Youth Data & Privacy
This platform processes video and biometric-derived data belonging to minors. That fact shapes the architecture, not just the paperwork. Below is what we do, in the order it happens.
Guardian consent for athletes under 18
No athlete under 18 is processed until a parent or legal guardian has given explicit, informed consent for that specific athlete and that specific program.
Consent is recorded per athlete, per organization, and is revocable at any time without needing to give a reason. Revocation stops future processing immediately and triggers the deletion path below for existing data.
Consent language states plainly what is collected (match video, derived skeletal keypoints, computed performance metrics), who can see it, how long it is kept, and how to remove it.
GDPR Article 8 and UK-GDPR (Europe)
Where an athlete is below the applicable age of digital consent, processing relies on guardian authorization consistent with GDPR Article 8 and the UK-GDPR equivalent.
Skeletal and pose-derived measurements relating to an identified athlete are treated as personal data with heightened care, and where they function as biometric identifiers they are handled under the corresponding special-category safeguards.
Data subject rights — access, rectification, erasure, restriction, and portability — are supported through the organization that holds the relationship with the athlete, with a defined response window.
COPPA and US state biometric statutes
For athletes under 13 in the United States, verifiable parental consent is obtained before any collection, consistent with COPPA.
Where state biometric privacy statutes apply — including the Illinois Biometric Information Privacy Act (BIPA) — we operate on written notice plus written release, a published retention schedule, and a prohibition on selling, leasing, or trading biometric identifiers.
Biometric-derived data is never sold, licensed to third parties, or used for advertising, profiling outside athletic performance, or any purpose beyond the evaluation the program commissioned.
Data minimization
We keep the minimum necessary to compute and explain a score. Frames are processed to extract keypoints and metrics; we do not build face-recognition galleries and do not use facial identity as a matching mechanism.
Athlete identity is a program-scoped ID. Cross-program similarity search operates on movement embeddings, and is only enabled for organizations that have explicitly opted in with consent covering that use.
Access is scoped by row-level security: a coach sees only their assigned age groups.
On-premise edge processing
Programs that cannot allow youth footage to leave their premises can deploy the Jetson Orin edge appliance. Perception runs entirely on-site.
In that configuration, raw video never crosses the network. Only derived, non-video metrics are synchronized to the reporting layer.
This is the default recommendation for school districts and academies operating under strict local data-residency policy.
Retention and hard deletion
Raw footage is retained for a defined, contractually agreed window, tiered to cool storage after 30 days, and then removed on schedule.
Deletion is a hard path, not a hidden flag: source footage, derived frames, skeletal sequences, movement embeddings, computed scores, and generated narratives are removed together, including from backups on the documented backup rotation.
A deletion request produces a written confirmation naming exactly what was removed and when.
Questions we expect, answered plainly
Do you use facial recognition?
No. Athlete association uses appearance and motion features within a match, plus program-assigned identity. We do not build or store face-recognition templates.
Can an athlete opt out individually?
Yes. An athlete or guardian can withdraw at any time; that athlete is excluded from processing and their existing data goes down the deletion path.
Who owns the footage?
The program does. We process it under their instruction as a service provider and do not repurpose it.
Is data used to train models?
Only with explicit, separate, revocable opt-in from the organization and the relevant guardians. It is off by default.
Bring your compliance officer to the call.
We'd rather answer the hard data questions in the first 30 minutes than in month three.