GuardNIL

Last updated: 2026-09-09 · Designated security personnel: Galen Oakes — privacy@guardnilu.com

COPPA Direct Notice

Effective date: 2026-05-08 · Version 1.2

This notice is provided to parents and legal guardians under the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and the FTC's implementing rule (16 C.F.R. Part 312), as amended effective April 22, 2024.

Who We Are

GuardNIL University (guardnilu.com) is operated by GuardNIL, which issues this notice and our Privacy Policy. It is a family technology platform that lets parents fund and manage simulated NIL (Name, Image, Likeness) allowance contracts for their student-athletes. Our designated privacy contact is Galen Oakes — privacy@guardnilu.com.

What Information We Collect from Children Under 13

  • First name (entered by parent)
  • Date of birth (entered by parent, used for age-gating only)
  • School or team name, if the parent enters one
  • Academic performance data (entered by the parent)
  • XP, streaks, achievements, and daily recovery logs (generated by platform use)
  • Education module completion status

We do not give the athlete a login. All access is parent-mediated.

How We Use This Information

  • To operate the GuardNIL platform on the child's behalf
  • To calculate incentive completions and payment eligibility
  • To display progress to the parent and coach (within the platform only)
  • To maintain records required by applicable law

We do not use children's personal information for advertising. We do not sell children's personal information.

How We Share This Information

Information about children under 13 is shared only with:

  • The parent or legal guardian (full access)
  • The athlete's coach (limited to performance and schedule data)
  • Supabase (database hosting, encrypted)
  • Stripe (payment processing — no child data)
  • Resend (email delivery — notification content only, to parent email)

AI features (Anthropic, Google) are not used for children under 13 without explicit parental consent obtained during onboarding. Those features receive only the text of the request the parent just made, not the child's records.

We collect first-party page-view and form-interaction analytics on public pages (anonymous visitor ID, country/city, page URL, scroll/dwell, form-field completion). Device fingerprinting is off. This data is stored in our own database, is not shared with third-party advertisers, and is auto-deleted after 90 days. See our Privacy Policy section 3 for the full field list.

Parental Rights and Controls

As a parent or legal guardian, you have the right to:

  • Review your child's personal information at any time by logging into your dashboard
  • Correct inaccurate information through the dashboard or by contacting us
  • Delete your child's information by requesting account deletion in Settings
  • Refuse further data collection by closing the account (required records are retained per law)
  • Revoke consent for specific third-party processors through the Privacy Settings page

Verifiable Parental Consent

Before creating an athlete profile for a child under 13, GuardNIL obtains verifiable parental consent via credit card micro-charge ($0.50) as permitted under the COPPA 2024 amendments. This charge is retained as a consent record and is not refunded.

Data Retention

Personal information collected from children is retained only as long as necessary to fulfill the purpose for which it was collected. Upon account deletion, child data is soft-deleted immediately and permanently deleted within 30 days, except for consent records (3 years) and financial records (7 years) as required by law.

Contact

To exercise parental rights or ask questions about this notice: