Privacy Policy

Last updated: June 23, 2026

Effective date: June 23, 2026

Rivals Sports Inc., a Delaware corporation doing business as Rivals GM ("Rivals Sports," "Rivals GM," "we," "us," or "our"), respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you visit our website at rivalsgm.com, use our iOS mobile application, or access our web portal (collectively, the "Services"). This policy does not apply to the Rivals Sports Inc. corporate website at rivalssportsinc.com, which is governed by separate policies.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. Our Terms & Conditions govern your use of the Services and are incorporated by reference. If you do not agree with this Privacy Policy, do not use the Services.

1. Scope and Roles

Rivals Sports Inc. is the data controller responsible for personal information processed through the Services. We operate primarily in the United States, and personal information is processed and stored in the United States unless otherwise stated.

The Services are intended for users located in the United States. We do not knowingly offer the Services to individuals outside the United States, and this policy is designed to comply with applicable U.S. federal and state privacy laws.

2. Information We Collect

We collect personal information in the categories described below. The specific information we collect depends on how you use the Services and whether you maintain a free Fan account or a paid Pro account with a Program Workspace.

2.1 Identifiers and Account Information

  • Name, email address, username, and account credentials
  • School or institutional email address (including .edu addresses used for verification)
  • University, athletic program, or employer affiliation
  • Account preferences and profile settings
  • Customer support communications

2.2 Commercial and Subscription Information

  • Subscription status, plan type, renewal dates, and purchase history
  • Transaction identifiers and receipts provided by Apple and RevenueCat
  • We do not receive or store full payment card numbers; payment processing is handled by Apple

2.3 Program Workspace and User Content

If you use Pro features or a Program Workspace, we may collect information you enter or upload, including:

  • Roster configurations, depth charts, and cap modeling inputs
  • NIL contract details, deal portfolios, and related notes
  • Program budget data, scholarship allocations, and NIL spend records
  • Watchlists, saved searches, and planning preferences
  • Any other information you voluntarily submit to the Services ("User Content")

2.4 Sensitive Personal Information

Depending on your use of the Services, we may process sensitive personal information as defined under applicable state laws, including financial information related to NIL contracts, budgets, and program expenditures that you upload or enter. We use sensitive personal information only as necessary to provide the Services, maintain security, comply with law, and as otherwise permitted under applicable law. We do not use sensitive personal information to infer characteristics about you for unrelated purposes, and we do not sell or share sensitive personal information.

2.5 Internet, Device, and Usage Information

  • Device type, operating system, browser type, app version, and device identifiers
  • IP address and general geographic location derived from IP address
  • Log files, crash reports, and diagnostic data
  • Pages viewed, features used, session duration, clickstream data, and interaction events
  • Cookies, pixels, and similar technologies on our website (see Section 9)

2.6 Inferences and Analytics

We generate and display proprietary analytics, rankings, PVS scores, NIL valuations, and related outputs based on athletic performance data, statistical inputs, and our models. These outputs may be associated with your account activity (for example, saved comparisons or workspace planning), but they are provided for informational purposes only and do not constitute legal, financial, tax, or compliance advice.

2.7 Athlete and Third-Party Data

The Services display information about college athletes and athletic programs, including statistics, rankings, and valuations compiled from third-party data providers, publicly available sources, and our proprietary analytics. This information may relate to identifiable individuals who are not users of the Services. We collect and process this information to operate and improve the Services.

3. How We Collect Information

We collect personal information from the following sources:

  • Directly from you when you register, subscribe, verify your school email, configure a Program Workspace, contact support, or opt in to communications
  • Automatically when you access or use the Services, including through cookies and analytics tools
  • From service providers such as Apple and RevenueCat regarding subscription and billing status
  • From authorized workspace members when a Pro account holder invites or shares access with additional staff seats
  • From third-party data sources that provide athletic, statistical, and related information used in our analytics

4. How We Use Information

We use personal information for the following business and commercial purposes:

  • Provide, operate, maintain, personalize, and improve the Services
  • Create and administer accounts, authenticate users, and verify .edu eligibility for Pro features
  • Process subscriptions, manage renewals, and provide billing-related communications
  • Host, store, display, and process User Content within your Program Workspace
  • Generate analytics, rankings, valuations, and related product features
  • Send transactional and service-related communications, including security alerts and account notices
  • Send promotional communications where you have opted in, and honor opt-out requests
  • Respond to inquiries, provide customer support, and resolve disputes
  • Monitor usage trends, perform product analytics, debug issues, and develop new features
  • Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms
  • Comply with legal obligations, enforce our agreements, and protect our rights and users
  • Create aggregated, de-identified, or anonymized data that does not reasonably identify you

5. Legal Bases for Processing

Where applicable, we rely on the following legal bases to process personal information:

  • Contract performance: to provide the Services you request, including account access, subscriptions, and Program Workspace functionality
  • Legitimate interests: to secure, improve, and market the Services, prevent abuse, and understand how the Services are used, balanced against your privacy rights
  • Consent: for promotional emails and other processing where consent is required or you have affirmatively opted in
  • Legal compliance: to satisfy applicable laws, regulations, legal process, and governmental requests

6. How We Share Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may disclose personal information in the following circumstances:

  • Service providers and subprocessors that process information on our behalf under contractual obligations (see Section 7)
  • Authorized workspace members within your Program Workspace, as configured by the account holder
  • Business transfers in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to customary confidentiality protections
  • Legal and safety purposes when required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, security, or the integrity of the Services
  • With your direction or consent when you request or authorize a specific disclosure

7. Subprocessors and Third-Party Services

We use trusted third parties to help operate the Services. These providers may access personal information only as needed to perform services for us. Current categories of subprocessors include:

  • Google Firebase — authentication, cloud hosting, database storage, and related infrastructure (Privacy Information)
  • Google Analytics — website usage analytics (Privacy Policy)
  • RevenueCat — subscription management and entitlement verification (Privacy Policy)
  • Apple Inc. — App Store billing, payment processing, and subscription administration (Privacy Policy)
  • Netlify — website hosting and content delivery (Privacy Policy)

Your use of third-party services may also be subject to their separate terms and privacy policies. We are not responsible for the privacy practices of third parties outside our control.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate the site, remember preferences, and understand how visitors use our pages.

  • Essential cookies are necessary for core site functionality and security
  • Analytics cookies help us measure traffic and usage patterns through Google Analytics

We do not use cookies for cross-context behavioral advertising. You can control cookies through your browser settings. Disabling cookies may affect certain website functionality. The iOS app does not use browser cookies but may use similar device-level technologies for authentication, security, and analytics.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including:

  • Active accounts: for the duration of your account and subscription
  • User Content: until you delete it, your workspace is terminated, or your account is closed, after which we delete or de-identify workspace data within approximately thirty (30) days unless a longer period is required by law or needed to resolve disputes
  • Subscription and billing records: as required for tax, accounting, audit, and legal compliance
  • Support and security logs: for a limited period appropriate to security monitoring and troubleshooting
  • Aggregated or de-identified data: for as long as useful for analytics and product improvement

We may retain information longer where required by law, to enforce our agreements, or to establish, exercise, or defend legal claims.

10. Data Security

We implement administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, secure authentication through Firebase, access controls, and vendor security requirements. No security program is perfect, and we cannot guarantee absolute security of information transmitted or stored electronically.

If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law and take reasonable steps to mitigate harm.

11. Program Workspace and Shared Access

Pro accounts include a private Program Workspace that may be shared with authorized staff seats assigned by the account holder. Information you submit to a Program Workspace may be visible to other authorized seat holders for that workspace. You are responsible for managing seat access and ensuring that workspace data is shared only with appropriate personnel.

We restrict internal access to Program Workspace data to personnel who need such access to operate, secure, or support the Services, subject to confidentiality obligations.

12. Automated Analytics and Inferences

The Services use algorithms and models to generate rankings, PVS scores, NIL valuations, and related outputs. These features are informational tools only. We do not make solely automated decisions that produce legal or similarly significant effects concerning you. You should independently verify analytics before making recruiting, contractual, financial, or compliance decisions.

13. Your Privacy Rights

Depending on your state of residence, you may have rights regarding your personal information. Subject to applicable law and exceptions, these rights may include the right to know, access, correct, delete, obtain a portable copy of, and limit certain uses of your personal information.

To submit a privacy request, email info@rivalssports.com with the subject line "Privacy Request" and include your name, email associated with your account, the state where you reside, and the nature of your request. We will verify your identity before fulfilling requests and will respond within the timeframe required by applicable law (generally within forty-five (45) days, with permitted extensions where allowed).

We will not discriminate against you for exercising privacy rights. You may designate an authorized agent to submit a request on your behalf where permitted by law, provided we can verify the agent's authority.

13.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including:

  • The right to know the categories and specific pieces of personal information we collected, the sources, purposes, and categories of third parties to whom we disclose it
  • The right to delete personal information, subject to exceptions
  • The right to correct inaccurate personal information
  • The right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
  • The right to limit the use and disclosure of sensitive personal information to purposes permitted by law
  • The right to non-discrimination for exercising your rights

In the preceding twelve (12) months, we have collected the categories of personal information described in Section 2 for the business purposes described in Sections 4 and 6. We have not sold personal information.

13.2 Texas Privacy Rights (TDPSA)

If you are a Texas resident, you may have rights under the Texas Data Privacy and Security Act, including rights to access, correct, delete, and obtain a copy of personal information, and to opt out of certain processing such as the sale of personal information or targeted advertising. We do not sell personal information or engage in targeted advertising as defined by the TDPSA. To appeal a denied request, contact us at info@rivalssports.com with the subject line "Privacy Appeal."

13.3 Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights, including rights to access, delete, correct, obtain a copy of, and opt out of certain processing. Where required, we will honor applicable state-specific rights and appeal processes.

14. Marketing Communications

We may send transactional or service-related emails and messages without opt-in, including account verification, security notices, subscription confirmations, and support responses. We send promotional emails only if you have opted in or as otherwise permitted by law.

You may opt out of promotional emails at any time by clicking the unsubscribe link in a message or emailing info@rivalssports.com. Opting out of marketing does not affect transactional communications.

15. Children's Privacy

The Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. Users between 13 and 18 may use the Fan tier only with parental or guardian permission, as required by our Terms. Pro features are intended for authorized college athletic staff.

16. Third-Party Links

The Services may contain links to third-party websites, platforms, or services. We do not control and are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page, update the "Last updated" date, and provide additional notice as required by law, which may include email notice to registered users. Your continued use of the Services after the effective date of an updated policy constitutes acceptance of the changes.

18. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Rivals Sports Inc.
a Delaware corporation, doing business as Rivals GM
Attn: Privacy & Legal Inquiries
Email: info@rivalssports.com
Website: rivalssportsinc.com

For privacy rights requests, email info@rivalssports.com with the subject line "Privacy Request." If you require a physical mailing address to submit a request, contact us by email and we will provide our current mailing address.