Privacy Policy
Version 4 · 7 August 2026 · Dogwood Ventures LLC
The short version
We do not sell your data. We never have and we will not.
Athelos exists so families can see, understand and keep the story of their athlete’s journey. That only works if you trust us with it. Here is our promise, in plain language:
- We do not sell your personal information to anyone, for any purpose.
- We do not share your child’s information with advertisers, and we do not run ads.
- We do not use advertising or tracking cookies.
- We do not use your family’s data to train advertising profiles.
- We do not run product analytics. Nothing tracks how you move around Athelos.
- What one guardian writes privately stays private — including from another guardian of the same athlete.
- Your gym cannot see what you keep in your own family space unless you choose to share it.
- You can ask us for a copy of everything we hold about your athlete, and you can ask us to delete it.
The rest of this policy explains the details.
1. Who we are
Athelos is a product of Dogwood Ventures LLC, based in Horace, North Dakota.
If you have a question about your privacy or your family’s data, contact us at support@athelos.net. We provide support online, and we respond to privacy requests within 30 days.
2. What we collect
Information you give us
- Account details — name, email address, and the password you set. We never see your password in readable form.
- Athlete details — the athlete’s name, date of birth, level, team, and gym affiliation.
- The record you build — skills, goals, competition results, milestones, notes, photos and videos you add.
- Payment details — when you buy a yearbook, your card details go directly to our payment processor and are never stored on Athelos servers.
- Shipping address and phone number — only when you order a printed book, and only so it can be delivered.
Information we collect automatically
When you use Athelos, our hosting, authentication and error-monitoring providers record technical information needed to run the service securely:
- Server logs — your IP address, browser and device type, the pages you request, and the date and time. These keep the service running, diagnose faults, and detect abuse.
- Sign-in records — the IP address, device type and timestamp of each sign-in, so you can stay signed in and so we can detect unauthorised access to your account.
- Error reports — when something in Athelos breaks, a technical report of the fault is sent to our error-monitoring provider so we can find and fix it. Section 4 explains exactly what that tool does and does not receive.
- Consent records — when you give or change a consent, such as agreeing to another guardian having access to your athlete’s record, we record your browser type and the time alongside the consent itself, so there is a reliable record of who agreed to what.
- Access records for photos and videos — when a photo or video is opened, we record which account opened it and when, so we can tell you if your content is accessed and investigate if something looks wrong.
- Cookies that keep you signed in — strictly necessary only.
Cookies, specifically
| Cookie | What it does | Necessary? |
|---|---|---|
| Session and authentication cookies | Keep you signed in | Yes — the service cannot work without them |
| Preference cookies | Remember which athlete or gym you were last viewing | No, but they hold no personal detail beyond that choice |
We do not use advertising cookies, tracking cookies, analytics cookies, or session-replay tools.
We do not collect
Biometric identifiers, precise geolocation, government-issued ID numbers, or audio recordings. We do not make audio or video recordings of you — if you upload a video, that video is yours and may contain sound, and we simply store what you gave us.
3. Children’s privacy — this section matters most
Athelos is built for competitive cheer, and many athletes are children. We take that seriously.
Athelos is intended for adults.It is designed for guardians following their athlete’s progress, and for gyms working with the families they serve. It is not directed at children.
Athletes under 13do not get their own Athelos login. A parent or legal guardian creates and controls the athlete’s record.
Athletes 13 and oldermay have their own login, with a guardian’s involvement.
Parents and guardians have the right to
- Review all personal information we hold about their child
- Request a copy of it in a portable format
- Correct anything inaccurate
- Delete their child’s information
- Refuse further collection — you can stop us collecting anything more at any time, and close the account
To exercise any of these, email support@athelos.net. We will respond within 30 days.
We do not condition your child’s participation on disclosing more information than is reasonably necessary.
Why we collect children’s information, and why we keep it
Required by 16 CFR § 312.10. We collect a child athlete’s information for exactly three purposes:
- To build and display the athlete’s record — the skills, results, milestones and photos that are the product itself.
- To fulfil what you order — a printed or digital yearbook needs the athlete’s name, record and, for print, a shipping address.
- To keep the record portable — so it moves with the athlete between gyms and seasons rather than being lost.
Our business need for retaining it is that the record is the service. A keepsake deleted after a season is not a keepsake. We retain it while the account is open and delete it on the timeframes in section 7.
4. Who we share information with — and who we don’t
We never sell your personal information. We never share it with advertisers or data brokers.
We use a small number of service providers to run Athelos. They may only use your information to provide their service to us, and never for their own purposes.
| Provider | What they do | What they receive |
|---|---|---|
| Stripe | Processes payments | Payment and billing details |
| Lulu | Prints and ships yearbooks | Your shipping address and the book file |
| Resend | Sends account and order emails | Your name and email address |
| Supabase | Stores the database and account records | Family and athlete data at rest |
| Vercel | Serves the application | Data in transit, and server logs |
| Cloudflare | Domain, network security and inbound email routing | Network-level request data |
| Sentry | Error monitoring | Technical fault reports, deliberately configured to exclude personal information |
Error monitoring, specifically
We use Sentryto tell us when something in Athelos breaks. It is active on the live service. Because this product holds children’s names and photographs, we have configured it more narrowly than the defaults:
- It does not attach personal information to reports. The setting that would send user identifiers and IP addresses by default is explicitly turned off, and we have pinned it so a future software update cannot quietly re-enable it.
- We removed session recording entirely. Many teams use a tool that replays a user’s screen after an error. A replay of Athelos is a recording of a child, so we removed that capability rather than merely switching it off.
- We strip image descriptions and labels out of the trail of actions attached to an error report, because an image description on this site can contain an athlete’s name.
- Error reports are sampled and short-lived, and they contain the technical fault — the page, the browser, the software error — not the contents of your athlete’s record.
Artificial intelligence
Our code includes an integration with Anthropic for reading competition scoresheets. It is not currently active and transmits nothing. We intend to enable it, and when we do we will update this policy and obtain any consent the law requires before doing so — not after.
We may also disclose information if the law requires it, or to protect a child from harm.
If Athelos is ever acquired, your information may transfer to the acquiring company — and that company would be bound by the commitments in this policy.
5. Who can see what, inside Athelos
This is the part families ask about most, so we will be specific.
Your family space is yours. Notes, photos and records you add are visible to you and to your athlete — not to your gym, unless you choose to share them.
Co-guardians are separate.If an athlete has two guardians, what one guardian writes privately is not visible to the other. Each guardian’s space is their own. This includes purchases: if one guardian orders a yearbook, the other guardian is not shown that order, the shipping address, or the amount.
The athlete is the union point.The athlete is the one person who can see across both guardians’ spaces, because the record is theirs.
Your gym sees what your gym creates, plus anything you explicitly choose to share with them. If a gym orders yearbooks for its athletes, that order belongs to the gym — the gym decides what to tell its families about it.
Sharing is always a choice you make. Nothing moves between these spaces by default.
6. How we protect your information
- Data is encrypted in transit and at rest.
- Photos and videos are stored in private storage — they are not publicly accessible on the internet.
- Access to family data is enforced at the database level, not just in the app. Every table carries row-level security rules, so a request that should not see your data is refused by the database itself.
- Multi-factor authentication is available on your account.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your data, we will tell you.
7. How long we keep information
We keep information only as long as we need it for the purpose it was collected. We do not retain children’s personal information indefinitely.
| What | How long we keep it | Why |
|---|---|---|
| The athlete’s record — skills, results, milestones, notes, photos | While the account is open | The record is the product |
| Everything above, after you close the account | Deleted within 30 days | A short window so an accidental closure can be undone |
| Everything above, after you request deletion | Deletion begins immediately and completes within 7 days | A deletion request is not a closure — it is an instruction |
| Purchased yearbooks | Kept in your profile while your account is open, so you can re-download or re-order. You can delete any of them yourself at any time | You paid for them |
| Order and payment records | 7 years | Required for tax and accounting |
| Server and sign-in logs | 90 days | Security and fault diagnosis |
| Error reports | 90 days | Diagnosing and fixing faults |
Order records are minimized. After your account is closed, what we keep for tax purposes is the transaction — order number, date, amount and purchaser — not your athlete’s record, photos, or personal details.
If you close your account and later come back
Once the deletion window above has passed, your athlete’s record is permanently gone. We cannot restore it, and returning to Athelos means starting a new record from scratch.
We know that is a hard consequence for a keepsake product, so:
- Export first. Before you close an account, download a complete copy of your athlete’s record. Section 8 explains how.
- We will remind you of this before a closure is finalized.
Keeping a child’s record indefinitely on the chance they might return is exactly what the law prohibits, and we would rather tell you plainly than quietly retain it.
8. Your rights
Whatever state you live in, we extend these rights to every Athelos family:
- Access — get a copy of what we hold
- Correct — fix anything wrong
- Delete — have it removed
- Port — take it with you in a usable format
- Object — tell us to stop
We will never charge you for exercising these rights, and we will never treat you differently for it.
How to delete your account or your data
- In the app — open Privacy & Data from the menu, then choose Delete my account or Delete athlete data. This deletes your account and your family’s records on the timeframes in section 7.
- On the web — you can request deletion at athelos.net/delete-account without signing in to an app.
- By email — support@athelos.net
9. Changes to this policy
If we change this policy in a way that materially affects how we handle your family’s information, we will tell you directly — by email, and in the app — before the change takes effect. For changes affecting children’s information, we will obtain fresh parental consent where the law requires it.
We will also update this policy before enabling any new service provider that would receive your information — not after.
10. Contact us
support@athelos.net
Dogwood Ventures LLC · Horace, North Dakota
Support is provided online.