RepLogix Information Sharing Policy

RepLogix does not sell, rent, or lease athlete, coach, team, or organizational data to any third party for monetary or other valuable consideration.

We do not sell student personally identifiable information (PII) as defined by FERPA or personal information from children under 13 as defined by COPPA. We do not use student data for targeted advertising, behavioral advertising, or commercial profiling of students.

RepLogix may share limited categories of information in the circumstances described in this policy. These categories may include:

• Account information (name, email, role, organization name)
• Subscription and billing status (plan type, payment processor identifiers — not full card numbers)
• Roster, attendance, and performance data entered by authorized users, shared within the same organization account
• Device and usage information for security, troubleshooting, and analytics
• Communications sent to RepLogix for support purposes

If your account is part of a team, school, club, district, or organizational plan, RepLogix may share information among authorized users within that organization. For example:

• A district administrator may view rosters, reports, and data across schools within the district plan
• A team owner or admin may view and manage data entered by coaches on their account
• Invited users may access features and data permitted by the account owner or admin

The account owner or administrator is responsible for managing user access, permissions, and seat assignments within their organization.

RepLogix engages third-party service providers to help operate, host, secure, and support the Service. These providers may access or process data solely to perform services on our behalf. Current categories of service providers include:

• Hosting and Infrastructure: Base44 platform (SOC 2 Type II and ISO 27001 certified) and underlying cloud hosting providers — all servers located in the United States
• Payment Processing: Stripe (PCI DSS certified) — processes subscription payments; RepLogix does not store full credit card numbers
• Authentication: Platform-managed authentication services for login, OTP verification, and password resets
• Communications: Email and SMS providers for transactional messages, support replies, and admin notifications
• Analytics and Monitoring: Tools for usage analytics, error logging, and performance monitoring

Service providers are contractually obligated to protect data and are permitted to use it only for the purposes of providing services to RepLogix. They are prohibited from selling or using data for their own commercial purposes.

RepLogix may disclose information when required to do so by law, subpoena, court order, government regulation, or legal process. We may also disclose information to:

• Protect the rights, property, safety, or security of RepLogix, our users, athletes, or the public
• Investigate or prevent fraud, security incidents, or misuse of the Service
• Enforce our Terms of Service, Privacy Policy, or other agreements
• Respond to lawful requests from public authorities, including school districts exercising their rights under FERPA or applicable data sharing agreements

When RepLogix is used by a school, district, or educational institution, the following principles apply:

• The school or district owns the data it enters into RepLogix (see our Terms of Service — User Data section)
• RepLogix acts as a "school official" under FERPA when handling student education records on behalf of the school, with a legitimate educational interest in the data
• RepLogix does not use student data for any purpose other than providing, maintaining, and improving the Service for the school or district
• RepLogix does not combine student data with data from other sources to create profiles for non-educational purposes
• Upon written request, RepLogix will return or delete student data as required by the school's or district's data sharing agreement, consistent with our Data Retention Policy

RepLogix will sign a Data Processing Agreement (DPA) or similar data sharing agreement upon request from qualifying schools and districts during procurement.

In connection with a merger, acquisition, restructuring, sale of assets, or similar business transaction, RepLogix may transfer information to the acquiring or successor entity. We will take reasonable steps to ensure the receiving party honors this Information Sharing Policy and applicable privacy commitments.

RepLogix may use or share de-identified or aggregated data that cannot reasonably be used to identify any individual, athlete, student, coach, or organization. For example, we may share industry benchmark statistics or platform usage trends that do not reveal personal or organizational identities.

RepLogix is hosted on infrastructure located in the United States. If you access the Service from outside the United States, your data will be processed and stored in the United States. We do not knowingly transfer student data to international jurisdictions except as required to provide the Service through our U.S.-based infrastructure providers.

Users, schools, or districts may request information about what data has been shared, with whom, and for what purpose. To submit such a request, contact:

We may need to verify your identity and authority before responding to data sharing requests involving student or organizational data.

We may update this Information Sharing Policy from time to time. When we make material changes, we may notify users through the app, website, email, or account notice. Your continued use of RepLogix after the updated policy becomes effective means you accept the updated policy.