Privacy Policy
Last updated: March 22, 2026
Overview
CommitPath ("we", "our", "us") operates the CommitPath mobile application and website (commitpath.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). Parents may also provide their contact information when creating family accounts.
Athlete Profile Data
You may voluntarily provide athletic and academic information including: sport, position, GPA, test scores, high school, graduation year, height, weight, highlight video URLs, and a personal statement. This data is used to match you with colleges and personalize your outreach to coaches.
Quiz Responses
When you take the Recruiting DNA quiz, we store your responses and computed preferences (school size, location, campus setting, etc.) to generate personalized school matches.
Usage Data
We collect information about how you interact with the app, including schools viewed, schools saved, messages generated, and features used. This helps us improve the product.
How We Use Your Information
- Match you to best-fit college programs based on your profile and preferences
- Generate AI-personalized outreach emails to coaches on your behalf
- Manage your subscription and family account
- Improve our matching algorithms and product features
- Communicate with you about your account and service updates
Gmail Integration
If you connect your Gmail account, we use Google OAuth to send emails on your behalf. We store your OAuth refresh token securely to maintain the connection. We do not read, store, or analyze your existing emails. Emails are sent directly from your Gmail account — we act as a sending tool, not an intermediary.
Coach Data
We collect publicly available coaching staff information from NCAA athletics websites, including names, titles, email addresses, and biographies. This information is publicly published by the schools on their athletics websites.
Data Sharing
We do not sell your personal information. We share data only with:
- Service providers: Supabase (database), Clerk (authentication), Apple (payments via StoreKit), Anthropic (AI message generation)
- At your direction: When you send an email to a coach, that email contains your profile information as you composed it
Data Security
We use industry-standard security measures including encrypted data transmission (TLS), secure database hosting, and row-level security policies. Authentication is handled by Clerk with support for multi-factor authentication.
Children's Privacy
CommitPath is designed for high school student athletes (typically ages 14-18) and their parents/guardians. We encourage parents to create the family account and manage their athlete's profile. We do not knowingly collect information from children under 13 without parental consent.
Your Rights
You may:
- Access, update, or delete your profile data at any time through the app
- Disconnect your Gmail account at any time
- Delete your account by contacting us at privacy@commitpath.com
- Request a copy of your data by contacting us
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law.
Changes to This Policy
We may update this policy from time to time. We will notify you of material changes through the app or by email.
Contact Us
If you have questions about this privacy policy, contact us at privacy@commitpath.com.