Privacy statement

What IDPlans is

IDPlans is an athlete-development platform, operated by Churate Limited (a New Zealand company), used by schools and sports organisations to manage individual development plans, physical testing, session planning, squad selection and daily wellness monitoring. Your organisation (for example, your school) controls the account and decides what is collected; IDPlans stores and displays it on their behalf.

What we collect

• Account details — name, email address, role (player, coach, director), team and year group.
• Development data — reports, goals, coach feedback, physical test results, and maturation estimates entered by your organisation.
• Wellness & training data — the daily check-ins, session ratings (RPE), reflections and availability that players choose to submit. The questions asked are set by your organisation.

Who can see it

• Players see their own data only.
• Coaches see data for players in the teams they coach.
• Directors and organisation admins see data across their organisation's sport programme.
• Data is never shared between organisations, sold, or used for advertising. We do not use it to train AI models.

Young people

Most players on IDPlans are under 18. Wellness and development information about young people is treated as sensitive: access is restricted by role as above, collection is limited to what the organisation's programme needs, and players can see everything held about them by logging in. For players under 16, organisations obtain verifiable parental or caregiver consent, and a consenting parent can be given their own read-only login to see their child's reports and export their data. Privacy rights pass to the athlete at 16.

Where it's stored & how long

Data is hosted in Sydney, Australia (database on Neon/AWS; application on Vercel), encrypted in transit (TLS) and at rest (AES-256). We keep data while the organisation's account is active. When a player leaves, their records can be erased on request, or automatically after a window the organisation sets; an organisation can export or delete its data at any time. Deletion is permanent erasure, not deactivation.

Your rights

Under the New Zealand Privacy Act 2020 you may ask for a copy of the personal information we hold about you and ask us to correct it. Start with your organisation's administrator, or contact us directly and we'll help.

Contact

Questions or concerns about privacy: email admin@idplans.app. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).