Our approach to privacy
Sign in through your school, not a CoachFitTrack password
There is no CoachFitTrack password, for anyone — staff and students alike sign in through their school or district's existing identity provider (Google, Microsoft Entra ID, Clever, or another standards-based single sign-on system). CoachFitTrack never sees or stores a password.
UserUIDs, not identities
Every person who signs in — coach, administrator, or student — is identified
internally by a randomly generated, cryptographically secure UserUID such as
K7M4-2PQR. A student's UserUID is never derived from their name, school ID, date of
birth, or any other personal identifier, and CoachFitTrack does not provide any feature to map a
student's UserUID back to their identity.
Schools keep the identity mapping
Coaches and athletic staff maintain their own secure mapping from a student's UserUID to their identity outside of CoachFitTrack, using whatever system their school or district already uses for that purpose. CoachFitTrack is designed so it never needs to see that mapping.
What we intentionally do not collect about students
- Student names
- School student IDs
- Student dates of birth
- Student email addresses
- Parent or guardian contact information
- Student photographs
Staff accounts are the one exception: because staff are not anonymous within their school or district, a staff member's name and email (from their own SSO sign-in) are stored so coaches and administrators can be identified and contacted. That exception never applies to student accounts.
Records tied to a UserUID may still be protected student records
Even without direct identifiers, performance histories tied to a student's UserUID may still qualify as protected education records under applicable law, depending on how your school or district uses CoachFitTrack. We treat those records with that level of care — strict district, school, and team access controls, no public access to individual records, and audit logging of sensitive operations.
We do not claim CoachFitTrack is FERPA-compliant simply because it avoids direct identifiers. Compliance depends on how your school or district configures and uses the platform, and you should evaluate that independently for your own context.
Access controls
Every request to CoachFitTrack is checked against the signed-in staff member's active district, and against their specific school and team access grants — not just their role. Administrative roles do not automatically receive unrestricted access to student records.