Consumer Health Data Privacy Notice

1. Scope

This notice applies when information processed through ProspectHQ is linked or reasonably linkable to a person and identifies or can be used to infer that person's physical or mental health status under applicable consumer health privacy law. It does not replace the general Privacy Policy.

2. Categories collected

Depending on what a user chooses to submit, consumer health data may include height, weight, wingspan, vertical jump, sprint times, strength-test results, throwing velocity, exit velocity, bat-speed or swing measurements, workout records, physical-development trends, injury or recovery details included in notes, and photos, video, audio, or AI prompts from which physical condition or performance may be inferred.

ProspectHQ is not intended to store medical charts, diagnoses, prescriptions, insurance records, genetic information, precise health-service location information, or government identifiers. Please do not upload that information.

3. Purposes for collection and use

• Create the athlete development record requested by the account holder or organization.
• Display measurements and trends to authorized users.
• Associate supporting video with a workout or performance session.
• Generate an analysis, summary, or recommendation when an authorized user requests an AI feature.
• Secure, maintain, troubleshoot, and support the service.
• Comply with law and protect users, athletes, and the platform.

We will not collect, use, or share additional categories of consumer health data for materially different purposes without providing required notice and obtaining consent where applicable.

4. Sources

Sources include the individual account holder; a parent or guardian; an athlete using an authorized account; an authorized coach, trainer, or organization administrator; supported file imports; connected or embedded tools selected by the user; and measurements or media manually entered or uploaded to ProspectHQ.

5. Categories shared and recipients

Consumer health data may be shared with:

• Authorized organization owners, administrators, coaches, guardians, athletes, or analysts according to role and player assignment.
• Public viewers only when an authorized user deliberately makes the relevant profile, module, metric, image, or video public.
• Hosting, database, and object-storage providers, including Railway or compatible infrastructure, to store and deliver the service.
• OpenAI when an authorized user requests an AI feature that requires selected performance context.
• ElevenLabs when an authorized user requests spoken output; we aim to provide the generated text needed for speech rather than the complete athlete record.
• Security, support, or legal recipients when reasonably necessary to protect users, comply with law, or respond to a valid request.

ProspectHQ has no affiliates with which it intentionally shares consumer health data as of the effective date. We do not sell consumer health data. We do not share it for targeted advertising.

6. Your controls and rights

Subject to applicable law and verification, a consumer or authorized parent or guardian may confirm whether ProspectHQ collects or shares consumer health data; access that data; obtain a copy; request correction or deletion; withdraw consent for future collection or sharing; and appeal a denied request.

Profile and module visibility can be managed through supported account controls. To submit another request or withdraw consent, use the contact information below. Withdrawal does not affect processing already completed and may prevent ProspectHQ from providing features that require the data.

7. Retention and security

We retain consumer health data only as reasonably necessary for the purposes described above, at the direction of the authorized account or organization, and as needed for security, disputes, or legal obligations. We use role-based access, tenant isolation, authenticated controls, encryption in transit, restricted credentials, and other safeguards designed to protect the information.

8. Requests and appeals

Include “Consumer Health Data Request” in the subject line and identify the relevant account, organization, athlete, and your authority to act. If we deny a request, you may appeal by replying with “Appeal” and the reason you believe the decision should be reconsidered. We will respond within the period required by applicable law.