SPOTLIGHTBack to Spotlight

Spotlight Privacy Policy

Effective date: May 20, 2026

Last updated: May 20, 2026 (Report a User feature added — sections 4A & 5)

1. Who we are

Spotlight ("Spotlight," "we," "us," or "our") is operated by Spotlight Recruit LLC, a Florida limited liability company located at 11604 61st St E, Parrish, FL 34219, United States.

If you have any questions or concerns about this Privacy Policy or our handling of your personal information, contact us at:

2. About this policy

This Privacy Policy explains what personal information we collect when you use the Spotlight mobile application and our website at spotlightrecruit.com (collectively, the "Service"), how we use that information, who we share it with, and what rights you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use Spotlight.

3. Who can use Spotlight

Spotlight is intended for users 13 years of age and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact legal@spotlightrecruit.com and we will delete it immediately.

If you are under 18, you must have permission from a parent or legal guardian to use Spotlight, and we will request your parent or guardian's email address at signup so we can communicate with them about your account.

4. Information we collect

A. Information you provide directly

If you create an Athlete account:

  • Full name
  • Email address
  • Password (stored encrypted; we never see your plain-text password)
  • Date of birth or age
  • Country and region/state
  • Sport you play
  • Position (optional)
  • School (optional)
  • Bio
  • Profile photo (optional)
  • Videos of yourself playing your sport (maximum 30 seconds per clip)
  • Social media handles (optional, e.g., Instagram, Twitter, TikTok)
  • Athletic statistics (optional)
  • If you are under 18: your parent's or guardian's email address and a confirmation of parental consent
  • If you are 18 or older: an optional public contact email recruiters can use to reach you

If you create a Recruiter account:

  • Full name
  • Email address
  • Password (stored encrypted)
  • Organization or institution you represent
  • Job title
  • Credential ID (used to verify your professional identity)
  • Country
  • Work email address (used for our admin to verify your identity)
  • Sports you recruit for
  • Bio
  • Profile photo (optional)
  • LinkedIn URL (optional)
  • Website URL (optional)

If you file a Report on another user:

  • The user being reported, the reason you selected (such as harassment or safety concern), and any optional description you provide
  • Your identity (the reporter's user ID and role) is recorded alongside the report so our moderation team can follow up if needed. We do not anonymize reports internally; the people you report do not see who reported them.

B. Information collected automatically

When you use the Service, we automatically collect:

  • Device information (model, operating system, language settings)
  • App version
  • Crash reports and error logs (used to fix bugs)
  • Approximate geographic location based on your IP address (used to determine country/region for app functionality)
  • Timestamps of when you sign in, upload content, and use major features
  • Aggregate usage analytics via Firebase Analytics (a Google service). Specifically:
  • Event names — such as when you sign up, complete your profile, upload or play a clip, save an athlete, attempt to contact an athlete, change app language, or delete your account
  • A randomly generated Firebase Auth user identifier so we can recognize repeat events from the same account (this is an opaque ID, not your email or name)
  • Coarse user properties — your role (athlete or recruiter), app language, country, sport (for athletes), recruiter status (for recruiters), and an age bracket ("13-15", "16-17", or "18+"). We do NOT log your exact age, your name, your email, or your region inside the analytics service.

We do not currently use cookies for tracking. Aside from Firebase Analytics described above, we do not currently run any third-party advertising or analytics SDKs in the app. If we add other analytics or advertising SDKs in the future, we will update this Privacy Policy first.

C. Information we do NOT collect

For clarity, we do NOT collect:

  • Precise GPS location
  • Health or biometric data
  • Financial or payment information (the app is free with no in-app purchases)
  • Information from your phone's contacts, calendar, or other apps
  • Photos from your camera roll except videos and images you specifically upload

5. How we use your information

We use the information we collect to:

  • Create and maintain your account
  • Display your profile to other users of the Service (athletes to verified recruiters; verified recruiters' organizational info to athletes who view their messages)
  • Allow verified recruiters to contact athletes through legitimate channels (via parent email if the athlete is a minor, or via the athlete's public contact email if 18+)
  • Verify the identity and professional credentials of recruiters before they can browse athletes
  • Moderate content (review uploaded videos for compliance with our Terms of Service before they are visible to recruiters)
  • Send service-related communications (password resets, account notifications, important updates)
  • Detect, investigate, and prevent fraud, abuse, harassment, and other harmful or illegal activity
  • Review user reports of inappropriate content, fake profiles, harassment, or safety concerns submitted via the in-app Report feature
  • Comply with legal obligations and respond to lawful requests from authorities
  • Improve the Service (fix bugs, add features, optimize performance)
  • Communicate with parents of users under 18 about their child's account

6. Special protections for minors (users under 18)

We take the safety of minor users seriously. Specific protections include:

  • We require a parent's or guardian's email address at signup, and we will contact them about their child's account
  • Recruiters may not contact athletes under 18 directly — all communication must go through the parent's email address on file
  • Minors cannot make their own contact email public on their profile
  • We retain the right to immediately suspend or ban any user who attempts to contact a minor inappropriately
  • We do not allow minors to disclose or share personal contact information through the app
  • A minor's profile, age, and "minor status" are locked after creation to prevent users from fraudulently changing this information

If we ever learn that a person under 13 has provided us with personal information, we delete it immediately.

7. Who we share information with

We do NOT sell your personal information. We do NOT share it with advertisers, data brokers, or marketing companies.

We share information ONLY in these limited circumstances:

  • With other users of the Service: Athletes' profiles (name, sport, age, region, bio, photo, videos, optional stats and social handles, optional public contact email if 18+) are visible to verified recruiters. Recruiters' organizational info is visible to athletes who view contact messages from them.
  • With Firebase (Google Cloud): Firebase is our infrastructure provider. They host our database, store uploaded files, process authentication, and provide the Firebase Analytics service described in section 4 above. Firebase is bound by Google's privacy commitments and data processing agreements. Data is stored in United States data centers. See https://firebase.google.com/support/privacy.
  • With law enforcement or in legal proceedings: We may disclose information if required by valid legal process (subpoena, court order, etc.), to protect the safety of users, to investigate fraud or violations of our Terms, or to defend our legal rights.
  • In the event of a business transfer: If Spotlight Recruit LLC is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you in advance.

8. How long we keep your information

We keep your account information for as long as your account is active. If you delete your account, we permanently delete your data immediately. This includes:

  • Your profile data (athlete or recruiter information)
  • Your uploaded videos and photos
  • Your authentication credentials
  • Your contact history

We may retain limited records of your account deletion (such as the fact that the account was deleted and when) for our own legal and operational purposes. We may also retain certain anonymized log data for security and compliance purposes.

If we are required by law to retain your information longer (for example, in response to a legal hold), we will do so only to the extent necessary.

9. How we protect your information

We use industry-standard security measures to protect your personal information, including:

  • All data is transmitted using HTTPS encryption
  • Passwords are stored using bcrypt or equivalent one-way hashing — we cannot see your plain-text password
  • Server-side access to user data is restricted by Firestore security rules
  • We use Firebase Authentication for secure account management
  • Administrative access is limited to authorized personnel only
  • We use Cloud Functions to enforce content rules (such as maximum video length) automatically

No system is 100% secure. While we make reasonable efforts to protect your information, we cannot guarantee absolute security. If you discover or suspect a security vulnerability, please report it to legal@spotlightrecruit.com.

10. Your rights

Depending on where you live, you may have certain rights regarding your personal information:

For all users

  • Access: You can view all the information we have about you in the app itself.
  • Correction: You can edit your profile information at any time in the app.
  • Deletion: You can delete your account at any time from the Settings page in the app, which immediately removes all your personal data.

For California residents (California Consumer Privacy Act — CCPA)

In addition to the above, you have the right to:

  • Know what categories of personal information we collect, the purposes for collection, and the categories of third parties we share with
  • Request that we not sell or share your personal information (we do not sell)
  • Be free from discrimination for exercising your rights

For European Union, United Kingdom, and Brazil users (GDPR / GDPR-K / LGPD)

In addition to the above, you have the right to:

  • Withdraw consent at any time
  • Object to processing
  • Lodge a complaint with your local data protection authority
  • Restrict processing in certain circumstances

To exercise any of these rights, email legal@spotlightrecruit.com. We will respond within 30 days.

For Florida residents (Florida Digital Bill of Rights — FDBR)

You have the rights enumerated under the FDBR, including the right to know what data we collect, the right to delete your data, and the right to opt out of certain processing.

11. Children's privacy — COPPA

We do not knowingly collect personal information from children under 13. The Service is intended for users aged 13 and older.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it immediately. Parents who believe their child under 13 has provided us with information should contact us at legal@spotlightrecruit.com.

12. International users

Spotlight is operated from the United States. If you are outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to this transfer. We have implemented reasonable safeguards to protect your information consistent with applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • Update the "Last updated" date at the top of this Policy
  • For material changes that affect your rights or our practices, give you reasonable notice (such as through an in-app notice or email) before the changes take effect

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Spotlight Recruit LLC

11604 61st St E

Parrish, FL 34219

United States

We aim to respond to all privacy inquiries within 7 business days.