Student Data Privacy

Last updated: June 2026

BookADual is a scheduling tool for coaches. We designed it to need as little student data as possible. This page explains our posture for schools and districts.

What we collect

• Coach / staff accounts: name, email, password (hashed), and the school they belong to.
• Scheduling data: meet dates, opponents (schools), locations, levels (Varsity/JV/MS/Girls), tournaments, and availability.

What we do NOT collect

• No student names, IDs, grades, birthdates, health/medical data, weigh-ins, or rosters.
• No directory information about minors. BookADual schedules schools against schools, not individual athletes.

FERPA & COPPA posture

Because BookADual does not collect education records or personal information from students, we do not act as a repository of FERPA-protected records, and the service is intended for coaches and adult staff, not children under 13 (so COPPA's consent obligations are not triggered by our design). Where a school provides any data, the school (or district) is the data controller and BookADual acts as a service provider/processor on its behalf and at its direction.

Sub-processors & data location

• Cloudflare — hosting, database (D1), and email routing (United States).
• Better Auth — authentication (runs within our Cloudflare environment).
• Resend — transactional email delivery (United States).

Data is stored in the United States. We do not sell data or use it for advertising.

Retention, deletion & breach notification

• Retention: account and scheduling data are kept while the account is active.
• Deletion on request: a school or coach may request deletion of their account and associated data by emailing hello@bookadual.com; we will delete it within 30 days.
• Breach notification: in the event of a data breach affecting your data, we will notify the affected school without undue delay.

Data Processing Addendum (DPA) & state agreements

We are willing to sign a Data Processing Addendum and common state student-data-privacy agreements (for example, the National Data Privacy Agreement / SDPC exhibits) on request. To request a DPA or have us review your district's agreement, email hello@bookadual.com.

This page is informational and not legal advice. Schools should review it with their own counsel and privacy officer.