Legal
BasketBall Atlas — mobile application (Android package com.bballaiscoutmobile) and website
Effective date: 28 July 2026 · Last updated: 28 July 2026 · Version 1.0
This Privacy Policy explains what personal information BasketBall Atlas collects, why we collect it, who we share it with, how long we keep it, and the choices and rights you have over it. Please read it before creating an account.
BasketBall Atlas (the “App” or the “Service”) is a basketball scouting and analytics platform. It provides an athlete and team database, AI-generated scouting and analytics reports, player profiles, and tools that help players, coaches, scouts, agents and fans evaluate and present basketball talent.
The App and the associated website are operated by BasketBall Atlas (“we”, “us”, “our”), of 5706 Surrey St. Chevy Chase, MD 20815 USA.
For the purposes of the EU and UK General Data Protection Regulation, we are the data controller of the personal information described in this policy. For the purposes of U.S. state privacy laws, we are the business that determines the purposes and means of processing.
Privacy contact: dean.mazlish@basketballatlas.com
Website: https://www.basketballatlas.com
This policy applies to:
It does not apply to third-party websites, apps or services that we link to or that you reach from the App — including the payment pages operated by our payment processor. Those services have their own privacy policies, and we encourage you to read them.
You must be at least 13 years old to create an account. The Service is used by high-school and college basketball players, as well as coaches, scouts, agents and fans. It contains no adult content. We do not knowingly permit anyone under 13 to register or to submit any information to us.
The Service is not directed to children under 13 and we do not knowingly collect personal information from them. If we learn that we hold information provided by a person under 13, we will delete that information and close the account promptly. If you believe a child under 13 has given us personal information, contact us at dean.mazlish@basketballatlas.com and we will act without undue delay.
Players in this age range are a core audience for the Service. If you are between 13 and 17:
We apply the following protections to accounts belonging to users under 18:
Guidance for young players and their families. A scouting profile is designed to be seen by coaches, scouts and other subscribers — that is its purpose. Please think about what a video or written answer reveals before you publish it. Do not include a home address, school timetable, personal phone number, or any other detail you would not want a stranger on a paid plan to see, in free-text answers or in the audio or footage of a video. Nothing in Section 2 is mandatory, and it can be removed at any time.
If you are the parent or legal guardian of a user under 18, you may contact us at dean.mazlish@basketballatlas.com to:
We may ask you for information reasonably necessary to confirm that you are the parent or guardian of the account holder before we act, so that we do not disclose a young person's information to someone who is not entitled to it. We will respond within the timeframes set out in section 15 and section 16.
What we collect depends on how you use the Service. Browsing the public database requires far less information than creating a player profile with video.
Collected when you register and maintain an account:
When you claim an existing athlete profile in our database — that is, when you assert that a profile in the database is you — we ask you to provide your date of birth. This is a required field for the claim process.
We use your date of birth solely to:
We do not use your date of birth for credit checks, background checks, advertising, or profiling unrelated to profile verification. Claim submissions may be reviewed by our staff before a claim is approved.
If you build a player profile, you may provide sporting and self-descriptive information, including:
The extended free-text answers and uploaded video that make up the second part of the player profile are treated as restricted content: they are shown only to signed-in users on a paid subscription, as described in section 10.1. Providing them is optional, and you can edit or remove them at any time.
If you use the Service as a coach, scout, agent or other non-player role, you may provide information about your program and preferences, including program descriptions, the traits you look for in a player, traits you consider red flags, offensive and defensive style preferences, and comparison players.
Players on eligible plans may save contact information to their account. This may include a phone number, a contact email address, and the name, phone number and email address of an agent or representative.
We do not publish your contact details. Your phone number, contact email address and your representative's details are not shown on your player profile, not shown on player detail pages, and not visible to other users of the App — including users on paid plans. They are not made available to the public web or to search engines.
We hold this information only so that:
We will not disclose your contact details to a coach, scout, program or any other third party without your request or agreement. If we introduce any feature that would make contact details visible to other users in future, we will update this policy and give you notice and a choice before it applies to you.
If you provide an agent's or representative's details, you confirm you are entitled to share them with us. You can view, change or clear any of these fields at any time in the App's settings.
The App lets you add video to your profile in two ways:
Videos you confirm are uploaded to our media storage provider. They may contain your image, your voice, other people who appear in the footage, and details of the setting visible in the recording.
Keeping your own copy. After recording a video in the App you can tap Save to Device on the preview screen to save it into your device's photo gallery, and you can do this whether or not you go on to upload it to your profile. You can also download a video you have already uploaded back to your device later. A copy saved to your gallery belongs to you and sits outside the Service — we do not control it, cannot access it, and deleting your account or removing the video from your profile does not remove that copy from your device. Saving to the gallery requires your permission to write to device media on older Android versions; on current Android and on iOS it is handled by the system.
Who can see your video. Uploaded interview clips and game film are visible only to signed-in users on a paid subscription. They are not visible to signed-out visitors, to users on the free plan, or to the public web, and they are not indexed by search engines. Video is served from our storage provider through short-lived signed links rather than permanent public addresses, so a link cannot be shared and reused indefinitely.
You may instead provide a link to video hosted elsewhere — for example a highlight reel or showcase page. If you do, that third-party platform's privacy policy governs the linked content, and anyone with the link may be able to view it regardless of the restrictions we apply inside the App.
Footage of other people. Game film frequently shows teammates, opponents, coaches and spectators. By uploading, you confirm that you have the rights and any consents needed to share that footage with us, and that doing so does not breach any league, school or club rules that apply to you.
When you choose a video or profile photo from your device, the system media picker returns only the item you select. We do not scan, index or upload your photo library, and we do not access media you have not chosen.
Paid plans and credit purchases are processed by Stripe, our third-party payment processor. Checkout is presented on a Stripe-hosted page inside the App.
We never receive or store your full card number, expiry date or security code. Those details go directly to Stripe, which is a PCI-DSS compliant payment provider.
We do receive and store from Stripe, or generate ourselves:
Stripe processes your payment data as an independent controller under its own privacy policy, available at https://stripe.com/privacy.
Generated as you use the Service:
When the App communicates with our servers, our infrastructure processes standard technical information, including your IP address, the date and time of the request, the endpoint requested, the response status, and general device and operating-system information sent by the network client. This is used for delivering the Service, security, abuse prevention, debugging and service reliability.
We do not embed advertising SDKs, cross-app tracking SDKs, or third-party analytics SDKs in the App. We do not use advertising identifiers, we do not build advertising profiles, and we do not track you across other companies' apps or websites.
The App stores a small amount of data locally on your device so it behaves the way you expect — for example your light or dark theme preference and whether you have dismissed a promotional message. Your session token is held for the duration of your session so you stay signed in. Local data is removed when you sign out or uninstall the App.
The App does not access, collect, store or use your location. It never asks you for location permission, it does not read your GPS or precise location, it does not derive an approximate location from your Wi-Fi networks, mobile network or Bluetooth, and it contains no location-tracking or geofencing code of any kind.
Specifically, and without exception:
ACCESS_FINE_LOCATION,
ACCESS_COARSE_LOCATION or ACCESS_BACKGROUND_LOCATION permission, so
it is not technically capable of reading your device location;Some information in the Service refers to places — a team's city, a league's country, a player's stated hometown or nationality as published on an official roster. That is descriptive information about a team or an athlete's playing career drawn from the sources described in section 6. It is not derived from your device and it does not tell us where you are.
Like any service delivered over the internet, our servers receive the IP address your request comes from, which we use for security and abuse prevention as described in section 4.9. We do not convert IP addresses into location data, and we do not use them to determine or infer where you are for any product, marketing or advertising purpose.
We do not ask for and do not want your Social Security Number, national identification number, government identity document, financial account number, precise geolocation, biometric identifier used for identification, health record, or information about your race, religion, political opinions, sexual orientation, trade-union membership or criminal history. Please do not enter any of these into free-text fields, video, or support messages.
The App requests permissions only for specific features, only at the moment you use them, and you may decline any of them. Declining a permission disables the related feature but does not prevent you using the rest of the App. You can change permissions at any time in your device settings.
| Permission | Why the App asks for it |
|---|---|
| Camera | To record interview clips and game footage for your player profile. Used only while the recording screen is open. The App does not access your camera in the background. |
| Microphone | To capture audio as part of a video recording. Used only while you are recording. The App does not record audio in the background or when you are not recording. |
| Photos and media / storage | To let you pick an existing video or photo from your device, and — if you choose — to save a recording you made into your device gallery. Only the file you select is accessed. |
| Internet / network access | Required for the App to communicate with our servers, load the database, generate reports and process payments. |
| Network and Wi-Fi state | Granted automatically, not prompted for. Lets the App detect whether you are online and adapt video playback quality. It does not identify you and is not used to determine your location. |
| Keep screen awake | Granted automatically, not prompted for. Prevents the screen dimming while a video is playing or recording. |
The App does not request location permission. It also does not request access to your contacts, calendar, call logs, SMS messages, health data, biometrics, or device identifiers used for advertising. See section 4.11.
You can see the full list of permissions the App declares at any time on its Google Play store listing, under “App permissions”, and in your device's app settings.
The Service includes a basketball database containing information about players, teams, leagues and coaches. Some of this information relates to people who have never used the App. It is compiled from sources such as publicly published team, league, conference and competition statistics and rosters, official and public sports data sources, and licensed or partner data feeds.
Typical database fields include name, team, league, position, class or role, season statistics and derived analytics, and general biographical details such as height and stated nationality or hometown where those are publicly published as part of a roster.
We process this information for the legitimate interests of operating a sports analytics service and to provide the analysis our users rely on. Statistical and performance information about competitive athletes is published by the organisers of the competitions in which they play.
If you are an athlete in our database:
We use personal information to:
We do not use your personal information for advertising, and we do not sell it. See section 11.
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating your account, providing the Service, generating the reports you request, processing subscriptions and payments | Performance of a contract (Art. 6(1)(b)) |
| Recording, uploading and making video and extended profile answers available to paid subscribers | Consent (Art. 6(1)(a)) — you choose to add and publish this; you may withdraw by removing the content or contacting us |
| Storing your phone number, contact email and representative's details | Performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) — contacting you about your account and profile. These details are not published to other users |
| Processing the personal information of a user aged 13 to 17 | Consent of the holder of parental responsibility (Art. 6(1)(a) read with Art. 8), where the applicable national age threshold requires it; otherwise the bases above apply as they do to any user |
| Verifying a profile claim using your date of birth, and identifying accounts held by under-18s so that additional protections apply | Legitimate interests (Art. 6(1)(f)) — preventing fraudulent claims over another person's athletic identity and protecting young users; and legal obligation (Art. 6(1)(c)) where age verification is required |
| Operating the athlete and team database from public and licensed sources | Legitimate interests (Art. 6(1)(f)) — providing a sports analytics service based on publicly published competitive performance data |
| Security, fraud prevention, debugging, service reliability and improvement | Legitimate interests (Art. 6(1)(f)) |
| Sending service messages about your account, billing and reports | Performance of a contract (Art. 6(1)(b)) — these are necessary to provide the Service. We do not send marketing email |
| Retaining transaction and tax records, and responding to legal requests | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to that processing — see section 15.
A core feature of the Service is the generation of scouting, analytics, comparison and search reports using artificial intelligence and machine-learning models.
When you request a report, the following may be processed to produce it:
To produce reports we use third-party AI and model-hosting providers acting as our processors under written agreements. These providers process the content of a report request only to return the model's output to us. Our agreements require them to keep the data confidential, to use it only on our instructions for the purpose of returning that output, and not to use it to train their own general-purpose models.
We do not send your password, payment details or date of birth to AI providers as part of report generation.
Automated decision-making. AI-generated reports are analytical opinions and evaluations produced by a model. They are not decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 of the GDPR. We do not use them to automatically grant or deny you access, employment, a roster place, a scholarship or any contractual benefit — such decisions are made by the coaches, scouts, programs and organisations that use the platform, exercising their own judgement. Reports may contain inaccuracies and should not be treated as statements of fact about a person.
If you believe a report about you is materially inaccurate, contact us at dean.mazlish@basketballatlas.com and we will review it.
We share personal information only as described below.
A scouting profile is meant to be seen — but not everything on it is seen by everyone. Visibility works in three tiers:
| Information | Who can see it |
|---|---|
| Core profile — name, team, league, position, statistics, athletic attributes such as height and weight, archetype and playing style, and your biography | Any user of the App, including signed-out visitors and users on the free plan |
| Extended profile answers — your preferred coaching style, team culture preference, why a program should want you, and what you are working to improve — together with your uploaded interview clip and game film | Signed-in users on a paid subscription only. Not visible to signed-out visitors, not visible on the free plan, not published to the public web |
| Phone number, contact email address, and agent or representative details | Nobody. Never displayed to any other user, on any plan — see section 4.4 |
Parts of a report or a team, league or country page may likewise be restricted to paid plans. Where content is restricted, users on the free plan see only that a section exists, not its contents.
You control what goes into your profile. You can edit or delete any of it at any time in the App, and removing content removes it from what other users can see. Bear in mind that a person who could legitimately see your content before you removed it may already have read, copied or saved it — we cannot retrieve or control a copy someone has made outside the Service.
We use a small number of vendors to run the Service. They act on our instructions under contracts that require appropriate confidentiality and security, and they may not use your information for their own purposes.
| Category | What they do | Data involved |
|---|---|---|
| Cloud hosting and application infrastructure | Run our backend servers, APIs and databases | All service data described in this policy |
| Object storage and content delivery | Store and deliver uploaded video and media | Video files, media metadata |
| Payment processing (Stripe) | Take payments, manage subscriptions, issue receipts | Payment and billing data; card details go directly to Stripe |
| AI and model-hosting providers | Generate report text from the inputs described in section 9 | Report inputs and outputs |
| Email delivery | Send transactional and, where applicable, opt-in messages | Email address, name, message content |
| Customer support tooling | Receive and respond to your enquiries | Contact details and the content of your messages |
We will provide the identity of the specific processors we use on request — write to dean.mazlish@basketballatlas.com.
We may disclose information where we believe in good faith that it is necessary to:
Where we are legally permitted to do so, we will notify you of a legal demand for your information before disclosing it.
If we are involved in a merger, acquisition, financing, reorganisation, insolvency or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honour this policy, and we will notify you — in the App or by email — before your information becomes subject to a materially different privacy policy.
We share information in any other way you specifically ask or authorise us to.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising — including as those terms are defined by the California Consumer Privacy Act as amended by the CPRA, and by comparable laws in other U.S. states. We have not sold or shared personal information for those purposes in the preceding twelve months, and we do not sell the personal information of minors.
We operate internationally. Your personal information may be stored and processed in countries other than the one you live in, including the United States, where our servers and several of our service providers are located. Data-protection laws in those countries may differ from those in your own.
Where we transfer personal information out of the EEA, the United Kingdom or Switzerland, we rely on an appropriate safeguard recognised under applicable law, which will normally be:
You may request a copy of the safeguards we rely on by writing to dean.mazlish@basketballatlas.com.
We keep personal information only as long as we need it for the purposes described in this policy, and then delete it or irreversibly anonymise it.
| Information | Retention |
|---|---|
| Account, profile and preference information | For as long as your account is active, and then deleted within 30 days of a verified deletion request |
| Uploaded video and media | Until you remove it or your account is deleted; then removed from active storage within 30 days, and purged from backups within the backup cycle described below |
| Date of birth submitted for a profile claim | Retained for the life of the claim record as evidence that the claim was verified; deleted with your account |
| Reports you generated | Until you delete them or your account is deleted; we may retain anonymised, non-identifying aggregates |
| Payment, billing and tax records | Retained for the period required by tax and accounting law — typically 6 to 7 years — even after account deletion |
| Security, audit and abuse-prevention logs | Typically up to 12 months, longer where needed for an active investigation |
| Support correspondence | Typically up to 24 months after the matter is resolved |
| Encrypted backups | Rotated on a rolling schedule, normally purged within 90 days; deleted data may persist in backups until that cycle completes, after which it is not restored |
| Database records about athletes from public sources | Retained for as long as we operate the database, subject to your rights of objection, correction and erasure |
We may retain information for longer where necessary to comply with a legal obligation, resolve a dispute, or establish, exercise or defend legal claims.
We use technical and organisational measures appropriate to the risk, including:
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential. If you believe your account has been compromised, or if you discover a security vulnerability, contact us immediately at dean.mazlish@basketballatlas.com.
Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected individuals, within the timeframes set by applicable law.
If the GDPR or UK GDPR applies to you, you have the right to:
To exercise any of these rights, email dean.mazlish@basketballatlas.com. We will respond within one month. That period may be extended by a further two months for complex or numerous requests, in which case we will tell you within the first month and explain why. We do not charge a fee unless a request is manifestly unfounded or excessive.
We may need to verify your identity before acting on a request, so that we do not disclose your information to someone else. We will normally do this through the email address registered to your account.
If you are a resident of California, or of another U.S. state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah and Texas, among others — you have the right to:
Submit a request by emailing dean.mazlish@basketballatlas.com. We will acknowledge receipt within 10 business days and respond substantively within 45 days, extendable by a further 45 days where reasonably necessary, in which case we will tell you.
An authorised agent may submit a request on your behalf with proof of your written permission; we may also ask you to confirm the agent's authority directly.
Categories collected. In the preceding twelve months we have collected the following categories of personal information as defined by the CCPA: identifiers; personal information categories listed in the California Customer Records statute; commercial information; internet or other electronic network activity information; audio, electronic and visual information; professional or employment-related information; and inferences drawn to generate the reports you request. The sources, purposes and disclosures for each are described throughout this policy.
To delete your account and the personal information associated with it, email dean.mazlish@basketballatlas.com from the email address registered to your account, with the subject line "Delete my account".
What happens next:
You may also ask us to delete specific information — for example an uploaded video or your published phone number — without closing your account. You can remove most content yourself from within the App.
Deleting your account does not automatically remove a publicly sourced athlete record from the database if one exists independently of your account. Tell us in your request if you want that record reviewed as well, and we will handle it under section 6.
Cancelling a subscription is separate from deleting your account. Cancel your plan first if you do not want to be billed again, or tell us in the same email and we will handle both.
We do not send marketing email. We do not run newsletters or promotional campaigns, we do not send product-update or digest emails, and we do not add you to a marketing list. We do not share your email address with anyone for marketing, and we do not sell it.
The only email we send is service email — account confirmations, password resets, receipts and billing notices, plan or credit changes, notices that a report is ready, security alerts, and changes to our terms or this policy. These are necessary to operate your account and to meet our obligations to you, so you cannot opt out of them while you hold an account. Closing your account stops them.
The App may also display in-app messages about your plan, credits and features. These are part of the Service.
The App may show links to third-party websites and content, and it presents the payment page of our payment processor inside an in-app browser view. Once you interact with a third-party service, that service's own privacy policy and terms apply, and we are not responsible for its practices. We encourage you to read the privacy policy of any third-party service before providing it with personal information.
Video hosted on external platforms that you link to your profile remains subject to that platform's policies.
Google Play requires every app to publish a Data Safety declaration. Our declaration is consistent with this policy. In summary, the App collects account and profile information, date of birth for profile verification, contact details you provide, photos and videos you choose to upload, purchase and subscription information, and app activity related to the features you use. Data is encrypted in transit. You can request deletion of your data by the method in section 17. The App does not share data with third parties for advertising, does not contain ads, and does not use third-party analytics or advertising SDKs. It collects no location data of any kind — approximate or precise — and our Data Safety declaration reports the Location category as not collected and not shared.
The App's target audience includes users aged 13 and over, including minors, and it contains no adult content. Content that a user chooses to publish — the core profile fields, and for paid subscribers the extended answers and video — is visible to other users of the App as set out in section 10.1. Contact details are never displayed to other users.
If you notice any discrepancy between this policy and our Play Data Safety declaration, please tell us at dean.mazlish@basketballatlas.com so we can correct it.
We may update this Privacy Policy to reflect changes to the Service, our practices, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page and publish the new version at this address.
If a change is material — for example a new purpose for using your information, a new category of recipient, or a change that reduces your rights — we will give you prominent notice in the App or by email before it takes effect, and where the law requires it, we will ask for your consent. Continuing to use the Service after a change takes effect means you accept the updated policy.
BasketBall Atlas
5706 Surrey St. Chevy Chase, MD 20815 USA
Privacy and data-protection enquiries:
dean.mazlish@basketballatlas.com
Website: https://www.basketballatlas.com
We aim to answer every privacy enquiry within the statutory timeframes set out in section 15 and section 16. If you are not satisfied with our response, you may complain to your local data-protection authority.