Privacy Policy
Last updated: this is a draft — see the note at the bottom.
What we collect
When you create an account, we collect your email, a hashed password (we never store your actual password), date of birth, height, weight, position, city, and state. You can optionally add a bio, goals, a highlight reel link, and playing stats, all self-reported and not independently verified.
If you use Email Sending, you provide your own email app password — this is stored so the app can send outreach as you; it is never returned by any API response once saved.
If you upload game film, the video file itself is stored on our server.
We keep a log of AI-feature usage (timestamps and which feature) to enforce a daily usage limit — not the content of what was generated.
How we use it
Your profile data is used to personalize AI-generated content (career path, training plan) and to draft outreach emails to teams, sponsors, coaches, and brands. Your location is used to search for real, currently public opportunities near you. Nothing is used for any purpose beyond operating the features you directly use.
Third parties involved
AI generation and web search use Anthropic's API — the profile details relevant to a given feature (e.g. position, city, state, goals) are sent to Anthropic to produce that feature's output. Before any of these features is used for the first time, the app shows an in-app prompt naming what's sent and asks you to explicitly agree — this notice alone is not that permission. You can revoke that permission at any time from Profile & Bio, which stops these features from working until you re-enable it.
Location lookup ("Use my current location" on the Profile page) uses OpenStreetMap's Nominatim service, sent only your coordinates for that one lookup.
Outreach emails are sent through your own email provider (e.g. Gmail) using the credentials you supply — we don't use a shared operator email account.
We do not sell your data to anyone.
Contacts you add
Teams, sponsors, coaches, and brands found via web search or added manually are stored so you can review and draft outreach to them. These are treated as unverified until you confirm them yourself — see the Terms of Service for what that means for outreach you send.
Data retention & deletion
Your data is kept as long as your account exists. To request deletion of your account and associated data, contact us using the details below.
Security
Passwords are hashed (not stored in plain text). Login sessions use a random token stored server-side, not your password itself. As with any online service, no method of storage or transmission is 100% secure.
Age requirement
ApexAgent is for users 18 and older. We rely on the date of birth you provide at signup — see the Terms of Service for the consequence of misrepresenting your age.
Contact
Questions about this policy or your data: see the Support page.