SO-LA

Privacy Policy

Last Updated: August 2026

1. Introduction

so.LA ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our training session booking platform (the "Service").

2. Information We Collect

We collect information that you directly provide to us when registering an account, managing player information, and purchasing training sessions.

A. Parent / Guardian Information

  • First and last name
  • Email address (for account credentials, notifications, and booking receipts)
  • Phone number
  • Physical address (street, city, state, zip code, country)
  • Relationship to player (e.g., "Mother", "Father", "Grandparent")
  • Account credits and history

B. Player (Child) Information

  • First and last name
  • Date of birth (used to confirm age eligibility)
  • Gender (optional)
  • Soccer background (experience level, dominant foot, skill level, preferred positions)
  • Club, league, and coach information
  • Media consent choice (for session photography/videos)
  • General training notes

C. Emergency Contact & Medical Information

Due to the physical nature of soccer training, parents submit the following sensitive health and safety details:

  • Emergency contact names, phone numbers, and relationships
  • Information regarding allergies, medical conditions, and medications
  • Health insurance provider and policy/group numbers
  • Authorized medical treatment consents

D. Consent and Waiver Information

  • Electronic signatures (finger-drawn or text-typed signature images/data)
  • Timestamp of waiver acceptance
  • IP address from which the waiver was signed

E. Booking and Attendance Information

  • Training session history and future registrations
  • Attendance and QR code check-in logs
  • Cancellation logs

F. Payment Information

Payments are processed by Stripe. We do not store full credit/debit card numbers on our servers. We store:

  • Stripe Payment Intent IDs
  • Payment amounts, statuses (paid, pending, refunded)
  • Receipt URLs
  • Applied coupon codes

3. How We Use Information

We use the information we collect for the following operational purposes:

  • Creating and managing your parent account
  • Registering youth players and managing session bookings
  • Processing transactions and applying discounts via Stripe
  • Verifying player attendance via QR check-ins
  • Administering emergency medical care and contacting emergency contacts if an incident occurs during training
  • Sending booking confirmation emails and service updates via Resend
  • Complying with legal requirements and ensuring platform security

4. Children's Privacy (Players Under Age 13)

Our Service involves the registration of youth soccer players, many of whom are under the age of 13.

No Direct Child Registration: The Service is not intended for use by children under the age of 18. Children are not allowed to independently create accounts, submit personal information, or purchase training sessions. All player information, including names, dates of birth, and medical info, must be entered exclusively by the child's parent or legal guardian.

Parental Control: If you believe a child has independently submitted personal information to us without parental consent, please contact us immediately so we can delete the information.

5. Medical Information and Safety

Medical information provided is accessible only to authorized coaches, administrators, and emergency personnel. This application is not a HIPAA-covered entity, and information is stored solely for field safety and emergency response purposes during training sessions.

6. Service Providers and Sharing

We share your data with the following core service providers necessary to operate the Service:

  • Supabase: For user authentication and secure backend operations.
  • Stripe: For secure payment gateway processing.
  • Resend: For dispatching notifications, booking confirmations, and inquiries.
  • Vercel: For cloud hosting and serverless functions.

We do not sell, rent, or trade personal data to third parties for marketing or advertising purposes.

7. Cookies and Tracking

We use essential session cookies necessary for user authentication (Supabase auth tokens) and managing your active session. We do not currently implement marketing or third-party behavioral tracking cookies (such as Meta Pixel or Google Analytics) unless authorized or updated in the future.

8. Data Retention

We retain personal data and player records for as long as your parent account is active, or as needed to provide the Service, resolve disputes, and enforce our agreements.

9. Data Security

We implement industry-standard administrative, technical, and physical security measures (including secure HTTPS connections, database access controls, and token-based API authentication) to protect your personal information. However, no database or transmission over the Internet can be guaranteed to be 100% secure.

10. California Privacy Rights

Where applicable under California law, California residents may have specific rights regarding their personal information, including the right to request access, correction, or deletion of their stored records. To submit a request, parents may contact us through the Contact form on our Website.

11. Governing Jurisdiction

Our platform is operated and hosted in the United States and is intended for use within California. Any disputes regarding data privacy will be handled in accordance with the laws of the State of California.

12. Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please submit an inquiry via the official Contact Us page on the Website.