Third-Party Services
- Database hosting and authentication (secure cloud infrastructure)
- Stripe (payment processing)
- Google Fonts (typography, loaded via CDN) no personal data collected
We do not use Google Analytics, Facebook Pixel, or any advertising/tracking services.
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): the right to know what data we collect, the right to delete, and the right to opt out of data sales. We do not sell personal information. To exercise your CCPA rights, contact brad@stanfieldos.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to all registered users and parents at least 30 days before taking effect.