Privacy policy (draft)
Draft, not in effect. This privacy policy is written from what Daivi ID actually holds, and is not in effect until Daivi LLC and its lawyer approve it. Points marked "For legal review" and facts in [brackets] are still open. No Daivi app uses Daivi ID yet.
Effective date: [effective date, set when approved]. Version: draft 1 (step 5).
Who we are
Daivi ID is the one account you use across the apps made by Daivi LLC: Riddle of the Day, Ball Knowledge, Diamond Drill Club, Coach Davi lessons, Daivi Baseball Intelligence, Daivi Shorts. This policy covers Daivi ID itself: your account, the sign-in screens at id.daiviconsulting.com and the information every app shares. Each app may add a short notice for anything it keeps for its own features; it never asks for more than one thing at a time, and it never asks for the information below again.
One Daivi ID works across all Daivi apps. You sign in once at id.daiviconsulting.com; when an app sends you there, you choose "Continue" and that app gets its own sign-in to the same account. Each app checks again, on our server, that your age allows it. Signing out of one app does not sign you out of the others; "Sign out everywhere" on your account page does.
Daivi LLC, [postal address]. Privacy questions and requests: [privacy contact email].
For legal review: confirm the legal entity, its address, a privacy contact, and whether a toll-free number or web form is needed for requests.
What we collect
We collect only what an account needs. Here is everything Daivi ID holds:
| What | Where it comes from | Why |
|---|---|---|
| Email address | You, or Apple or Google when you sign in with them (Apple may give a private relay address) | To sign you in (a 6-digit code and a link) and to send account emails |
| Sign-in method | Apple, Google or email; for Apple and Google, the account identifier they give us and what they send at sign-in, such as your name and photo | To recognize you the next time. We take the name and photo out of your account record and out of the sign-in tokens apps receive. Our sign-in service still keeps the provider's copy (which can include your full name and the address of your profile photo) with the sign-in record until you delete your account, and today any signed-in Daivi app can read that copy from it |
| First name | You, on the profile screen | To greet you in the apps |
| Birth month and year | Your answer to the age question, asked before anything else | To decide which apps you may use and whether marketing may be offered (18 and over) |
| Birth day (optional) | You, if you choose to add it | For a birthday bonus. Stored encrypted |
| Marketing email choice | You. The box is unticked unless you tick it, and it is only offered from 18 | To send news and offers only if you said yes, with the wording you agreed to and when |
| Which Daivi apps you use | The apps, when you open them signed in: the first time, and the last day | To show and manage your apps. A day, not a history of your activity |
| Apps you continued to with Daivi ID | Our sign-in service, when you press "Continue" for an app: which app and when | So the next "Continue" for that app needs no extra step, and so you can see your apps in your data download |
| Which extra questions an app asked | The apps | So an app asks at most one extra question at a time. The answer is not kept here |
| Session records | Our sign-in service, each time you sign in: when, the IP address and the browser or app it came from | To keep you signed in, to sign you out everywhere when you ask, and to protect accounts |
| Security log | Our systems | A record of account events (signed in, profile saved, consent given). It holds account ids and event names only, never your email, name or birth date |
| Groups (Diamond Drill Club and Coach Davi lessons) | A coach Daivi has approved names a group and makes invites; you join with a code or link, after the age question and sign-in | So a coach can run a team or a class. The coach sees each member's first name (a child's nickname) and when they joined, never an email, age or birth date; members don't see each other. Codes are stored only in a scrambled form |
| Parents only: child profiles and consent records | You, as described in the next section | To run a child's or teen's profile under your account |
We do not collect passwords, phone numbers, your location, contacts, photos or videos (other than the address of the profile photo Google may send at sign-in, above), advertising identifiers or payment details. We do not use analytics or advertising trackers on these screens or on children's profiles. If an app ever adds analytics, it uses a random id for that app only, never your Daivi ID account id.
For legal review: groups: a child joins only through the parent, on a separate draft wording that says what the coach will see (DECISIONS 17, C11, R40, R49); confirm whether showing a child's nickname to a coach the parent chose needs more than that wording under COPPA's disclosure rules as amended in 2025. The database refuses a child's join on a real project until the wording is reviewed.
For legal review: the provider's copy of the name and photo address is readable by every signed-in Daivi app until it is removed (docs/DECISIONS.md R35, open, to be fixed before the first app turns on SSO); confirm this wording, and whether it changes the store answers.
For legal review: check the categories against CCPA/CPRA and the other state laws' definitions (identifiers, characteristics, internet activity) and whether birth month and year or session records need their own category.
How we use it
- To create your account, sign you in and keep you signed in across Daivi apps.
- To check your age for each app, on your device first and again on our server.
- To send account emails: sign-in codes, security notices and, when you delete your account, a receipt. These are separate from marketing and always sent.
- To send marketing email only if you opted in, with a one-click unsubscribe in every message.
- To let parents add and manage profiles for their children and teens, with consent.
- To protect accounts: rate limits per account and a bot check (Cloudflare Turnstile) before an email code is sent.
We do not sell personal information, and we do not share it for targeted advertising.
For legal review: confirm the "no sale, no sharing" statements and whether a "Do Not Sell or Share" link or Global Privacy Control handling is still needed.
Children and the notice to parents
Children under 13 cannot have their own Daivi account. The age question comes first on every Daivi screen. If the answer is under 13, nothing is sent from the device at all, not even to our own site. Some apps offer guest play that stays on the device. A parent can sign in instead and add a child profile with verifiable consent.
Notice to parents
This is our direct notice to parents under the Children's Online Privacy Protection Act (COPPA).
- What we collect about your child: only what you type: a nickname or first name (stored encrypted) and a birth year. If you set a 4-digit PIN for kid mode, we keep it only in a scrambled form we cannot read back. Your child never enters an email address. In the app your child uses, we also keep what they do in it to run it for them (for example drill history in Diamond Drill Club).
- When: nothing about your child is stored before you give consent. The details stay on your device until the moment consent is granted, and are sent once, together.
- How we use it: only to run the app for your child. We do not show it to other people, sell it, use it for advertising or analytics, or share it except with the service providers below that host it for us. The one exception is a group you choose: if you add your child to a coach's group, that coach sees the nickname and that your child is in the group (never the birth year), and you can take your child out at any time. Adding a child to a group is not available until that wording has been reviewed.
- Kid devices: a device you set up for your children never holds a full account session. It holds a device credential that lets it show "Who's playing?" and unlock a child with their PIN, for 12 hours at a time. You can remove any device at any time.
- How you give consent: [consent method, not yet chosen]. Until a method is chosen, adding a child under 13 is not available.
- Your rights as a parent: from your account you can review your child's information (download it), delete it, and withdraw consent at any time; withdrawing deletes the profile and everything saved for it, and stops any further collection. You can also ask us at [privacy contact email].
- What we keep after: a record that consent was given and when it ended, for up to 3 years, as evidence. It never holds your child's name or birth year.
For legal review: review the notice against 16 CFR 312.4 (direct and online notice) as amended in 2025, the consent method once chosen, and the 3-year and 90-day record periods.
Teens 13 to 17
In apps that need an adult account (Diamond Drill Club and Coach Davi lessons), a teen uses a profile under a parent's account. The parent agrees to a separate text, recorded the same way as consent. In the other apps, teens 13 and over may hold their own account; marketing email is never offered under 18.
For legal review: review against Texas SB 2420, the Colorado and Connecticut minors' provisions and any other state's teen rules.
Who we share it with
We use these service providers to run Daivi ID. Each one processes information only on our instructions.
| Provider | What it does for us | What it handles |
|---|---|---|
| Supabase | Database and sign-in service (United States, us-west-2) | Everything in this policy |
| Resend | Delivers our emails | Your email address and the message |
| Cloudflare Turnstile | Checks that a person, not a bot, is asking for a sign-in code | Technical signals from your browser, such as your IP address, during that check |
| Vercel | Hosts id.daiviconsulting.com [region] | Your IP address and the pages requested, in its request logs |
| Apple and Google | Sign in with Apple or Google, only if you choose them | What you share with them at sign-in |
We may also disclose information if the law requires it. If Daivi LLC or an app is sold or merged, this policy continues to apply to the information collected under it. [consent provider, once chosen] will be added here.
For legal review: confirm data processing agreements with each provider, the international transfer position, and the wording on legal requests and business transfers.
How long we keep it
| Information | Kept |
|---|---|
| An account that never finished its profile | 24 hours after sign-up, then deleted with its sign-in records |
| An age answer under 13 that reaches our server | Not kept: the account is deleted at once |
| Your account, profile, app memberships, marketing choice and profile-question history | Until you delete your account, which happens immediately, from the account page or any Daivi app |
| Sign-in records (sign-in methods, sessions with IP address and browser, refresh tokens), including each app's own sign-in | Until the session ends or you delete your account |
| A request from an app to sign you in with Daivi ID (which app, its return address and one-time values) | Deleted within 2 hours, used or not: it stops working after 10 minutes, and an hourly job deletes every request older than 60 minutes |
| Apps you continued to with Daivi ID | Until you delete your account |
| An app you disconnected | 30 days after you disconnect it |
| Marketing unsubscribe list (a keyed, scrambled form of the address) | Indefinitely, so an unsubscribe is honored for good |
| The wording of each consent and choice | Indefinitely, as the record of what people agreed to |
| Security log (account ids and event names, never an address, name or birth date) | 13 months, also after the account is deleted |
| A child's details before a parent gives consent | Not on our server at all: only on the parent's device until consent is given |
| A child profile (nickname, birth year, PIN in scrambled form) | Until the parent withdraws consent, deletes the profile or deletes their own account |
| A consent record that was given and later ended | 3 years after it ends (it never holds the child's name or birth year) |
| A consent record that was refused, cancelled, expired, or still pending when the parent's account was deleted | 90 days |
| Evidence from the consent check (encrypted) | As long as its consent record |
| Codes for pairing a child's device | Until used, or 10 minutes |
| A child's play session on a device | 12 hours |
| A device set up for children | Until the parent removes it, the device forgets itself, it goes unused for 180 days, or the parent's account is deleted |
| A group (its name, its app, who runs it) | Until the person who runs it deletes the group or their own account |
| Being in a group (who, which group, how and when they joined; for a child, the wording the parent agreed to) | Until the member leaves or is removed, a parent takes the child out, or the group, the account or the child profile is deleted. Your own records in an app stay yours when a group goes |
| Group invites (a keyed, scrambled form of the code, how many uses, until when) | Until it expires, is used up or withdrawn, then deleted within an hour |
| Opening an invite (a one-time ticket to join) | 10 minutes |
| The check that you're not a robot when you open an invite | Not kept: sent once to Cloudflare |
| The file you download with your data | Not kept by us: it is made when you ask and saved on your device only |
| The receipt for a deleted account | We don't keep the email; its receipt number stays in the security log for 13 months |
| Our providers' own logs (Supabase, Vercel, Resend, Cloudflare) | As long as each provider's plan keeps them [placeholder: days per provider, to confirm]; we never copy them |
For legal review: this table is a proposal. Confirm each period, especially the 3-year and 90-day consent records, the 13-month security log and the indefinite unsubscribe list.
Your choices and rights
- Download your data: on Your account, "Download your data" gives you everything above as a file, made when you press it and saved on your device. Parents can download each child's data from the parent page.
- Delete your account: on Your account, or from inside any Daivi app. It happens at once, in every app, and cannot be undone. For your safety you sign in again first if your last sign-in is more than 10 minutes old.
- Correct it: you can change your first name and birth day on the account page. Your birth month and year are set once, from the age question; write to us if they are wrong.
- Marketing: unsubscribe with one click in any marketing email or on the account page.
- State privacy rights: depending on where you live, you may have the right to know, access, correct, delete and port your information, and to opt out of its sale, sharing or use for targeted advertising (we do none of those). We will not treat you differently for using these rights. You can also ask at [privacy contact email].
For legal review: add which states apply, how we verify requests made by email, authorized agents, response times, and the appeal process some states require.
How we protect it
Everything is encrypted at rest by our database provider. Birth days, children's names and consent evidence are encrypted again inside the database with keys kept apart from the data. Children's PINs and pairing codes are stored only in a scrambled form. Our security log and our own logs never hold email addresses, names, birth dates or IP addresses. No method is perfectly secure; if a breach affects you, we will tell you as the law requires.
Changes and contact
If we change this policy, we will update the date above and, for a material change, tell you in the apps or by email before it applies. For children's information, we will ask parents for new consent where the law requires it.
Questions: [privacy contact email], or Daivi LLC, [postal address]. Until this policy takes effect: hello@auth.daiviconsulting.com.