← CBF Performance

Privacy Policy

Last updated: November 9, 2026

This policy explains how information is handled through cbfperformance.app and cbfperformancesystems.com. It covers account holders, invited athletes and staff, website visitors and email subscribers.

Operator and privacy contact

CBF Performance Systems, LLC operates CBF Performance. Coach Bill Fountain handles privacy and parent inquiries: bill@cbfperformancesystems.com; (312) 414-9991; 1217 Sun Lake Ct, Lake Villa, IL 60046. Email with the subject “Privacy request” or use your private parent-permission link.

Information you provide

Information may include your name, email address or phone number, account type, authentication information, subscription selection, team and roster details, invitations, training plans, workout results, athlete profile information, coaching notes, imported records and messages to support. Email signup information includes your email, optional name or interests, signup source and subscription preferences. Collect and enter only information necessary for the service; avoid detailed medical records or other unnecessary sensitive data.

Technical information and device storage

The app uses a session cookie to keep you signed in and browser storage, including local storage and IndexedDB, to support saved preferences, drafts, cached account information, offline workouts and synchronization. Hosting services may process IP addresses, browser/device information and request logs. Internal app analytics record account-linked visits, logins, feature actions, request status and error codes so the owner can understand usage and troubleshoot. These analytics are not anonymous. Shared computers can retain locally stored information; sync your work and sign out when finished. Under-13 accounts require an online session rather than offline sign-in, so permission status can be checked. Locally saved information cannot be remotely erased from a disconnected device; parents should clear site data on shared or retired devices.

How information is used

Information is used to provide accounts and team access, save and synchronize plans and workout history, show progress, manage subscriptions, send invitations and account messages, respond to support, protect the service and improve reliability and usability. Launch and promotional emails are sent according to your signup preferences. Creating an app account does not automatically subscribe you to launch promotions.

Who can see information

Authorized coaches, staff and athletes can access information made available through their team roles and sharing settings. The owner can access information needed for administration, support and service operation. Public practice links can be viewed by anyone who has the link; recipients may copy or forward them. Personal information is not sold or rented, and account or workout data is not shared with advertisers for targeted advertising.

Service providers and external content

GoDaddy provides hosting and database infrastructure. Resend delivers app emails. Google Workspace handles support correspondence. When payments are enabled, Stripe processes payment information and provides billing services; the app stores billing identifiers and subscription status rather than full card numbers. These providers process information needed for their services under their own applicable terms and privacy notices. External demonstration videos, including YouTube videos, can collect technical information and use cookies when you open their players or links. Information may also be disclosed when required by law, to protect rights and security, or in connection with a business transfer subject to appropriate protections.

Email choices

Use the unsubscribe link in a promotional email or contact support to stop promotional messages. Necessary account, security, billing or requested support messages may still be sent. An unsubscribe record may be retained so your preference continues to be honored. Unsubscribing from email does not cancel a paid subscription.

Retention and security

Account and training information is retained as needed to provide the service and meet legal, accounting, security or dispute-resolution obligations. Detailed internal analytics events are routinely cleaned up after 90 days; account activity summaries may remain longer. For under-13 enrollment, unanswered or unapproved permission requests are removed after 30 days. Approved child account records are retained while the account is used; after 12 months without account use, permission expires. Child accounts, linked training and structured coaching records are deleted within 30 days after withdrawal or expiry. A restricted consent audit record is retained for one year after closure to document permission and withdrawal, then removed. Database backup copies are kept in restricted storage for recovery. Deletion requests must also be addressed in backup handling and reapplied before restored data is used. Coaches must remove separately downloaded copies when required. Reasonable security measures are used, but no system is completely secure. Adult subscription cancellation alone does not erase account data.

Access, correction and deletion

You may update available account information in the app and ask support for access, a copy, correction or deletion of your information. Depending on applicable law, you may also have rights to restrict or object to processing or appeal a denied request. The operator may verify your identity and authority before acting. Some records may need to be retained for legal obligations, security, billing disputes or opt-out preferences; any applicable limitations will be explained. Team-managed records may require coordination with the coach or organization. Requesting deletion does not itself stop subscription renewal; use Manage subscription or explicitly ask support to cancel too.

Children and school records

Under-13 athlete accounts require the coach to request parental permission before account creation. The coach supplies the athlete name, sign-in contact and parent email. The parent receives a direct notice, opens the private link and clicks Approve. Approval immediately permits the inviting coach to enroll that athlete. Opening an email or link alone does not approve permission. No signature form, operator approval, parent account, payment card or charge is required. The record includes the inviting coach, parent email, athlete details, notice version and text, approval time and record checksum. This is email-based permission and is not represented as independent identity verification. Parent emails are used for permission and service messages, not automatically subscribed to marketing. Parents can use their private link to request records or deletion or withdraw permission. Withdrawal stops online athlete access and new assignments; coaches must stop further collection and cooperate with records requests. Athletes ages 13–17 need parent or guardian permission. Schools should contact support about required agreements before submitting regulated student records.

Under-13 safety restrictions

Under-13 accounts cannot upload photos or files, use private athlete-to-coach messaging, submit practice feedback or workout comments, or save/share written mental-performance reflections. Numeric workout results and completion can be recorded. Public sharing and embedded external video players are disabled. Direct communication should go through the parent. Training prescriptions and instructions from coaches remain available; these restrictions reduce risk but do not guarantee safety or replace supervision. Children’s contacts are excluded from customer marketing messages.

Location and updates

The service is operated from the United States, and providers may process information in other locations. Applicable privacy rights are not waived by using the service. This policy will be updated when practices change, with notice or consent for material changes where required. Contact bill@cbfperformancesystems.com for questions.

Business tools and website measurement

Our business hub stores customer contact details, requested resources, business notes, and email preferences in a private business database. Requesting a sample does not automatically subscribe you to promotional emails. The business admin uses a secure session cookie for owner login. Short-lived hashed network identifiers help limit abusive requests. Local recovery backups are retained for seven days.

Public pages on cbfperformancesystems.com load Google Tag Manager to manage website measurement tags. Depending on the tags enabled in that container and your browser settings, Google Analytics may receive page and device information and use cookies to measure visits. We do not include this container on private business-admin, password-reset, email-confirmation or unsubscribe pages. Learn more about how Google uses information from sites that use its services.

Our earlier local page-view counter has been retired. Existing aggregate counts are retained for up to 400 days; new visits are no longer added to that counter. Hosting providers may separately retain their normal server logs. Contact bill@cbfperformancesystems.com with questions about your contact record or email preferences.