Privacy Policy
Last updated August 3, 2026
YAPi measures how young athletes move and turns it into a score their family can track. That means we hold information about children, and we think parents are entitled to a plain account of what we hold, why we hold it, and how to get rid of it.
Who we are
YAPi (Youth Athletics Performance Index) is operated from Pennsylvania, United States. For questions about this policy or your data, contact privacy@yapi.life.
What we collect
About the athlete, provided by their parent or guardian:
- •Name, date of birth and gender
- •Sports played
- •Body measurements — height, weight, wingspan, foot length, hand size, torso length, shoulder width, thigh circumference, shoe size
- •Performance measurements from assessments — sprint times, jump distances, agility drill times, grip strength, throw distance, flexibility
- •Heights of parents and grandparents, which are used to estimate adult height
- •Optional skeletal maturity readings, where a bone scan has been done
- •Optional introvert/extrovert indicator, where provided
About the parent or guardian:
- •Name, email address and phone number
- •A hashed version of your password — we never store the password itself and cannot see it
- •Event registrations and payment status
- •Any feedback or waitlist preferences you submit
We do not run advertising or analytics trackers, and we do not build profiles of you across other websites.
Children under 13
Most athletes on YAPi are under 13. We collect their information only with verifiable consent from a parent or legal guardian, given at the point the athlete is added to an account. The exact wording you agree to is stored alongside the consent, so you can always see what you actually agreed to rather than whatever the form says today.
A parent can review everything collected about their child, request its deletion, or withdraw consent entirely at any time, from Your data in the account menu. Withdrawing consent means deleting the data, because we have no other basis for holding it.
We do not condition a child's participation on disclosing more than is reasonably necessary, and we do not ask children to provide information directly — everything comes through the parent account or is measured by staff at an assessment.
Why we hold it
- •To produce a YAPi Score and percentile ranking against published age and gender norms
- •To show change over time as an athlete is assessed repeatedly
- •To run assessment events — registration, check-in, and assigning athletes to testers
- •To take payment for events
- •To email you about your registrations, password resets and events you have asked to hear about
Scores are calculated against published reference data, not against other children on the platform. One family's measurements do not affect another family's score.
Who can see it
You and YAPi staff. Parents see their own athletes. Testers see the athletes they are assessing on the day. Administrators can see athlete records in order to run events and support families.
Anyone you give a link to.You can generate a share link for an athlete's profile, to send to a coach or a relative. Anyone holding that link can view the profile without signing in, so treat it as you would any private link. Links expire, and you can revoke one at any time. Requesting deletion revokes them immediately.
Clubs you join.If you add your athlete to a club or organisation on YAPi, that organisation's administrators can see their profile and scores.
The leaderboard shows no names. It lists metric values by age group without identifying any athlete, and is visible only to signed-in users.
We do not sell personal information, we do not share it with advertisers, and we do not disclose it to anyone else except where we are legally required to.
Companies that process data for us
- •Stripe — card payments. Card details go directly to Stripe and never reach our servers. Stripe keeps its own transaction records under its own policy.
- •Brevo — sends our email. Receives the address and name of the recipient.
- •Render — hosts the application and database, in the United States.
How long we keep it
While your account is open, we keep your athletes' records so the history stays intact — the point of a score is that you can compare it to last season.
When you delete an athlete or close your account, the records are hidden immediately and any share links are revoked at once. Thirty days later they are permanently destroyed and cannot be recovered, by us or by you. The delay exists so that an accidental deletion, or one made by somebody who should not have had access to your account, can still be undone. We email you when a deletion is scheduled so you have the chance to stop it.
Two things deliberately survive that purge. We keep a record that a deletion happened, identified by a one-way hash of the email address rather than the address itself, so we can confirm to you later that it was carried out. And where you paid for an event, we keep the amount, date and payment reference without any link to you or your athlete, because records of money received have their own retention requirements and Stripe holds a copy regardless.
Your rights
- •See everything. Download a complete copy of what we hold about your account and each athlete, including every individual measurement.
- •Correct it.Edit an athlete's details at any time. If a measurement is wrong, contact us and we will fix it.
- •Delete it. Remove one athlete, or close your account and take everything with it.
- •Withdraw consent. For an athlete under 13, this is the same as deletion.
All of these are self-service at Your data. You do not need to email us or wait for us to act, and we do not ask why.
Security
Traffic is encrypted in transit. Passwords are stored as bcrypt hashes, so a copy of our database would not reveal them. Access to family records is restricted by role, and the directory of full account records is limited to the most senior administrator role.
No system is perfect. If you believe an account has been accessed without permission, change the password immediately and contact us.
Changes
If we change what we collect or how we use it, we will update this page and change the date at the top. For any change that materially affects information about a child, we will ask for consent again rather than relying on the consent you have already given.