Privacy Policy

Scour collects information that enables us to provide, secure, and improve our recruiting platform for student-athletes. The specific categories include:

Identity and Contact Details

• First and last name, preferred name, and display name
• Email address, phone number, and verification status
• Date of birth, graduation year, gender/team designation
• Parent or guardian contact information when provided

Athlete Profile and Academic Data

• Sport, position, team type, and dominant hand
• Height, weight, physical metrics, and athletic statistics
• NCAA or eligibility identifiers, student-athlete type
• Academic records such as GPA, SAT/ACT, coursework, majors
• Highlights, bios, links to external portfolios or videos

Media, Attachments, and Generated Content

• Avatar images, highlight videos, thumbnails, and supporting documents you upload
• AI-generated draft emails, notes, templates, and messaging content you choose to create or store
• Attachments included in emails sent through connected Gmail accounts

Usage and Interaction Information

• Swipe actions, saved programs, and match history
• Search filters, viewed programs, notes, and calendar events
• Reminder settings, push-token identifiers, and notification preferences
• Log data such as IP address, device type, OS version, app version, crash reports, and performance signals

Authentication and Security Data

• Credentials, tokens, and identifiers issued by Supabase, Sign in with Apple, and Google Sign-In
• Session identifiers, refresh tokens, and authorization logs required to keep you signed in securely
• Device-level approvals for local reminders and alerts

Subscription and Transaction Data

• Apple App Store transaction receipts, product identifiers, and status changes managed by RevenueCat
• Swipe credit balances, grants, and redemption history
• Promotional codes, trial eligibility, and referral usage

Coach and Communication Data

• Coach contact information you search for, import, or save to outreach lists
• Email metadata generated when you send messages via Gmail (recipient, subject, timestamps)
• Delivery status, error logs, or bounce notices used to troubleshoot messaging

We use collected data to operate, secure, and enhance the Platform in the following ways:

• Create and maintain athlete profiles and recruiting tools
• Match athletes with programs, surface recommendations, and personalize feeds
• Generate AI-assisted draft emails, summaries, and outreach materials when requested
• Facilitate communication and coach contact management via Gmail API integrations
• Sync calendars, reminders, and notifications across devices you authorize
• Provide customer support, detect fraud, and enforce our Terms of Service
• Analyze aggregated usage trends to improve features and plan roadmap investments
• Process payments, manage subscriptions, and grant swipe credits through the App Store
• Comply with legal obligations, respond to lawful requests, and maintain recruiting compliance

Scour does not sell personal information. We share data only when necessary to provide the Platform or as required by law:

College Coaches and Programs

When you express interest, match with a program, or opt to send communications, we share the relevant profile data, videos, academic metrics, and contact details you authorize so coaches can evaluate you.

Service Providers and Infrastructure Partners

• Supabase for authentication, data storage, and media CDN
• RevenueCat and Apple for subscription billing and entitlements
• Google Sign-In, Sign in with Apple, and Firebase tooling
• Gmail API for sending messages you authorize, including attachments
• OpenAI for generating on-demand email drafts based on the prompts you supply
• Analytics, crash reporting, and push notification providers that help us monitor reliability

Compliance and Safety

We may disclose information if required by subpoena, court order, or legal process; to protect the rights, property, or safety of users; to investigate violations of NCAA or other regulations; or to enforce our agreements.

Aggregated or de-identified insights that cannot reasonably be linked to an individual may be shared publicly or with partners for research and platform improvements.

We implement layered safeguards to protect your data, including encrypted network connections (HTTPS/TLS), role-based access controls, audit logging, and regular vulnerability reviews. Content is hosted in secure Supabase infrastructure located in the United States. Access to personal data is limited to personnel who require it to perform their job duties.

Despite our efforts, no system can guarantee 100% security. We encourage you to use unique passwords, enable device security features, and contact us immediately if you suspect unauthorized access.

When you request an AI-generated draft or summary, the relevant prompt (including portions of your profile, program details, and optional overrides) is sent securely to OpenAI for processing. We mask identifiable fields where possible and replace placeholders with real values only after the response returns. Generated drafts are stored in your account so you can edit, resend, or delete them at any time.

OpenAI may temporarily retain request data for abuse monitoring as described in its privacy documentation. We do not permit AI models to train on your content.

If you connect a Gmail account, Scour sends emails only when you explicitly instruct us, and the messages come from your email address. We store delivery status and drafts to help you track outreach. You may revoke access at any time through Google Account settings.

Calendar events and reminders are synced to your account using Supabase. Local notifications are scheduled on your device and can be managed in iOS Settings. Push notification tokens are used solely to deliver recruiting updates, reminders, and product announcements you opt into.

Depending on your location, you may have rights to access, correct, delete, or export your personal information. Within the app you can:

• View and update profile details, academic data, and media
• Download highlights, calendars, and outreach notes
• Manage notification preferences, swipe purchases, and email connections
• Delete calendar events, attachments, and saved programs
• Deactivate or delete your account from Settings

For additional requests, please contact hello@tryscour.co. We may need to verify your identity before fulfilling a request. Parents or guardians can request access or deletion on behalf of a minor account holder.

We retain information for as long as necessary to provide the Platform, comply with legal obligations, and resolve disputes. Typical retention timelines include:

• Account profile data, calendar events, and swipe history: retained until you delete your account or request removal
• AI drafts and outreach notes: retained until you delete them or clear your history
• Purchase records and subscription status: retained for the period required by tax, accounting, and platform policies
• Log files and device diagnostics: typically kept for up to 24 months and then aggregated or deleted
• Backups: routinely cycled and purged according to our disaster recovery schedule

When you delete content, it is removed from active systems but may persist in backups for a limited time before being overwritten.

Scour is operated from the United States. By using the Platform, you understand that your information may be transferred to, and processed in, the United States or other countries where our providers operate. We rely on Standard Contractual Clauses and other safeguards when transferring personal data from the European Economic Area, United Kingdom, or Switzerland.

Scour is built for high school and collegiate recruiting. Users under 18 must have a parent or guardian review and approve their participation. We take additional precautions for minor accounts by limiting data sharing, prompting for guardian contact information, and offering tools to delete data quickly upon request. We do not knowingly collect information from children under 13 without verifiable parental consent.

We may update this Privacy Policy to reflect product changes, legal requirements, or new safeguards. Material changes will be announced through in-app notices, email, or other reasonable channels, and will include a revised "Last updated" date. Continued use of the Platform after updates take effect constitutes acceptance.

For privacy questions, requests, or concerns, contact us at: