Legal · Privacy

Privacy Policy

Last updated: May 2026 · 25 Alpha LLC · pryze.ai

Privacy Commitment

PRYZE™ is operated by 25 Alpha LLC, a Delaware limited liability company. We never sell your data. We never use advertising trackers. Children under 13 are protected by Verifiable Parental Consent before any data is collected. This policy tells you exactly what we collect, why, and how you control it.

1. Who We Are

25 Alpha LLC (“25 Alpha,” “we,” “us,” or “our”) operates pryze.ai and the PRYZE™ platform. Our principal address is Dover, Delaware, United States. Questions about this policy: info@25alpha.ai

2. Data We Collect by Tier

PRYZE™ has four athlete tiers. Data collection is minimal and limited to what is needed for each tier's features.

Explorer (Pre-K through 5th Grade)

Requires verifiable parental consent (VPC) for all athletes — age group is under 13

First name and last name
Sport selection (up to 4 sports)
School name
Graduation year
U.S. state
Parent or guardian email address (required for COPPA VPC)
Birth month and year only — never full date of birth

No home address. No phone number. No school email. No academic records. No financial data.

Foundation (6th through 8th Grade)

Athletes who are under 13 require VPC before any data is collected

All Explorer tier data above
School email address (optional — for Verified badge)
Personal email address (for account verification)
Sports history and athletic bio (optional)

No academic records. No financial data. No home address. No phone number.

Recruit (9th through 12th Grade)

Athletes 14 and older. Parental consent required for athletes under 18 for premium features

All Foundation tier data above
Academic data — from parent-uploaded documents only (transcripts, report cards)
SAT/ACT scores (self-reported or from parent uploads)
Target school list
Athletic performance data (self-reported or parent-uploaded)
Highlight video (optional)
Coach contact preferences

We never connect to school databases or student information systems. Parent upload only.

Commit (College Athletes)

College athletes 18 and older

All Recruit tier data above
College enrollment status
NIL interest and category preferences
Social media handles (optional, for NIL matching)
Follower counts (self-reported, for NIL opportunity matching)

No financial account information. No SSN or tax ID — NIL Go submissions are made by the athlete directly.

What We Never Collect — Any Tier

Full date of birth · Home address · Phone number · Social security number · Bank account or credit card numbers · Government ID · Location data · Browsing history outside pryze.ai

3. COPPA Compliance — Children Under 13

PRYZE™ serves athletes as young as Pre-K (approximately age 4). We comply with the Children's Online Privacy Protection Act (COPPA) and the FTC's 2025 COPPA Rule amendments in full.

Verifiable Parental Consent (VPC): When an athlete indicates they are under 13, the registration flow immediately gates on parent/guardian consent. We collect a parent or guardian email address and send a consent verification email. No profile data is stored, no subdomain is reserved, and no account is created until a parent explicitly approves via that verification link. VPC must be obtained before any data collection begins.

What we collect from under-13 athletes after VPC: First name, last name, sport, school, graduation year, and U.S. state only. We never collect full date of birth, home address, phone number, or financial information from any minor.

Default privacy for under-13: Ghost Mode is enabled by default. A coach can see athletic data and fit scores but cannot identify the athlete personally until a parent approves public visibility.

VPC Mechanism — How We Obtain Parental Consent: Verifiable Parental Consent (VPC) is obtained through confirmed parent email verification. When a child under 13 attempts to create a PRYZE profile, we collect only the child's first name, last name, and sport selection — no email address or other contact information is collected from the child. A parent or guardian must provide their email address, to which we send a VPC confirmation link. The parent must click this link within 72 hours to activate the profile. No data beyond the athlete's name and sport is retained until the parent confirms. Parents may revoke consent at any time by contacting info@25alpha.ai with subject line “COPPA Data Deletion Request.” Upon revocation, all data collected from or about the minor will be deleted within 30 days.

Parent contact for COPPA requests: info@25alpha.ai — Subject: “COPPA Request.” We respond within 5 business days.

4. FERPA Statement

PRYZE™ does not integrate with any school database, student information system (SIS), learning management system (LMS), or educational API — ever. This is a locked architectural decision.

All academic data on PRYZE™ (transcripts, report cards, GPA, course completion, test scores) comes exclusively from parent-uploaded documents. Parents control what academic information enters the platform. Athletes and families are never required to upload academic documents.

Because PRYZE™ does not receive data from schools or school officials, we are not a “school official” as defined under FERPA and do not handle school-maintained education records. Families retain full control of any documents they choose to upload, and may delete them at any time.

5. How We Use Your Data

Create and maintain your athlete profile visible to verified college coaches
Run 14 AI intelligence agents that analyze your data to generate fit scores, academic gap analysis, NIL matching, and recruiting intelligence
Send Morning Brief emails with daily recruiting updates (you can unsubscribe at any time)
Generate your unique profile subdomain (firstname-lastname.pryze.ai)
Process billing for premium tiers (via Stripe — we never store full card numbers)
Provide customer support and respond to account requests
Improve platform features using anonymized, aggregated analytics (PostHog, anonymized IDs)

We never: sell your data to any third party, use advertising trackers or third-party pixels, share identifiable athlete data with brands without explicit athlete opt-in, or share data with any school or employer without consent.

6. Data Retention

Active accountsData retained while account is active

After deletion requestAll data deleted within 30 days of verified request

After subscription cancellationData retained for 30 days to allow reactivation, then deleted

Under-13 accounts — after VPC revocationData deleted within 14 days of parent revocation request

Parent-uploaded documentsDeleted immediately upon parent request; never retained after account deletion

Anonymized analyticsMay be retained indefinitely — contains no personally identifiable information

7. Parent and User Rights

All users — and parents of minor users — have the following rights regarding their data:

Access: Request a full export of all data associated with your account
Correction: Request correction of any inaccurate information
Deletion: Request deletion of your account and all associated data (completed within 30 days)
Revoke COPPA consent: Parents may revoke consent for under-13 athletes at any time; data deleted within 14 days
Opt out of Morning Brief: Unsubscribe from daily emails at any time via the unsubscribe link in each email
Restrict coach visibility: Toggle profile visibility to Private, Coaches Only, or Public at any time in your dashboard
Portability: Request your data in a machine-readable format (JSON or CSV)

To exercise any right: email info@25alpha.ai with your name and request. We respond within 5 business days.

8. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
Right to delete personal information we hold about you
Right to correct inaccurate personal information
Right to opt-out of sale or sharing (we do not sell or share for cross-context behavioral advertising)
Right to limit use of sensitive personal information
Right to non-discrimination for exercising CCPA rights

To submit a CCPA request: email info@25alpha.ai. We do not sell personal information and have not done so in the preceding 12 months.

9. Data Security

We implement defense-in-depth security across every layer of the platform:

All data encrypted in transit (TLS 1.3) and at rest (AES-256)
Row-level security (RLS) on every database table — users access only their own data
API secrets stored in environment vault, never in source code
Cloudflare DDoS protection and bot management
Security reviews required before every major platform release
No advertising trackers, no third-party pixels, no data brokers

If you discover a security vulnerability in PRYZE™, please disclose it responsibly to info@25alpha.ai.

10. Cookies and Analytics

PRYZE™ uses a minimal, privacy-respecting analytics stack. We use PostHog with anonymized user IDs. We do not use Google Analytics, Meta Pixel, or any other advertising tracking technology.

We use session cookies strictly necessary for authentication and platform functionality. We do not use persistent tracking cookies, third-party advertising cookies, or cross-site tracking.

11. Changes to This Policy

We will post updated policies at pryze.ai/privacy with a new “Last Updated” date. For material changes affecting children under 13, we will email parents directly and require renewed VPC before continuing data collection. Continued use of the platform after notice constitutes acceptance of the revised policy.

12. Contact

25 Alpha LLC — Privacy Contact

Email: info@25alpha.ai

Subject line for privacy requests: “Privacy Request”

Response time: within 5 business days