How we protect your family's data

Your athlete's profile, assessment answers, and coach-outreach history live in a database where each row is stamped with the account that owns it. Our access rules enforce that ownership at the database level — not just in the app — so one family's data can't be pulled by another family's account.

When we generate a Reality Report or draft a coach email, the AI providers we use receive the athletic and academic details we need to answer the question — but not your athlete's name, email, phone, home address, or school. Direct identifiers are stripped before the request leaves our servers. This is spelled out in our Privacy Policy and it's how the assessment has always worked.

No brokers, no lead resale, no "partner networks" that quietly monetize a list of teenage athletes. Prospecta is paid by families who choose to subscribe, and by nothing else. No recruiting service, event, camp, or club pays us for placement in any tool or report on this site.

Sign-in, password reset, and session management run on a managed authentication platform used by thousands of production apps. Passwords are hashed and salted; you can sign in with Google if you'd prefer not to manage another password.

Every request between your browser and Prospecta is served over HTTPS. Data is stored encrypted at rest by our database and file-storage providers, using industry-standard AES-256.

Before opening Prospecta up to broader outreach with real families, we completed a fresh security review and a hardening pass on the systems that handle family data. We treat this as ongoing work, not a one-time checkbox — access rules and permissions are reviewed as we ship new features.