How we handle information.

Information we collect

We may collect contact details submitted through email or demo requests, organization and user account information, product usage information, athlete profile and testing information supplied by customer organizations, and technical data such as browser, device, log, and security event information.

Depending on the features enabled by a customer organization, athlete and performance information may include name, email address, account role, team or subgroup membership, date of birth, sex where needed for performance standards or norms, sport, position, training history, testing and assessment data, readiness check-ins, pain or soreness information, program history, calendar or scheduling information, and related notes entered by coaches, clinicians, administrators, or athletes.

Google user data

Starke Force may offer Google-connected features for users who choose to authorize them, such as Google Sign-In, Google Calendar scheduling, Google Workspace calendar coordination, and import or export workflows selected by a user or customer organization. We access Google user data only after authorization through Google’s consent process and only for the scopes and features you enable.

Google user data we access. Depending on the Google permissions granted, Starke Force may access basic Google account information such as your name, email address, and profile identifier; Google Calendar information such as calendar names, calendar identifiers, events, event titles, event times, attendees, locations, descriptions, availability, recurrence, and event metadata; and Google Drive or Google Workspace files, documents, spreadsheets, or metadata that you explicitly select, create, import, export, or authorize for a Starke Force workflow.

How we use Google user data. Starke Force uses Google user data only to provide or improve user-facing features requested by you or your organization. These uses may include signing you in, connecting the correct user account, showing relevant calendar availability, creating or updating scheduling records, creating, updating, or deleting calendar events at your direction, importing or exporting selected files or reports, sending service notifications, providing customer support, troubleshooting errors, maintaining security, and keeping audit records.

How we store Google user data. Starke Force may store authorized Google account identifiers, email addresses, calendar identifiers, event identifiers, selected event details, selected file metadata, imported/exported content, OAuth tokens, refresh tokens, sync status, audit logs, and related operational records when needed to provide the connected feature. OAuth credentials and tokens are treated as sensitive credentials and are stored using access controls designed to prevent unauthorized access.

How we protect Google user data. We use reasonable administrative, technical, and organizational safeguards designed to protect Google user data against unauthorized or unlawful access, use, destruction, loss, alteration, or disclosure. These safeguards include access controls, role-based permissions, secure credential handling, encryption in transit where supported, encryption at rest where supported by our infrastructure and service providers, security monitoring, operational logging, and limiting access to personnel and service providers with a need to support the requested feature.

How we retain and delete Google user data. We keep Google user data only as long as needed to provide the connected feature, maintain security and audit records, comply with legal or contractual obligations, resolve disputes, or follow customer organization instructions. When Google user data is no longer needed, we delete or de-identify it subject to backup retention, audit logs, security records, legal requirements, and customer organization controls. If you disconnect a Google-connected feature, Starke Force stops new access to that Google user data unless you reauthorize access.

How we share, transfer, or disclose Google user data. We do not sell Google user data. We do not transfer Google user data to third parties except as necessary to provide or improve user-facing Starke Force features that you or your organization request and consent to, to maintain security, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining explicit prior consent where required. We do not transfer Google user data to advertising platforms, data brokers, information resellers, or parties using the data for surveillance, credit-worthiness, lending, targeted advertising, personalized advertising, retargeting, interest-based advertising, or generalized AI or ML model training.

Human access to Google user data. Starke Force personnel do not read Google user data unless you or your organization ask us to help with a specific support issue, access is necessary for security or abuse investigation, access is necessary to comply with applicable law, or the data is aggregated or de-identified for internal operations consistent with applicable privacy requirements.

Starke Force employees, agents, contractors, service providers, and successors must handle Google user data consistently with this policy. Starke Force’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Starke Force does not use Google user data, including Google Workspace API data, to develop, improve, or train generalized, non-personalized, or foundation artificial intelligence or machine learning models.

How we use information

We use information to provide and improve Starke Force, respond to inquiries, support customer onboarding, operate integrations, maintain security, troubleshoot issues, communicate service updates, generate coach-reviewed recommendations, support scheduling and reporting, and meet legal or contractual obligations.

Athlete and performance data

Customer organizations control the athlete, testing, assessment, and programming data they provide to Starke Force. Starke Force processes that data to deliver the product, including analytics, triage, athlete records, reporting, programming workflows, team or subgroup workflows, and related support.

Starke Force does not provide autonomous medical diagnosis or unsupervised clinical treatment. Coaches, clinicians, and customer organizations remain responsible for training, health, and return-to-play decisions.

SMS and text messaging

If you opt in to SMS communications, we may use your phone number to send service, scheduling, onboarding, support, or product-related messages. Message frequency may vary. Message and data rates may apply. Reply STOP to opt out and HELP for help. We do not sell or share SMS opt-in data with third parties for their marketing.

Sharing, transfers, and disclosure

We do not sell personal information. We do not sell Google user data or transfer Google user data to third parties for targeted advertising, personalized advertising, retargeting, interest-based advertising, data-broker sales, information-reseller services, credit-worthiness decisions, lending purposes, or training generalized AI or ML models.

We may share information with service providers that help operate the website, application, communications, hosting, analytics, security, support, scheduling, and integrations. These providers may process information only as needed to provide services to Starke Force or our customers. We may also disclose information when required by law, to protect rights or safety, to investigate abuse or security incidents, with your direction or consent, or as part of a business transfer subject to appropriate confidentiality and data-protection terms.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, role-based permissions, secure credential handling, encryption in transit where supported, security monitoring, and operational logging. No system is perfectly secure, so customers should use strong authentication, appropriate role assignments, and their own data governance practices.

Retention and deletion

We keep information as long as needed to provide the product, support customer relationships, satisfy contractual or legal duties, resolve disputes, maintain security records, and operate authorized integrations. We delete or de-identify information when it is no longer needed for those purposes, subject to customer instructions, legal requirements, backups, audit logs, and legitimate security needs.

You may disconnect Google-connected features through your Google account settings or through available Starke Force account or organization settings. After disconnection, Starke Force will stop new access to that Google user data unless access is reauthorized. Previously imported data may remain in Starke Force only as needed to provide the service, preserve records requested by your organization, comply with legal or contractual obligations, or maintain security and audit logs.

Your choices

You may contact us to request access, correction, deletion, or other privacy support. Some requests may need to be handled through the customer organization that controls the relevant athlete, account, Google-connected, or organization data.

Contact

Privacy questions can be sent to hello@starke-force.com.

This website policy is a practical baseline and should be reviewed by counsel before enterprise procurement, regulated-data commitments, or Google OAuth verification submission.