Security and privacy
Built as if every record belonged to someone's child. Because it does.
CoachPath stores names, photos, videos, progress notes, and training locations for young athletes. These are the controls that protect them.
Private by default
Photos, videos, notes, and locations are visible only to the trainer until they are explicitly shared with a family. Private trainer notes are stored separately and are never shown to parents or athletes.
Guardian-controlled minors
A parent or guardian owns the account for a minor. Athlete logins are optional, created by the guardian, and limited to what the trainer shares.
Signed media links
Files are never served from a public bucket. Every download or playback link is checked against who is asking and expires shortly after.
Workspace isolation
Every record belongs to one trainer workspace. Authorization is enforced on the server for every read and write, and tested so one trainer can never see another's athletes.
Consent and audit records
Terms, privacy, media-release, and booking-policy consent are recorded with a version and time. Sensitive actions are written to an audit log.
Export and deletion
Families can request an export or deletion of their child's data. Trainers can set retention periods. No advertising is built on athlete data, and data is never sold.
Verification
What a badge means, and what it does not
Two separate signals appear on a trainer page. Neither is automatic, neither is bought, and neither is a promise about the future.
Verified trainer
Someone on our team reviewed the published page and checked the trainer's identity against the credentials they list. It says the page describes a real coach with the qualifications shown. It is not a review of their coaching.
Background checked
A criminal background check was completed for that coach, by a licensed screening agency, in the month shown. Each coach carries their own badge, and a page only claims it for the whole team when every coach listed has one.
A check has a date. It reports what public records showed when it ran. It cannot say anything about what happens next, which is why we always show the month and expire a badge after two years.
We hold no reports. The screening agency collects identity details on its own secure pages and keeps the report. CoachPath stores only whether a check cleared, and when. No offences, no case numbers, no Social Security numbers.
A missing badge means nothing in particular. Most coaches without one simply have not run a check. We never publish why a badge is absent, because that would disclose someone's personal records.
Disputes go to the agency. A coach who believes a report is wrong disputes it with the screening agency, which holds the record and must correct it. They send the report and a summary of the coach's rights directly.
A badge is one input, not a substitute for your own judgement. Meet the coach, watch a session, and ask for references.
What we do not do
- Index private portal content in search engines.
- Show any athlete on a public page without explicit publication and guardian consent.
- Put secrets or access keys in code that runs in the browser.
- Offer medical advice or act as a medical record. Health notes are optional, minimal, and trainer-only.
- Present a background check as a guarantee of safety, or let anyone pay for a badge.
- Publish, sell, or share the contents of a background check with families.
Read the Privacy Policy for the full picture of what is collected and why.
Ready to give every athlete a place to see their progress?
Start a 14-day free trial. No card required to begin. Parents and athletes are always free.