Privacy Policy

1. Introduction

FullOut LLC ("FullOut," "we," "us," or "our") operates the FullOut platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

If you are a parent or legal guardian of a child under 13, please also review our Children's Privacy Policy, which explains the adult-operated private profile and Verified workflow, parent controls, and the distinction between information adults provide about children and information collected directly from children.

2. Who We Are

• FullOut LLC
• 2750 South Preston Road, Suite 116 Box 221
• Celina, TX 75009
• Phone: +1 (501) 648-1033
• Email: team@fullout.energy

3. Information We Collect

a. Information You Provide

• Account registration details (name, email address, password)
• Profile information you choose to provide — including profile and cover photos, biographical information, hometown, birth date, social media handles, and team or gym affiliation
• Photos and videos you upload to your profile
• Communications you send to us (support requests, feedback)
• Payment and billing information processed through our third-party payment processor

Private parent-managed profiles and Verified

An adult parent or legal guardian supplies the named child's name, date of birth, relationship and relevant team or gym details. Adults or authorized staff supply private recordings, including image and sound when present, and review information. We keep attempts, skill results, feedback, exact acceptance records, purchases and access records for the requested service. No separate child email, password, social-media handle or precise location is required. A private under-13 profile has no child login, public profile, follower sharing, posts or messaging.

b. Information Collected Automatically

• Device and browser information (type, operating system, unique device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, interactions with the Service)
• Cookies and similar tracking technologies

c. Publicly Available Competition Data

We collect and aggregate publicly available competitive cheerleading data, including competition results, scores, team names, and related performance information from public sources. This data is factual, publicly available, and used to provide analytics and insights through the Service.

d. AI Assistant Conversations

If you use the AI analytics assistant, we log your questions and the assistant's responses, together with technical metadata (which data lookups were run, response time, and usage volume). We use these logs to monitor answer quality, improve the assistant, and enforce usage limits. Your questions are processed by our AI provider (Anthropic) to generate responses; conversations are not used to train AI models. Please don't include sensitive personal information in your questions.

4. How We Use Your Information

• To provide, maintain, and improve the Service
• To create and manage your account and athlete profile
• To process transactions and send related information
• To send administrative information, updates, and security alerts
• To respond to your comments, questions, and support requests
• To monitor and analyze usage trends and preferences
• To detect, prevent, and address technical issues, fraud, and abuse
• To comply with legal obligations

We do not sell your Personal Information. We use measurement and advertising analytics providers (including Google Analytics and the Meta Pixel) to understand how the Service is used and to measure the effectiveness of ads we run on platforms like Facebook and Instagram. When you fill out forms (such as signup or checkout), certain identifiers (e.g. email, name, phone) may be hashed in your browser before being sent to Meta. We do not share unhashed Personal Information with advertising networks for behavioral targeting.

The private parent-managed and Verified workflow is excluded from those advertising and marketing disclosures. We do not send its child details, private recordings or acceptance information to advertising or marketing tools, use them for targeted advertising, sell them, or use recordings to train a general-purpose AI model. Private-workflow pages do not load advertising or marketing analytics scripts; necessary authentication, security and operational records remain separate.

e. First-Party Sponsored Content

We may show clearly labeled, direct-sold sponsored content to anonymous visitors and users on our free Prep tier. This inventory is contextual to the placement on the Service, such as a team page or activity feed. We do not use browsing history, profile data, interests, location, device identifiers, or third-party advertising scripts, pixels, iframes, or video to select these placements.

To limit repeat deliveries and measure a rendered impression or click, we use an opaque first-party cookie that expires after seven days and a signed, short-lived delivery token. We store only a one-way hash of that cookie with the placement, campaign, creative, and timestamp. We do not collect IP address, referrer, user-agent, or other tracking inputs for this program.

5. Sharing of Information

We may share information in the following circumstances:

• Service providers who operate the platform on our behalf — including our hosting provider (Vercel), database provider (Supabase), video hosting provider (Mux), email delivery provider, payment processor (Stripe), AI provider (Anthropic, which processes AI assistant questions to generate responses), and analytics and advertising measurement providers (Google Analytics, Meta Pixel and Meta Conversions API). These providers are contractually limited to using the information only to provide services to FullOut.
• Other users of the Service, to the extent your profile or content is set to be visible to followers or to the public.
• Legal authorities, when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of FullOut, our users, or the public.
• A successor entity in connection with a merger, acquisition, reorganization, or sale of assets.
• With your consent, when you have given us explicit consent to share your information.

For private parent-managed and Verified information, access is limited to the account owner, authorized adult family managers, authorized reviewers and support personnel, and providers needed for the requested service: Vercel for hosting, Supabase for databases, Mux for private video, Resend for transactional email and Stripe for payments. This private workflow does not authorize public or follower sharing, marketing use, or disclosure to a general-purpose AI model. Legal disclosures remain limited to the applicable obligation.

Mobile information and SMS

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. All of the sharing categories listed above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.

Your mobile number is used solely to deliver the score and performance-time alerts you asked for, and to send the one-time code that confirms the number is yours. It is shared only with the telecommunications provider that transmits the message on our behalf, which may not use it for any other purpose. You can remove your number or turn SMS off at any time in your notification settings, or by replying STOP to any message. Details of the messaging program are on our SMS Notifications page.

6. Data Retention

We retain your Personal Information only for as long as is reasonably necessary to provide the Service and to fulfill the purposes described in this Policy.

• Account and profile data is retained while your account is active. When you delete your account, we remove your Personal Information from our active systems within 30 days; backups containing deleted data are overwritten in the ordinary course within 90 days.
• Private skill recordings and review history have no automatic 12- or 24-month expiry. They support ongoing private evidence and progress history only while that service and retention purpose remain necessary. You may request earlier deletion. Account closure, deletion requests and information no longer needed are handled under this policy; this is not a promise to keep every recording forever.
• Access logs (login times, IP addresses, device identifiers) are retained for up to 24 months for security, fraud prevention, and debugging purposes.
• Direct-sold ad delivery records use a one-way visitor hash and are deleted after 30 days. Non-identifying aggregate delivery, impression, and click totals are retained for up to 24 months.
• Publicly available competition data may be retained indefinitely as part of our analytics database, even after individual accounts are deleted.
• We may retain limited information for longer if required by law, to resolve disputes, to enforce our agreements, or to prevent fraud.

A submitted deletion request is recorded as pending until the applicable removal work is completed; requesting deletion is not proof that media has already been erased. For child profile data, including private recordings, the 30-day active-system and 90-day backup commitments in the Children's Privacy Policy apply. Limited financial, security or dispute records retained for a specific obligation remain access-restricted.

Additional retention rules apply to Personal Information of children under 13. See our Children's Privacy Policy.

7. Data Security

We implement commercially reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to collect usage information, remember your preferences, and improve the Service. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service.

If you are eligible for first-party sponsored content, our seven-day ad-delivery cookie limits repeat delivery and associates a viewable impression or click with the selected creative. It is not used for behavioral advertising or shared with advertisers.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

10. Children's Privacy

FullOut is a general-audience platform. Its parent-managed private workflow is operated by adults, not children under 13. An adult who is at least 18 and has authority as parent or legal guardian may provide information about a named child, personally accept the disclosed terms, and manage a private profile. Staff cannot accept for that adult. A checkbox or purchase is not represented as independently verified guardian identity.

We distinguish information an adult supplies about a child from information collected directly from a child. This workflow does not permit an under-13 child login or direct online use. If a different collection or use requires additional notice or parental verification, it must be completed before that collection or use begins.

See our Children's Privacy Policy for the private-profile boundaries and rights to access, correction, withdrawal and deletion. If you believe a child is using an account directly or information was collected outside the disclosed permission, contact team@fullout.energy so we can investigate and take appropriate action.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the Personal Information we hold about you
• Request correction of inaccurate Personal Information
• Request deletion of your Personal Information
• Object to or restrict processing of your Personal Information
• Request portability of your Personal Information

To exercise any of these rights, please contact us at the email address below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy for general use. A policy update or continued use does not silently expand a private parent-managed acceptance, authorize a new child, or permit public sharing. Materially different collection, use or disclosure requires the applicable notice and any required new permission before it begins.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• FullOut LLC
• 2750 South Preston Road, Suite 116 Box 221
• Celina, TX 75009
• Phone: +1 (501) 648-1033
• Email: team@fullout.energy