Privacy Policy

Effective 2026-09-25 · Last updated 2026-09-25

Parrot Scoring ("Parrot", "we", "us") is a live scoring and statistics platform for high school athletics. This policy explains what data we collect, where it comes from, how we use it, and the choices you have. It applies to the Parrot Scoring mobile app, the public website at parrotscoring.com and its scores pages, and the school portal used by coaches and athletic directors.

We have written this policy so that a parent, a coach, or a school district privacy officer can read it and understand exactly what happens with student information. If anything is unclear, email us at info@parrotscoring.com.

1. Who this policy covers

Parrot has three kinds of people in it, and we treat their data differently.

• Student-athletes. Players on a school's teams. Information about them is entered and controlled by their school. Students do not create accounts.
• School staff. Coaches, athletic directors, and other staff a school authorizes to use the school portal. They have accounts.
• Fans. Parents, students, alumni, and community members who use the mobile app or public website to follow teams. Fans may create an account.

Parrot is offered in the United States and all data is stored in the United States. If you use Parrot from outside the United States, your information is processed here.

2. Student-athlete data

What we hold

• Roster information: name, grade level, graduation year, height, weight, jersey number, position, captain or starter designation, and an optional team photo uploaded by the school.
• Game statistics: the plays and stats a coach records during a game (for example points, rushing yards, kills, saves) and the season totals calculated from them.
• Game photos: photos a school uploads and may tag with the players shown. Schools can turn off photo tagging for any individual player.
• Student media contributors: when a school runs a student media program, staff can create a byline for a student writer or photographer (display name, class year, headshot) and choose whether the student's name is published or shown as "Staff".

What we do not collect about students

Date of birth, home address, student ID number, phone number, email address, Social Security number, grades or academic records, health or injury information, or biometric identifiers. The school portal has no fields for these.

Where it comes from

• School staff. Coaches and athletic directors enter and edit rosters and record statistics in the school portal. Every entry is attributed to the signed-in staff account.
• Published public sources. Before a school joins Parrot, we may seed its schedules and rosters from information the school or its athletic association has already published publicly (for example state association schedules and MaxPreps rosters). Once a school is on Parrot, its staff's entries govern, and we reconcile or remove seeded information at the school's request.
• Never from fans. Fans can submit a team-level score when official scoring is not running. Fans cannot enter, edit, or view anything about an individual student beyond the public roster and box score.

Who owns it and how we use it

Student data is and remains the property of the school. We use it only to provide Parrot to that school and its community: live scores, box scores, rosters, standings, season statistics, game recaps, and photos. We do not use student data for any other purpose. We do not sell it, do not use it for targeted advertising, and do not build profiles of students for any purpose outside the service.

We may create de-identified, aggregated statistics from game data (for example average points per game across a classification). We de-identify following U.S. Department of Education and NIST guidance, never attempt to re-identify anyone, and do not give de-identified data to third parties other than the service providers listed in section 11. This use continues after a school stops using Parrot.

Who can see it

Rosters, box scores, and season statistics are public, the same way a printed program, a newspaper box score, or a state association bracket is public. The information we display about a student matches the directory information categories most schools designate under FERPA (name, photograph, grade level, participation in sports, and height and weight of athletes). Schools are responsible for their directory information designations and opt-outs and for having permission to publish team and player photos. If a parent has opted out of directory information with their school, the school leaves that student off the Parrot roster, and we remove any student on the school's request.

Schools can also set a game's visibility to school-only, and can limit game photos to their own community.

Our role under FERPA and state student privacy law

When a school uses Parrot, we act as a service provider to the school (a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act, 34 CFR 99.31) under the school's direct control with respect to student data. We use it only as the school directs, keep it confidential apart from the public displays described above, and do not re-disclose it for any other purpose.

We sign student data privacy agreements with schools and districts, including the Student Data Privacy Consortium National Data Privacy Agreement with state exhibits (for example the Utah Student Privacy Alliance agreement under Utah Code 53E-9-309). Where a signed agreement and this policy differ, the agreement controls for that school. We also comply with state student privacy laws such as California's SOPIPA (Bus. & Prof. Code 22584) and Nevada NRS 388.292 wherever they apply.

Parent and student rights

• Access and correction. Parents and eligible students can review and correct their student's roster information through the school. We help the school fulfill any request.
• Removal. A school can remove a student at any time. When a student is removed, we delete their name, photo, and profile and de-identify their game statistics, keeping them only as unattributed team totals so team and season records remain accurate.
• After graduation. Game results and box scores are the historical record of a school's season, like a yearbook, and stay available after an athlete graduates. A former athlete who is 18 or older, a parent, or the school can ask us to remove the athlete's name and photo from public pages at any time. The team's totals remain.
• Direct requests. If you are a parent and would rather contact us directly, email info@parrotscoring.com. We will verify the request with the school and act on it promptly.

3. School staff accounts

Coaches, athletic directors, and other staff sign in to the school portal with an email address and password, or with a Google account. We store the name, email address, and school and team assignments the school gives us, plus a record of the roster and scoring actions each account takes. We use this to run the portal, attribute entries, and send service emails (invitations, access changes, notices). We do not use staff information for marketing without consent, and we do not sell it.

Staff information is employee data of the school, and we handle it under the same agreement that covers student data.

4. Fan accounts and the mobile app

Information you give us

You can follow teams and view scores without an account. If you create one, we collect the email address or phone number you sign in with, a username and display name, and anything you choose to add to your profile (photo, bio, alma mater, graduation year, gender, pronouns). We also store the teams you favorite, your notification preferences, your game predictions, and any crowd scores you submit.

Information collected automatically

Device type, operating system, app version, a push notification token if you allow notifications, IP address, and how you use the app (which screens you open, what you search for). We use a usage analytics service (Vexo) in the app to understand which features are used and to find crashes. We do not collect precise device location, and we do not use the advertising identifier on your device (IDFA or GAID).

How we use it

• To run the app: show your teams, send the notifications you ask for, and attribute your predictions and crowd scores.
• To improve the app and fix problems.
• To send you service messages. We will only send marketing messages with your consent, and you can opt out at any time.
• We do not sell your personal information and do not share it with advertisers.

What other people can see

Your display name, username, avatar, bio, and alma mater may be shown to other users next to things you post. Your email address and phone number are never shown to other users.

Crowd scores you submit are shown publicly as unofficial scores until the school records an official one. Game predictions are shown only as totals (for example "62% picked the home team"), never with your name. Neither ever becomes a player statistic.

Deleting your account

You can delete your account from inside the app under General Settings, or request deletion at parrotscoring.com/delete-account. Deleting your account removes your profile, sign-in details, favorites, preferences, predictions, and push tokens. Crowd scores you submitted are kept as game data with your account no longer attached.

5. Text messages

If you sign in with a phone number, we send a one-time code by SMS only when you request it. We do not send marketing or recurring text messages. Message frequency depends on how often you sign in. Message and data rates may apply. Reply STOP to stop receiving codes (you will then need to sign in another way) or HELP for help. Carriers are not liable for delayed or undelivered messages.

Phone numbers and SMS consent collected for text messaging are not shared with third parties or affiliates for marketing or promotional purposes.

6. Children

Anyone can use the Parrot Scoring mobile app and public website to follow teams and view scores without creating an account. Creating an account requires being 13 or older, because an account involves an email address or phone number and a username. A parent or guardian may hold an account on behalf of a younger fan. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has created an account, we delete the account and its information. If you believe a child under 13 has given us personal information, contact us at info@parrotscoring.com.

Using the app without an account collects only what is needed to run it (device and app information for crash reporting and usage counts), and we never use it for advertising. Information about student-athletes, including athletes under 13, is entered by their school, not collected from the student, and is governed by section 2 and by our agreements with schools.

7. How we use AI

After a game is final, Parrot can generate a short written recap of it. This is the only place we use generative AI. Here is exactly how it works.

• What goes in. The official box score the school recorded: the two team names, the score by period, the date, and the name, grade, jersey number, and stat line of each player who appears in the box score. Nothing else about a student is sent. No photos, contact information, academic information, or health information, because we do not hold them.
• Who processes it. Anthropic, through its commercial API. Under those terms the box score and the recap are not used to train AI models and are not kept by Anthropic beyond its short-term safety monitoring, after which they are deleted. Anthropic is bound to protect the data at least as strongly as this policy describes.
• What comes out. A few paragraphs describing what happened in the game, based only on the numbers it was given. The recap is labeled as AI-written wherever it appears.
• Accuracy. AI-written text can contain mistakes. The box score is the official record, and where a recap and the box score disagree, the box score is correct. A recap written by a school's own staff or student media always replaces the AI recap.
• No decisions about people. AI is never used to make or recommend any decision about a student, a coach, or a fan, including eligibility, playing time, or recruiting. It writes summaries and nothing else.
• Correction and removal. A school, a parent, or an athlete who is 18 or older can have a recap corrected or removed, or a student's name taken out of it, by emailing info@parrotscoring.com. Schools can also ask us to stop generating recaps for their games.

8. Website visitors, cookies, and tracking

parrotscoring.com and our public scores pages use Google Analytics to count page views and understand which pages are useful. Google Analytics sets cookies (such as _ga) and collects page URLs, device and browser information, and an approximate location derived from your IP address. We have not enabled Google's advertising features or Google Signals. You can read how Google uses this information at policies.google.com/technologies/partner-sites and opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser.

Beyond that, our websites use only browser storage needed to run the site: a sign-in session on the school portal, and your sport and state preferences on the scores pages. We do not use advertising cookies. The school portal, where student data is entered, has no analytics or tracking scripts at all.

Do Not Track. We do not track users across third-party websites or apps over time, so we do not respond to browser "Do Not Track" or Global Privacy Control signals. Our practices are the same whether or not a signal is present. Apart from Google Analytics as described above, no third party collects information about your activity over time and across other websites through our services.

If you submit our contact form, we keep your name, school, email, and message so we can reply. Our pages may link to other sites (schools, state associations, sponsors, MaxPreps). Their privacy practices are their own.

9. Sponsors and advertising

Parrot may show sponsor placements, for example a local business shown next to a school's scores. Placements are chosen by context only (the sport, school, or page being viewed). They are never selected using a student's data or any person's activity over time, and we do not build advertising profiles of students or fans. We do not use targeted advertising as defined in FERPA guidance, the National Data Privacy Agreement, Utah Code 53E-9-309, California SOPIPA, or Nevada NRS 388.292. Sponsors receive no personal information from us.

10. How we protect data

• Hosting. Parrot runs on Supabase in Amazon Web Services data centers in the United States (US East). Supabase maintains SOC 2 Type 2 and ISO 27001 certifications, and we can provide those reports to schools under agreement.
• Encryption. Data is encrypted in transit (TLS) and at rest (AES-256).
• Access control. Database row-level security enforces that only staff a school has authorized can write that school's roster and statistics. Fans have no write access to student data. Production access is limited to Parrot engineers with multi-factor authentication.
• Monitoring and backups. Database activity is logged and data is backed up daily.
• Incident response. We keep a written incident response plan, available to schools on request. If we confirm unauthorized access to student data, we notify the affected school within 72 hours with the date or date range, a description of what happened, the data involved, and the students affected. We cooperate with the school's investigation, and the school notifies families as its policies and state law require. For fan accounts, we notify you directly as required by law.

No system is perfectly secure, and we do not promise that. We do promise to tell you quickly and plainly if something goes wrong.

11. Who we share data with

We share personal information only with the following categories of recipients, and never sell it.

• The school. Student data is shared with, and controlled by, the student's school.
• The public, for the roster, score, statistic, photo, and recap displays described in sections 2 and 4.
• Service providers listed below, who process data on our behalf and only as needed to do their job. Each is bound by contract to protect the data at least as strongly as this policy describes and not to use it for its own purposes. None receives student data for advertising.
• Legal process. We disclose data to law enforcement or a court only when required by law or a valid court order, to protect someone's safety, or to investigate fraud or abuse of the service. Where the request concerns student data, we notify the school before responding unless the law prohibits it.
• A successor. If Parrot is acquired by or merges with another company, data may transfer to the successor, which must honor this policy and every school's data agreement. We will notify schools and account holders before any transfer, and a school may direct deletion of its data instead.

Service providers (sub-processors)

We update this list when it changes, and notify schools under agreement before adding a provider that will handle student data.

12. Retention and deletion

• Student data is kept while the school uses Parrot so that season and career statistics remain available to the school's community. A school can direct us to delete or export any or all of its student data at any time; we complete the request within 30 days and confirm in writing. Within 60 days after our agreement with a school ends we delete or de-identify all of its student data, unless the school or a parent asks in writing that it be kept.
• Staff account data is kept while the account is active and deleted when the school removes the account or the agreement ends.
• Fan account data is kept until you delete your account. Automatically collected usage data is kept for up to 24 months and then deleted or aggregated.
• Backups may hold deleted data for up to 30 days afterward and are then overwritten.
• De-identified, aggregated data may be kept indefinitely, as described in section 2.

13. Your choices and rights

• Review and correct your own information in the app under your profile, or by emailing us. Parents review and correct a student's information through the school.
• Withdraw consent at any time: turn push notifications off in your device settings or in the app, reply STOP to text messages, opt out of Google Analytics as described in section 8, or delete your account.
• Delete your account from inside the app or at parrotscoring.com/delete-account.
• Unsubscribe from any marketing email using the link in the message.
• Ask us anything about your data at info@parrotscoring.com. We respond within 30 days, and sooner for schools.

14. State-specific notices

All states. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in California, Nevada, Texas, and other state privacy laws. We have never sold personal information. We do not process sensitive personal information for advertising, and we do not use automated decision-making to make significant decisions about anyone.

Nevada residents. We do not sell covered information as defined in NRS 603A.333. You may nonetheless submit a verified request directing us not to sell your covered information by emailing info@parrotscoring.com. We respond within 60 days.

California and Delaware residents. This policy describes the categories of information we collect and the categories of third parties we share it with (section 11), how to review and request changes to your information (section 13), how we respond to Do Not Track signals (section 8), and how we notify you of changes (section 15). Parrot is not currently a "business" under the California Consumer Privacy Act, but we honor the commitments above for everyone.

15. Changes to this policy

When we change this policy we update the dates at the top. For material changes, we post the new policy here at least 30 days before it takes effect, email school administrators and account holders, and provide prior versions to schools on request. Continued use of Parrot after a change takes effect means you accept the updated policy. Changes never reduce the protections in a school's signed data agreement.

16. Contact

Questions, requests, or concerns about privacy:

Parrot Scoring
info@parrotscoring.com
Utah, United States

School district privacy officers: we are glad to complete your vendor privacy questionnaire, provide our hosting provider's security reports, and sign your data privacy agreement. Email us and we will respond within two business days. An alternate format of this policy is available on request.