Privacy Policy: Uncommitted University
Effective Date: August 1, 2026 · Last Updated: August 10, 2026
Uncommitted University ("UU," "we," "us," or "our") is a Washington-headquartered company providing athlete branding, recruiting-support, and coach-outreach tools for high school, JUCO, NAIA, and transfer-portal baseball and softball athletes ("Service").
This Policy is written to be read, not to be survived. Where a statute gives you a right, we say what the right is and how to use it. Where we have chosen to do less than the law allows, we say that too.
Quick Links
| If you are looking for | Go to |
|---|---|
| Your rights, and how to use them | Your Rights |
| California privacy notice | CCPA / CPRA |
| Washington consumer health data | Washington notice |
| Nevada | Nevada notice |
| All other state notices | State notices |
| Cookies, and how to change them | Cookie notice |
| Profiles we prepare before sign-up | Section 8 |
| Connecting Gmail or X | Connected accounts |
| Who we share data with | Subprocessors |
| How we secure your data | Security Framework |
| Why we are built this way | Strategic Framework |
Our Binding Commitments
The following are commitments, not aspirations. They apply to every user, in every state and every country, whether or not any law requires them of us. We will not narrow them by a quiet revision; if we ever change one, we will say so directly and prominently, and Section 17 governs how.
- We will never sell your personal information. Not to coaches, not to college programs, not to recruiting services, not to data brokers, not to advertisers, not to anyone, for money or for any other valuable consideration. This is unconditional. Our only revenue is athlete subscriptions.
- We will never share your personal information for cross-context behavioural advertising or targeted advertising, and we run no advertising trackers on any UU property.
- We do not collect health data, and we do not analyse your body, your movement, your injuries, or your recovery.
- We will never perform biometric or biomechanical analysis on your photos or video: no facial recognition, no pose estimation, no kinematic modelling, no identifier templates. If we ever intend to, we will obtain your separate, prior, opt-in consent first, and publish a dedicated consumer health data policy before collecting anything. Silence or continued use will never be treated as consent to that.
- We grant every privacy right in this Policy to every user, regardless of where you live, and we honour Global Privacy Control signals universally.
- Any athlete may delete an unclaimed profile in one click, with no account, no login, and no contact with us, and we will never place friction, a retention offer, or a verification step in front of that.
- We will never use your information to train general-purpose AI models, and we permit no provider to.
- We will never discriminate against you for exercising a privacy right.
By creating an account or using the Service, you agree to the collection and use of information as described here.
1. Scope: Who and What This Covers
This Policy applies to:
- Registered athletes who create or claim an account
- Parents and legal guardians who create or supervise an athlete's account
- Prospective athletes for whom we have prepared a profile that has not yet been claimed (Section 8)
- Visitors to public athlete profile pages and to uncommittedu.com
- Coaches whose professional directory information we hold (Section 7)
It covers our website (uncommittedu.com), our application (app.uncommittedu.com), and the emails we send you.
2. Age Requirements and the 13+ Perimeter
You must be at least 13 years old to use the Service.
We operate a deliberate 13-and-over perimeter. We do not knowingly collect personal information from anyone under 13, we do not prepare athlete profiles for anyone under 13, and the Service is not directed to children under 13. Because we do not collect personal information from children under 13, the verifiable-parental-consent machinery of the Children's Online Privacy Protection Act (COPPA) is not triggered.
This is a design choice, not an accident. Rather than build a consent-collection apparatus around under-13 users, we have excluded that population entirely, which is the stronger privacy position for the child and removes an entire category of risk for everyone.
If you are between 13 and 17, you may use the Service only with the knowledge and permission of a parent or legal guardian, and by using it you confirm you have that permission.
Parents and guardians of users under 18 may at any time review the information we hold about their child, correct it, require its deletion, or require that we stop collecting further information. Write to support@uncommittedu.com. We do not charge for this and we do not require an account.
If we learn we have collected information from someone under 13, we delete it promptly and close any associated account.
Minors are never subject to the following, regardless of age between 13 and 17: sale of their personal information, sharing for cross-context behavioural advertising, targeted advertising, or profiling that produces legal or similarly significant effects. None of these happen to any user, but for minors they are categorically excluded.
3. Information We Collect
3.1 Information you give us directly
| Category | Specific data | Why we hold it |
|---|---|---|
| Account | Name, email address, hashed password, phone number | To create and secure your account |
| Athlete profile | Graduation year, high school, club team, position(s), bats/throws, height, weight, bio, headshot, highlight video links | To build the profile coaches see |
| Performance | Exit velocity, fastball velocity, batting average, ERA, innings pitched, home runs, RBI, and similar sporting statistics | To present your athletic record |
| Academic | GPA, SAT or ACT scores, core-course status (all optional) | To help you assess academic fit and eligibility |
| Eligibility | NCAA or NAIA eligibility number, transfer-portal status, current college | To support eligibility tools and outreach |
| Social | Instagram, X, or other handles you type in | Displayed on your profile so coaches can find you |
| Payment | Billing details, processed by Stripe | To take payment. We never receive or store full card numbers. |
| Your work | Outreach drafts, email signature, saved and target school lists, course progress | So the Service does what you asked it to |
3.2 Information collected automatically
- Usage data: pages viewed, features used, session timestamps, checkout activity
- Device and browser information
- IP address: where we record one for rate-limiting or abuse prevention, we store an irreversible hash, not the address itself
- Cookies and similar technologies (Section 10)
3.3 Coach and program directory information
Coach and program directory data (names, school affiliation, and professional contact details associated with a coaching role) is licensed from a commercial college-coaching-contact data provider. It is not collected from coaches through this Service, and coaches do not sign up for it. See Section 7.
3.4 Information used to prepare athlete profiles before sign-up
For some athletes we assemble a draft profile before that athlete has an account. Only two sources feed it:
- Camp and event registration records belonging to UU. Our founder ran the registration systems and athlete profiles for a baseball and softball camp operation, and these records are UU's own data. They may include the athlete's name, graduation year, school, city and state, position, and a parent or guardian contact address. UU does not operate camps or events.
- Publicly available information about the athlete, obtained by submitting the athlete's name to a commercial search-results service that returns the summary panel a public search engine displays, which we then read.
We do not crawl, scrape, log into, or extract data from recruiting platforms or any other third-party website. We read a public search summary; we do not harvest anyone's site.
Section 8 explains what happens to these profiles and how an athlete removes one instantly.
3.5 Push notifications (optional)
If you opt in, your browser supplies an anonymous subscription endpoint and encryption keys. These identify a browser, not a person, and are used only to send notifications you asked for. Revoke them from your browser or your account settings at any time.
3.6 Information from accounts you connect (optional)
If you connect a Google or X account (Sections 6A and 6B), we receive and store an authorisation token allowing UU to send outreach as you, plus the account identifier or handle so we can show you which account is connected. We do not receive your password for those services. Where you enable reply tracking, we also receive limited message metadata as described in Section 6A. Disconnecting deletes the stored authorisation.
3.7 What we deliberately do not collect
We want this to be explicit, because our industry commonly does collect these:
- No biometric identifiers. No facial recognition, no faceprints, no voiceprints, no body-geometry analysis, no identifier templates extracted from any image or video.
- No computer-vision or pose-estimation analysis. We do not run your highlight video through skeletal tracking, joint-angle extraction, kinematic modelling, or biomechanical inference. Your video is stored and displayed as video.
- No injury, medical, symptom, treatment, or recovery information.
- No fatigue, training-load, heart-rate, sleep, or recovery metrics. We have no wearable integrations.
- No precise geolocation. We hold the city and state you tell us; we do not track your device's location.
- No NIL financial data. We do not broker, host, or pay NIL compensation (Section 13).
- No advertising identifiers, and no third-party ad trackers on our properties.
3.8 Contact form
If you write to us through a contact form on our website, we collect the name, email address and message you submit, and we use them only to respond to your enquiry. Form submissions are delivered to us by email and are not stored in our databases.
4. How We Use Your Information
- Provide, operate, and maintain the Service: directory, profiles, eligibility tools, outreach drafting, tracking
- Generate AI-assisted outreach drafts you request (Section 5)
- Record outreach you send and clicks on its tracking links, so your dashboard is accurate
- Process payments and manage subscriptions
- Provide customer support
- Secure the Service, monitor errors, and prevent abuse
- Communicate with you about your account, including service and billing notices
- Comply with legal obligations
Except for reviews and feedback you send us, as described in Section 9A, we do not use your information for advertising, sell it, share it for cross-context behavioural advertising, use it to train general-purpose AI models, or use it to profile you in a way producing legal or similarly significant effects.
5. AI Processing: What Goes Where
Outreach drafts are generated by Google's Gemini API. When you request a draft, we send that provider the information needed to write it: your relevant profile details and the recipient coach and program.
- Drafts are generated only when you ask for one.
- We never send your password, payment details, or any other user's information.
- Every draft is reviewed by you before anything is sent. Nothing sends automatically.
- Your content is not used to train general-purpose models.
- We do not make automated decisions about you. The AI writes text; it does not evaluate you, rank you, or decide anything affecting your rights.
6. How Outreach Is Sent
You always write and approve the message. How it leaves is your choice.
By default: you send it yourself. When a draft is ready you copy it, or open it in a prefilled compose window in your own email client. You are the sender. In this mode UU holds no connection to any mail account and cannot see your mailbox.
Optionally: you connect an account and send from inside UU. If you choose to connect a Google or X account, UU can send the outreach you have written and approved directly from your own address or handle, so you do not have to leave the app. This is entirely optional, it is never enabled by default, and the Service works fully without it.
In every case, nothing is ever sent automatically. UU does not send a message you have not read and approved, does not send on a schedule, and does not send in bulk on your behalf.
6A. Connected Google Account
If you choose to connect a Google or Gmail account, we request the narrowest access that makes the feature work:
- `gmail.send`: permission to send an email that you have composed and approved, from your own address. This scope allows sending only. It does not permit reading, browsing, searching, downloading, modifying, or deleting anything in your mailbox, and we never do any of those things.
- `gmail.metadata` (only if you turn on reply tracking): limited to sender, subject line, timestamp, and thread identifiers, and only for threads you sent through UU, so we can show you whether a coach replied. This scope does not expose message bodies, and we do not access, store, or read the content of any email.
We never request access to your contacts, your calendar, your Drive, or any other Google service.
Google API Services User Data Policy: Limited Use
Uncommitted University's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through your connected Google account is:
- Used only to provide the outreach-sending and, where you enabled it, reply-status features visible in your own UU dashboard
- Never used for advertising of any kind
- Never sold, and never transferred to data brokers or to any third party for their own purposes
- Never used to train or improve any AI or machine-learning model, ours or anyone else's
- Never read by UU personnel, except in the narrow cases of investigating a security issue, responding to a support request you initiated, or complying with the law
- Retained only as long as needed to operate the feature, and deleted when you disconnect
You may disconnect at any time from your UU account settings, or from your Google Account security settings at <https://myaccount.google.com/permissions>. Disconnecting revokes our access immediately and we delete the stored authorisation.
6B. Connected X (Twitter) Account
If you choose to connect an X account, we request the minimum access needed to identify your handle and, where you enable it, to send direct messages you have written and approved to coaches you have selected.
We do not access your timeline, your followers, your likes, or your broader X activity, and we do not use X data for surveillance, profiling, research, or any purpose beyond the outreach you initiate. Data obtained through the X API is never sold, never used for advertising, and never used to train AI models.
You may disconnect at any time from your UU account settings or from your X account settings, which revokes our access immediately.
Handles you simply type into your profile are different: those are plain text displayed on your profile and grant us no access to anything.
6C. What We Track
We track clicks. A profile link in outreach you send carries a short tracking code. When someone opens that link we record that it was clicked and when. The code identifies the message, not the reader, and tells us nothing about what the recipient does anywhere else.
We do not currently track email opens. Some earlier UU materials described an invisible tracking pixel reporting when a recipient opened a message. That capability was removed and does not operate today. If we reintroduce open tracking as part of connected sending, we will say so here, and it will report only to your own dashboard, never to any third party.
7. Information About Coaches
Coaches appear in our directory because their professional information is licensed from a commercial recruiting-data provider or is otherwise publicly associated with their coaching role, not because they signed up. We hold professional contact details, not personal ones.
A coach may have their information corrected or removed by writing to support@uncommittedu.com. We will act on the request and add a suppression record so the entry is not reintroduced by a later data refresh.
8. Profiles We Prepare Before You Sign Up
We sometimes prepare a scouting profile for an athlete before that athlete signs up, from the sources in Section 3.4, so we can offer them a working profile to claim and keep free of charge.
Until an athlete claims such a profile:
- the page carries instructions telling search engines not to index it, and it appears in no public directory on our site;
- it is reachable only through the direct link we send to that athlete;
- we record where each piece of information came from and will tell the athlete on request.
Any athlete may delete such a profile immediately, in one click, from the link they were sent, with no account, no login, and no need to contact us. We then delete the profile and its associated account, keeping only a limited suppression record sufficient to recognise that athlete so we do not prepare a profile for them again or contact them further. That record exists solely to honour the removal, and serves the same purpose as an email unsubscribe list.
We do not prepare these profiles for anyone under 13. An athlete, or the parent or guardian of an athlete under 18, may also write to support@uncommittedu.com to have a profile corrected or removed.
After you claim a profile and choose to make it public, it becomes publicly viewable and may be indexed by search engines; that is what makes it useful to coaches. You control that setting, and may make the profile private or delete it at any time.
9. How We Share Information
We share information only as set out here.
Service providers, under confidentiality obligations, each limited to what its function requires:
| Provider | Function | What it handles |
|---|---|---|
| Supabase | Database and authentication | Account and profile data |
| Hostinger | Hosting for our site and application | Traffic to our properties |
| Stripe | Payment processing | Billing details. UU never sees full card numbers. |
| Resend | Transactional email we send you | Your email address and message contents |
| Google (Gemini API) | AI draft generation | Profile and recipient details for a draft you request |
| Google (Gmail API) | Sending outreach from your own address (only if you connect an account) | The message you approved, sent as you |
| X (Twitter API) | Sending direct messages from your own handle (only if you connect an account) | The message you approved, sent as you |
| Google (Analytics) | Site analytics (only if you accept analytics cookies) | Page views, referral source, new vs returning. Configured with all advertising signals disabled |
| Automattic (Jetpack) | Site statistics, spam and brute-force protection, and image delivery on our marketing site | Page views and IP address. Jetpack Stats sets no cookie |
| Sentry | Error monitoring | Technical error context, which can include an account identifier |
| DataForSEO | Retrieval of public search-result summaries | An athlete's name, for the purpose in Section 3.4 |
Connected-account data is never shared onward. Information obtained through the Google or X APIs is used only to operate the feature you enabled, is never sold or transferred to a third party for their own purposes, is never used for advertising, and is never used to train AI models. See Sections 6A and 6B.
Coaches, when you choose to send outreach (the intended function of the Service).
Legal reasons, where required by law, subpoena, or to protect the rights, safety, or property of UU, our users, or others. Where we are permitted to tell you about a legal demand for your data, we will.
Business transfers, in a merger, acquisition, or sale of assets, subject to confidentiality protections and to this Policy continuing to govern the transferred information.
We do not share your information with data brokers, advertising networks, or any party for their own marketing purposes.
On the question of "sale." Some state laws define "sale" broadly enough to capture disclosures made for any valuable consideration. We want to be unambiguous: coaches pay us nothing. The directory is free to browse and we do not charge anyone for access to athlete data. Our only revenue is athlete subscriptions. No disclosure we make constitutes a sale or a share for cross-context behavioural advertising under any state law.
9A. Reviews, Feedback and Promotional Use
If you send us a review, a testimonial, feedback, or a message about your experience with UU, we may use it to promote the Service, including on our website, in marketing materials, and on social media. We may use it together with your first name, last initial, graduation year, and the sport or position you play.
We will not use your full name, your photograph, or your video in promotional material without asking you first.
If you are under 18, we will not use your name, quote, photograph or video in promotional material unless a parent or legal guardian has given us permission.
We will not edit a quote in a way that changes its meaning, and we will not attribute to you anything you did not say. You may withdraw permission at any time by writing to support@uncommittedu.com, and we will stop using it in anything we publish from that point forward and remove it from surfaces we control. Material already printed or already distributed by others may not be recoverable.
This section does not apply to your athlete profile, which is public or private according to the settings you choose yourself.
10. Cookies & Similar Technologies
We use no advertising cookies, we run no advertising or retargeting pixels, and we permit no third-party advertising trackers on any UU property. Advertising storage is switched off permanently in our tag configuration; it is not a setting a visitor has to find.
We use cookies in three categories. You choose, from the banner on your first visit and from "Cookie settings" in the footer at any time afterwards.
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keeps you signed in, holds your authentication state, secures checkout and prevents payment fraud, and protects against abuse | No: the Service cannot work without these |
| Functional | Remembers preferences such as dark mode, language and layout, and recognises whether you have visited before, so we do not show a sign-up screen to somebody who is already a paying member | Yes |
| Analytics | Tells us how visitors found us, which pages they moved through, and whether they are new or returning, so we can improve the site and our internal linking | Yes |
The specific cookies we set:
| Cookie | Category | Purpose |
|---|---|---|
| `uu_consent` | Strictly necessary | Records your cookie choice so we do not ask again. Scoped across uncommittedu.com and app.uncommittedu.com so one decision covers both |
| `sb-…-auth-token` | Strictly necessary | Your signed-in session (stored in your browser, not a cookie) |
| `__stripe_mid` | Strictly necessary | Set by Stripe to detect payment fraud |
| `wp-settings-…` | Functional | Remembers interface preferences on our marketing site |
| `_ga`, `_ga_…` | Analytics | Google Analytics: distinguishes visitors and measures traffic trends |
Analytics is used by us, internally, to make the product better. It is never sold, never shared for advertising, and never used to build a profile of you for anyone else.
Your choices are respected across both sites. Declining analytics does not merely stop new tracking; we delete the analytics cookies already on your device.
Global Privacy Control. We honour GPC and similar browser opt-out signals. If your browser sends one, we switch analytics off automatically, without you needing to interact with our banner at all. We do this even though we neither sell nor share personal information, which is the activity those signals formally govern.
Why we ask rather than block. United States privacy law requires that we tell you what we collect and let you decline. It does not require us to withhold the site until you press a button, and we would rather not put a wall in front of an athlete trying to read a recruiting guide. If we ever offer the Service in a jurisdiction requiring prior opt-in, we will switch to that model there.
You can also control cookies through your browser settings. Blocking the strictly necessary ones will prevent you staying signed in.
11. Data Retention and Deletion
| Data | Retained |
|---|---|
| Account and profile | While your account is active, plus a reasonable period for legal, tax, and accounting obligations |
| Payment and transaction records | As required by tax and financial record-keeping law |
| Unclaimed pre-sign-up profiles | Only while useful for the invitation in Section 8; deleted immediately on request |
| Suppression records | Indefinitely: their only purpose is ensuring we never contact someone who asked us not to |
| Hashed IP and rate-limit records | A short operational period for abuse prevention |
| Error-monitoring records | A limited retention window set by our provider |
You may request deletion of your account and associated data at any time. We action deletion requests promptly and, in any event, within the period your state's law requires. Deletion removes your profile from public view immediately. We may retain the narrow categories above where the law requires it, and will tell you if we do.
12. Your Rights
Whatever your location, every user of UU may:
- Access the personal information we hold about them
- Correct anything inaccurate
- Delete their account and data
- Obtain a portable copy of their data
- Opt out of non-essential communications
- Make an athlete profile private, or delete it
- Delete an unclaimed profile in one click from the link they were sent
We extend the substance of these rights to everyone, not only to residents of states that mandate them.
To exercise a right, write to support@uncommittedu.com. We will acknowledge and respond within 45 days, and will tell you if we need a permitted extension. We may need to verify your identity, and will ask for no more information than verification requires. We will not discriminate against you for exercising a privacy right: your price, features, and access do not change. You may use an authorised agent where your state allows it.
If we deny a request, we will explain why and how to appeal. Where your state provides an appeal process, we will describe it in our response, and will tell you how to contact your Attorney General if you remain unsatisfied.
12A. State-Specific Disclosures
Each state notice below has its own direct link, so you can go straight to the one that applies to you:
- California: uncommittedu.com/privacy-policy#california
- Washington (consumer health data): uncommittedu.com/privacy-policy#washington
- Nevada: uncommittedu.com/privacy-policy#nevada
- All other states with comprehensive privacy laws: uncommittedu.com/privacy-policy#other-states
- Biometric statutes (IL, TX, WA): uncommittedu.com/privacy-policy#biometric
- Student records and FERPA: uncommittedu.com/privacy-policy#student-records
California: Your CCPA / CPRA Rights
You have the rights to know, delete, correct, and to opt out of sale and sharing, plus the right to limit use of sensitive personal information.
In the preceding 12 months we collected the categories in Section 3 (identifiers, commercial information, internet and network activity, and, where you supply it, education information and audio/visual content) for the purposes in Section 4, disclosing them only to the service providers listed in Section 9. We collect these from you directly, from camp and event registration records, and from public search summaries as described in Section 3.4.
We have not sold or shared personal information in the preceding 12 months. We do not sell or share personal information at all, and we never sell or share the personal information of any user under 16 under any circumstances.
Because we do not sell or share, no "Do Not Sell or Share My Personal Information" mechanism is required, but if you wish to record a preference regardless, email us and we will log it. We use sensitive personal information only to provide the Service you requested, so no "Limit the Use of My Sensitive Personal Information" control is required. You may designate an authorised agent to act for you. To exercise any California right, email support@uncommittedu.com.
Washington: Consumer Health Data
UU is headquartered in Washington State, and does not collect consumer health data. Because this is the most consequential privacy question for a Washington company in our sector, it is answered in full in Section 12B immediately below, and separately linkable at uncommittedu.com/privacy-policy#washington-detail.
Nevada
You may submit a verified request that we not sell your covered information. We do not sell it. Requests may be sent to support@uncommittedu.com.
Virginia, Colorado, Connecticut, Texas and Other States
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Nebraska, Iowa, Indiana, Tennessee, Minnesota, Maryland, Kentucky, Rhode Island and other states with comprehensive privacy laws have rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, sale of personal data, and profiling that produces legal or similarly significant effects.
UU performs none of those three activities for any user, so there is nothing to opt out of. All other rights are exercised as described in Section 12, with the appeal process set out there.
Biometric Statutes: Illinois, Texas, Washington
We do not collect, capture, purchase, receive, or store biometric identifiers or biometric information as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, or Washington's biometric statute define them.
We run no facial recognition, faceprinting, voiceprinting, pose estimation, or body-geometry analysis on headshots or highlight video, and our service providers are contractually not permitted to. Media you upload is stored and displayed as media; no identifier template is extracted from it.
Student Records and FERPA
UU is not a school, school district, or educational agency, and we receive no education records from any school. FERPA and the state student-data-privacy statutes that bind school vendors do not apply to us. Any GPA or test score in a profile is information the athlete chose to enter about themselves.
12B. Washington Consumer Health Data: Our Position in Full
UU is headquartered in Washington State, so the My Health My Data Act (MHMDA) applies to us as a regulated entity without any revenue or volume threshold. We therefore address it directly rather than by omission.
MHMDA regulates "consumer health data": information identifying a consumer's past, present, or future physical or mental health status. UU does not collect consumer health data.
We do not collect, derive, infer, or extrapolate: diagnoses, symptoms, medications, treatments, injuries, recovery status, fatigue or training load, vital signs, heart rate, sleep, bodily functions, reproductive or sexual health information, gender-affirming care information, biometric identifiers, or precise location suggesting an attempt to obtain health services.
On athletic statistics. The performance figures on our platform (exit velocity, fastball velocity, batting average, ERA) are sporting results, of the same character as a box score or a stat line in a game programme. They record what happened in a competition, not the condition of the athlete's body. They are self-reported by the athlete for the express purpose of being shown to college coaches. We do not use them to infer health status, and we do not combine them with anything that would.
On height and weight. These are roster attributes, published in every college and high school programme in the country and requested by every recruiting questionnaire. We collect them because coaches ask for them, we display them as the athlete entered them, and we draw no health inference from them.
On video. Highlight video is stored and displayed as video. We perform no pose estimation, kinematic extraction, biomechanical modelling, or identifier-template extraction of any kind: the processing that would convert ordinary footage into biometric health data under MHMDA's broad definition. We have no plans to introduce it, and if that ever changed we would obtain separate, prior, opt-in consent first, and would publish a distinct consumer health data policy before collecting anything.
On the "sale" question. MHMDA imposes a near-embargo on selling consumer health data. We sell no data of any kind, and, importantly, we charge coaches nothing. The scenario that creates this exposure for other platforms, where recruiters pay for access to athlete performance data, does not exist at UU.
If you believe we hold information about you that should be treated as consumer health data, write to support@uncommittedu.com and we will delete it.
13. Name, Image and Likeness (NIL)
UU does not broker, facilitate, host, or pay NIL compensation. We are not a collective, agent, marketplace, or booster. Money flows from athletes to UU for software; no money flows from UU to any athlete. Your use of the Service does not by itself create a reportable NIL agreement.
You remain responsible for your own eligibility compliance. If your compliance office requires records of your UU activity, contact us and we will provide a complete export of your account data: we will never obstruct an athlete's ability to meet a disclosure obligation.
14. Data Security
We maintain administrative and technical safeguards designed to protect your information, including encryption in transit and at rest, database access rules that prevent one user reading another's records, salted and hashed passwords, hashed IP addresses, and scoped credentials for every service provider. Our controls are described in full in our Security, Privacy, and Personal Information Protection Framework, published alongside this Policy.
No system is completely secure and we cannot guarantee absolute security. If you believe your account has been compromised, contact support@uncommittedu.com immediately.
15. Third-Party Links
Our directory and profile pages link to third-party sites such as school athletics pages, recruiting platforms, and social media. We do not control those sites and are not responsible for their content or privacy practices.
16. International Users
The Service is offered from and operated in the United States and is intended for United States users. If you access it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.
17. Changes to This Policy
We may update this Policy. Material changes will be posted here with a new "Last Updated" date and, where required by law, communicated to you directly. Where a change would materially expand how we use information we already hold, we will obtain your consent before applying it to that information rather than relying on your continued use.
18. Contact Us
Questions about this Policy, or any request regarding your data:
Uncommitted University · Seattle, WA · support@uncommittedu.com
We read every message sent to that address and respond to privacy requests within 45 days.