Privacy Policy

1. Overview

Effective date: September 5, 2026.

Rooted Performance Systems LLC, a California limited liability company doing business as Laneside ("Laneside," "we," "us"), provides software for coaches and athletes to manage rosters, training programs, calendars, readiness, related wellness context, and coach storefronts for selling coaching products or services. This Privacy Policy describes our practices when you use our website and applications (the "Service").

By creating an account or using the Service, you acknowledge this Policy. If you do not agree, do not use the Service. Our Terms of Service also apply.

2. Who is responsible for athlete data

Coaches and organizations that invite athletes decide what information to collect for their program and are responsible for having a lawful basis to collect and share athlete information with us, including health and wellness information (for example, school or club permission, team policies, and parental or guardian consent where required).

We process that information to provide the Service to the coach and athletes on that program. Athletes who create accounts or join a team with an invite code should only do so with permission from their coach, parent, or guardian as applicable.

3. Information we collect

We collect information you, your organization, and connected services provide, including:

• Account data: name, email, password hash, role (coach, athlete, or staff), and profile settings.
• Team and roster data: athlete names, contact details, date of birth, sex, grade, height, weight and other body measurements, apparel sizes, team assignments, training status, photos, and notes coaches enter.
• Training data: workouts, programs, calendars, session logs, times, tests, chat messages, journals, habits, files you upload, and similar coaching records.
• Health and wellness data: described in the next section.
• Billing data for coaches: subscription status and Stripe customer identifiers (payment card details are processed by Stripe, not stored by us).
• Store purchase data: buyer contact details, order and entitlement records, legal-document acceptances, and Stripe payment identifiers for purchases made through a coach storefront (card details are processed by Stripe).
• Technical data: device/browser type, IP address, logs, and cookies or similar technologies needed to operate and secure the Service.

4. Health and wellness information

The Service is designed to collect training-related health and wellness information so coaches can program and athletes can track recovery. This information may be considered health, medical, or sensitive personal information under some laws. We collect it only when you or your authorized coach provide it, or when you connect a device that sends it to us.

• Self-reported check-ins, such as sleep quality and duration, muscle soreness (including body-region maps and notes), mood, energy, stress, nutrition and hydration, readiness tags, free-text notes, and calculated readiness scores.
• Food logs: fatsecret food and serving identifiers, amounts, meal slot, and date. We fetch nutrition facts from the fatsecret Platform API to display calories and macros; coaches and authorized staff on the same program can see that log.
• Physiological and recovery metrics from connected wearables you authorize (currently Oura, Fitbit, and Whoop), which may include sleep, steps, recovery scores, resting heart rate, and heart-rate variability (for example RMSSD). We receive what those providers send under the scopes you approve; we do not take over the device.
• Other training-health context your program uses, which may include body-composition or bodyweight logs, injury or limitation notes, athletic-trainer or practice-clearance notes, reaction-time or tap-test results, and similar entries.
• We do not use health and wellness information to uniquely identify you with a biometric template (we do not enroll face, fingerprint, or iris scans). Heart-rate and similar metrics are used as training and recovery context, not as an identity login.

5. How we use information

We use information to:

• Provide, maintain, and improve the Service, including readiness scoring, trends, prefill from wearables, and coach dashboards.
• Show athlete health and training information to that athlete and to coaches and authorized staff on the same program.
• Authenticate users and enforce account and roster limits.
• Process subscriptions and send transactional messages (e.g., receipts, security alerts).
• Process coach storefront checkouts, order fulfillment records, and related purchase receipts.
• Respond to support requests and feedback.
• Monitor abuse, fraud, and security incidents.
• Comply with law and enforce our Terms of Service.

6. No sale of health data; no ads from it

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use health and wellness information to train public generative-AI models or to target ads. We use sensitive health and wellness information only to provide the Service you (or your coach, with required authority) requested, to secure it, and to comply with law.

7. Legal bases (where applicable)

Depending on your location, we rely on performance of a contract (providing the Service), legitimate interests (security, product improvement that does not override your rights), consent (including when you connect a wearable or submit optional check-ins), and legal obligations.

Where a law treats health or wellness data as a special or sensitive category (for example the GDPR), we process it to provide the Service you requested, based on your explicit consent and/or the necessity of processing for that service, and the coach's authority to enroll you. You may withdraw consent for optional features (such as wearables) without affecting processing needed to keep a basic account until it is deleted.

8. How we share information

We share information only as follows:

• With your team: coaches and authorized staff on the same program can access roster, training, readiness, and health and wellness data for athletes on that program. Athletes can access data shared with them. Chat and files follow the same team access rules.
• Wearable providers: when you connect Oura, Fitbit, or Whoop, those companies receive the fact of the connection and process data under their own policies. We receive metrics they return.
• Service providers ("subprocessors") who help us run the Service, under contractual obligations, including hosting/database (Supabase), payments (Stripe), and email or analytics providers if enabled. They are not permitted to use your data for their own marketing.
• When required by law, legal process, or to protect rights, safety, and security.
• In connection with a merger, acquisition, or asset sale, with notice where required. Health and wellness information would transfer only as part of the Service, subject to this Policy or a successor policy with equal or stronger protections.

9. Not a HIPAA covered entity

Laneside is a training-software company. We are not a healthcare provider, health plan, or healthcare clearinghouse. Except where we have signed a separate Business Associate Agreement with a HIPAA covered entity, information in the Service is not "protected health information" (PHI) under HIPAA, even if it relates to sleep, heart rate, soreness, mood, injury notes, or similar topics.

If your organization is a covered entity or business associate and needs a BAA, contact us before putting PHI in the Service. Do not assume the standard Service is HIPAA-compliant.

10. Children and students

The Service may be used for youth and high-school athletics. We do not knowingly collect personal information from children under 13 without verifiable parental consent as required by COPPA and similar laws. If you believe we have collected information from a child under 13 without permission, contact us and we will delete it or obtain consent as required.

For athletes 13 or older who are still minors, coaches and parents must ensure required consents are in place before health, wellness, or roster information is entered. Coaches and schools must have authority to enter minor athlete information and to invite athletes to the Service.

If you are a school or educational agency, you are responsible for determining whether FERPA or state student-privacy laws apply and for providing any required notices. We process student information only to provide the Service as your vendor, not to use it for our own unrelated commercial purposes.

11. Data retention

We retain information while your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Health and wellness history (check-ins, wearable days, tests) is kept so athletes and coaches can see trends, until the account or those records are deleted.

You may request deletion of your account or specific data subject to our legal retention requirements and backup cycles. Coaches who delete an athlete from a roster may still have copies in their own exports or downloads; we delete our primary copies according to the request and our backup window.

12. Security

We use administrative, technical, and organizational measures appropriate to the nature of the data, including encryption in transit, access controls, and row-level security in our database. Health and wellness data is stored with the same production controls as other athlete records and is limited to the athlete and authorized program staff via those controls. No method of transmission or storage is 100% secure.

13. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Contact coach@laneside.co to submit a request. We may verify your identity before responding. Coaches may need to approve or relay requests that affect team records they control.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by California law. California residents may also request that we limit use of sensitive personal information; we already limit health and wellness information to providing the Service as described above.

You can update much of your profile in the app, disconnect wearables, and stop submitting check-ins. You can delete your account in Account settings. Coaches can remove athletes from a roster; athletes can also contact their coach or us for account help.

14. International users

We are based in the United States. If you access the Service from other regions, your information (including health and wellness information) may be processed in the U.S. and other countries where our providers operate, which may have different data-protection laws.

15. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new effective date. Material changes may be notified via the Service or email where appropriate.

16. Contact

Rooted Performance Systems LLC · Laneside

Contact: coach@laneside.co

Governing law for disputes related to privacy is described in our Terms of Service (California law applies to the extent stated there).