COPPA Notice

1. About This Notice

This COPPA Notice is issued by 25 Alpha LLC (“25 Alpha,” “we,” or “us”), operator of pryze.ai and the PRYZE™ platform. It explains our practices regarding the collection, use, and disclosure of personal information from children under the age of 13 (“children”) in compliance with:

• →Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.
• →FTC's COPPA Rule, 16 C.F.R. Part 312, including 2025 amendments
• →FTC guidance on Verifiable Parental Consent (VPC) methods

2. Does PRYZE™ Collect Children's Information?

Yes, subject to your prior consent. PRYZE™ serves athletes from Pre-K through college, so children under 13 may register for the Explorer tier (Pre-K through 5th grade) and, in some cases, the Foundation tier (6th through 8th grade).

We do not collect any personal information from a child under 13 until a parent or guardian has provided Verifiable Parental Consent (VPC). If we discover that a child under 13 has provided information without VPC, we delete that information immediately.

3. What Data We Collect From Children Under 13

After you have provided VPC, we collect the following limited information:

4. How We Obtain Verifiable Parental Consent (VPC)

We use the email-plus verification method for VPC, consistent with FTC guidance:

1. 1

   Age trigger

   The athlete enters a birth year that indicates they are under 13. The platform detects this immediately.

2. 2

   Registration halts

   No personal information beyond the parent email address is collected. No account is created. No subdomain is reserved. All in-progress data is discarded if the parent does not complete VPC within 72 hours.

3. 3

   Parent email collected

   We ask for the parent or guardian's email address. This is the only data point collected before consent.

4. 4

   Consent email sent

   We immediately send a consent request to the parent email. The email contains: a description of the information we intend to collect, a link to this COPPA Notice, a link to our Privacy Policy and Terms of Service, and a secure consent link.

5. 5

   Parent reviews and approves

   The parent clicks the consent link, reviews all disclosures, and clicks to confirm consent. The link is single-use and expires after 72 hours.

6. 6

   Account created

   Only after the parent clicks confirm do we create the child's account and collect the limited data listed in Section 3 above.

7. 7

   Parent dashboard access

   The consenting parent automatically receives a linked parent account with full visibility into and control over the child's profile.

5. How We Use Children's Data

We use the limited information collected from children under 13 only to:

• →Create and display the athlete's profile to verified college coaches (with Ghost Mode privacy protections)
• →Enable platform features appropriate for the Explorer or Foundation tier
• →Send account confirmation and platform update emails to the parent account
• →Enable the school leaderboard and referral features
• →Provide the AI intelligence features available at the Explorer tier

We do not use children's data for: advertising targeting, sale to third parties, training of external AI models, or any purpose not listed above.

6. Who We Share Children's Data With

We share limited children's profile data (name, sport, school, graduation year, state) with verified college coaches and recruiters who have active accounts on PRYZE™. Coaches are verified by school email address.

By default, Ghost Mode is enabled for all athletes under 13. In Ghost Mode, coaches can see athletic data and fit scores but cannot see the child's full name, school, or photo until a parent approves public visibility via the Parent Dashboard.

We do not share children's data with advertisers, data brokers, marketing companies, or any third party for commercial purposes. We use Amazon Web Services (hosting and encrypted data storage), Stripe (payment processing), Resend (transactional email delivery), Cloudflare (DNS and content delivery), and PostHog (product analytics) as infrastructure providers under strict data processing agreements. These providers do not use children's data for their own purposes.

7. Parent and Guardian Rights

As a parent or legal guardian of a child registered on PRYZE™, you have the following rights at any time, at no charge:

We will respond to all parent rights requests within 5 business days. We may ask for verification of your identity before completing a request to protect your child's account security.

8. Security for Children's Data

Children's data receives the highest level of protection in our platform:

• →Ghost Mode enabled by default — full name and school hidden from public coach search
• →Separate data classification in our database for under-13 records
• →Parent email required to receive any communication about the account
• →No advertising trackers, no third-party pixels, no behavioral targeting for any user
• →All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• →Row-level security ensures no user can access another user's data

9. Contact for COPPA and Parent Requests

10. Changes to This COPPA Notice

We will post any updates to this COPPA Notice at pryze.ai/coppa with a new “Last Updated” date. For material changes affecting how we handle children's data, we will send a direct email to the parent or guardian of record and require renewed VPC before any new data collection begins under the revised practices.