COPPA Notice

Children's Online Privacy Protection Act Compliance · Effective January 1, 2026

Who This Notice Covers

This notice applies to personal information from children under 13 collected through the HyperPulse app, website (gethyperpulse.com), and athlete sensor device. HyperPulse is a parent-operated platform — athletes do not create accounts. Parents create and manage all accounts.

What We Collect About Athletes Under 13

When a parent creates an account and associates a patch with a player under 13, we may collect:

• Athletic performance metrics broadcast by the sensor, such as estimated speed, distance, sprint count, jump height, work rate, and load
• Athlete first name and jersey number (entered by the parent)
• Sport selection (entered by the parent)
• Session timestamps

We do not collect from athletes: email addresses, phone numbers, photos, location data, or any information entered directly by the child.

Parental Consent

Before any data is collected from an athlete under 13, the parent or guardian must:

• Create a HyperPulse account in their own name using their own email
• Provide verifiable parental consent through the account activation and sensor-use acknowledgment flow
• Acknowledge this COPPA notice during the account creation flow
• Acknowledge the Parent Consent and Sensor Use Acknowledgment

Consent is recorded with a timestamp tied to the parent's account. No child data is collected without it.

How We Use Athlete Data

Athlete data from players under 13 is used only to display live and historical performance data to the parent within the HyperPulse app, and to enable optional coach data-sharing controlled by the parent.

We do not sell athlete data, use it for advertising, behavioral profiling, or share it with third parties without explicit parental consent.

Parental Rights

At any time, a parent or legal guardian may:

• Review all data collected about their athlete by logging into their account
• Delete athlete data by emailing [email protected] — processed within 30 days
• Revoke consent and stop further collection by deleting the account or removing the athlete from the app

Data Retention

Athlete performance data is retained as long as the parent account is active, or until deletion is requested. All athlete data associated with a deleted account is permanently removed within 30 days.

Third-Party Services

HyperPulse uses Supabase (cloud database, SOC 2 Type II, US-based) and Cloudflare (CDN). No other third parties receive athlete data. No analytics tools receive session-level data from minors.

Contact

For COPPA-related questions or parental rights requests:

• Email: [email protected]
• Mail: HyperPulse · 9198 Apollo Rd · Bloomington, IL 61705

We respond to all COPPA inquiries within 10 business days.