Effective October 3, 2026

Privacy Policy

Atra ("Atra", "we", "our", or "us") provides a performance tracking platform for track athletes and their coaches. This Privacy Policy explains what information we collect, how we use it, and with whom we share it. By creating an account or using the app, you agree to the practices described below.

1. Who this policy applies to

Atra is licensed to U.S. colleges and universities (each, an "Institution") and made available to their student-athletes and coaching staff. If you use Atra through an Institution, Atra provides the service on that Institution's behalf and under its direction, and the Institution has contractual rights to access data produced within its program, consistent with applicable law (including the Family Educational Rights and Privacy Act, "FERPA", where applicable).

2. Information we collect

Account information. Name, email address, date of birth, profile photo, bio, club/team, and your selected Institution. When you sign in with Google, we receive your name, email, and profile picture from Google.

Performance data. Training sessions, lifting sessions, performance marks in every event you compete in (sprints, hurdles, distance, jumps, throws, relays, cross country and combined events), how you rated each session, event-specific notes (e.g. run-up steps, pole length, grip), and competition history you enter.

Wellness and injury data. Your daily readiness check-ins, the injuries you report and how their pain evolves, the follow-up notes your athletic trainer adds to them, and the appointments you request with team staff.

Schedule data. Your class timetable and your training schedule, when you enter them.

Information your staff records about you. Your coaching staff may record information about you in Atra, such as your apparel sizes, coach notes and, for staff your Institution authorizes, scholarship and financial-aid details.

Public competition results. Results already published about you on public results services (TFRRS, World Athletics), which we look up by your name to show your official marks.

Team and communications data. Team membership (coach/athlete relationships), join requests, direct messages, group conversations, friendships, and read receipts.

Documents you upload. Files you upload to Atra - training plans, meet schedules, entry lists, itineraries and similar documents - and the information we extract from them. These documents may contain the names and details of other members of your team.

Authentication and security data. Hashed passwords, one-time codes sent by email for password resets, and OAuth tokens. We do not store your password in plain text.

Device and usage data. Basic technical information needed to operate the service (device type, operating system, app version, approximate connection metadata, and log data). We do not collect precise location.

3. How we use your information

• Provide, operate, and maintain the app.

• Display your data to you and to the coaching staff of the team(s) you have joined, according to the sharing choices you make in the app. Your injuries and daily check-ins only reach your head coach and athletic trainer unless your Institution opens them to other staff.

• Enable messaging and team management.

• Read the documents you upload with an AI model, so a training plan or a meet packet becomes sessions, schedules and entries in the app.

• Check and improve how accurately documents are read. Authorized Atra personnel may open a document a coach has uploaded, and what our automated reading extracted from it, to find reading errors and fix them, including checking that a fix reads that document correctly before it reaches you. Access is limited to providing and maintaining the service for your Institution, and every time a document is opened this way the access is logged.

• Authenticate you, protect accounts from abuse, and send account-related emails (e.g. password reset codes).

• Use technical and usage data to run, secure and support the service. We improve the product only with de-identified data, and we never sell your data, use it for advertising or marketing, or use it to train AI models.

• Comply with legal obligations and enforce our terms.

4. Legal bases

Where applicable law requires a legal basis, we rely on (i) performance of our contract with you and your Institution, (ii) our legitimate interests in operating and improving the service, (iii) your consent (for example, for certain optional features or communications), and (iv) compliance with legal obligations.

5. How we share your information

With your coaches and Institution. When you join a team, your profile and the data you choose to share become visible to that team's coaching staff, and to Institution staff authorized to administer the license. Your Institution decides what each member of its staff may see: it can narrow what you share, never widen it. This sharing is a core feature of the product.

With other athletes you interact with. Messages, group chats, and friend connections are visible to the users you communicate with.

With service providers. We rely on trusted vendors to host and operate the service, including Convex (database, file storage and real-time backend), Resend (transactional email), Google (sign-in, and the Gemini AI model, through Google Cloud's Vertex AI, that reads the documents you upload), Apple (sign-in), and Expo, Apple and Google (delivery of push notifications). These providers process data on our behalf under contractual confidentiality and security obligations.

With public results services. To find your published results, we send your name to TFRRS and World Athletics as a search, and then open the public profile it leads to. We send them nothing else.

For legal reasons. We may disclose information when required by law, legal process, or to protect the rights, safety, or property of Atra, our users, or the public.

Business transfers. If Atra is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction only to a successor bound by this policy and by Atra's agreements with Institutions. Each Institution is told beforehand and may have its program's data returned or deleted instead.

We do not sell your personal information, and we do not use your data for cross-context behavioral advertising.

6. FERPA and student-athlete data

When Atra is used by a U.S. Institution, records maintained in the app that relate to an identified student may qualify as "education records" under FERPA. In those cases, Atra acts as a "school official" with a legitimate educational interest: it performs a service the Institution would otherwise perform with its own staff, under the Institution's direct control with respect to the use and maintenance of those records. Atra uses them only to provide that service, and does not disclose them to anyone else except at the Institution's written direction or as FERPA permits.

Your rights under FERPA - to inspect and review your education records, and to ask for the correction of records you believe are inaccurate - are exercised through your Institution. Contact its registrar or athletic department; Atra will help the Institution answer within the time FERPA allows.

Your Institution tells you about these rights each year in its annual FERPA notice, which may name Atra among the school officials it uses. These rights are yours, not your parents'. Atra never discloses your records to your parents; any such request goes to your Institution, which alone decides.

Atra does not disclose your education records to anyone outside your Institution's staff. If a feature ever offered to share them elsewhere - with a recruiter, a parent or another school, for example - it would first ask for your written consent, saying which records, for what purpose and to whom, and keep a record of your signed approval. Any disclosure Atra makes on your Institution's behalf is recorded and the record given to your Institution. If your health or safety, or someone else's, is in danger, your Institution decides whether to disclose information and keeps the record FERPA requires.

Atra does not publish directory information about you (such as your name, sport or year) outside your Institution, so a directory opt-out you make with your Institution is respected in Atra as well.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the service. When you delete your account from the Settings screen, we delete your personal data - including your training, wellness and injury history, your messages, and what your staff recorded about you in Atra - except where we must keep it to comply with legal obligations, resolve disputes, or enforce our agreements. Institution administrators may retain performance records associated with their program in accordance with their own retention policies. When an Institution's agreement with Atra ends, we return or delete the data of its program as that agreement provides.

Documents you upload are kept for as long as your team uses Atra, so they can be opened again from the plan library, a meet, or the training calendar - including a document whose calendar import was not completed. A plan deleted from the plan library is deleted together with its file. You can ask us at support@atracoach.com to delete any document you uploaded.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. You can:

• Edit your profile directly in the app (Settings → Profile).

• Leave a team at any time from your settings.

• Delete your account from the Settings screen, which removes your personal data as described above.

• Contact us at support@atracoach.com to exercise any other rights.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

9. Security

We use industry-standard safeguards to protect your information, including encryption in transit, encrypted storage of authentication tokens on your device, hashed passwords, and access controls at our backend. No system is perfectly secure; we encourage you to use a strong, unique password and to keep your device protected.

10. Children

Atra is intended for college-level student-athletes aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

11. International users

Atra is operated from the United States and primarily serves U.S. institutions. If you access the app from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Effective" date at the top of this page indicates when it was last revised.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@atracoach.com.