Privacy Policy

Overview

Vision Combine (“Vision Combine,” “we,” “our,” or “us”) makes visual performance tests for sports teams. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have when you use our iOS app, our website at visioncombine.com, and related services (together, the “Services”).

Vision Combine measures athletes’ visual performance. It is not a medical device, and it doesn’t diagnose or screen for any condition.

By using the Services, you agree to the collection and use of information as this policy describes. If you do not agree with this policy, please do not use the Services.

Who Uses Vision Combine

Accounts are for adults: coaches and team staff, and club and sponsor contacts. Players and their parents or guardians don’t have accounts. A coach adds each player to a team. Before a player marked as under 18 can be tested, a parent or guardian must consent (see “Players Under 18 and Parental Consent” below).

Information We Collect

Your Account

• Your name and email address, and an identifier we assign to your account.
• Your password, if you sign up with an email address. We store it only in hashed form.
• If you use Sign in with Google: the name, email address and profile picture link that Google shares with us.
• If you use Sign in with Apple: the name and email address that Apple shares with us. This may be a private relay address that Apple creates.
• The sign-in tokens that Google or Apple issue for your account.
• The teams and clubs you belong to and your role on each. For a sponsor, a contact email address.

Information Coaches Enter About Players

• The player’s first and last name and, if the coach adds them, notes and season batting stats (batting average, on-base percentage, plate appearances, walks and walk rate).
• Whether the player is 18 or older.
• A parent or guardian’s email address. For a player marked as under 18 the parent or guardian’s email address is required, and we use it to ask for consent.

Visual Performance Test Results

• When a player takes the Acuity, Contrast, Dynamic Acuity or Baseball test, we record each answer, which eye or eyes were tested, when the test was taken, and the result. From these we calculate the player’s scores and levels.
• Each test session records its team, the coach who runs it and their email address, an optional description, and the devices used.
• Apple’s App Store privacy categories count test results like these as “Health” data. We use them to show how a player performs on the tests and how that changes over time.

Parental Consent Records

• For players marked as under 18, the consent records described in “Players Under 18 and Parental Consent” below.

Camera and Device Pairing

• The iOS app uses your camera only to scan the QR code on the chart display when you pair your phone with it. Camera images stay on your device. We receive the pairing code and the distance the app measured between your phone and the chart, and we store that distance with the test session.
• The app does not use your microphone, location, contacts or photos.

Device and Sign-In Information

• A random identifier that the iOS app creates and keeps on your device. It can remain after the app is reinstalled. A web browser used to run or display tests keeps its own random identifier in the browser’s storage.
• When a device joins a test session: that identifier, the type of device and the app version.
• When a device is set up as a chart display: its model, operating system version and app version or, for a web browser, its user agent (which names the browser and operating system).
• When you sign in: the IP address and user agent of each signed-in session.
• Our servers log each request they receive (what was requested, when, and the result).

Payments

• Payments are made on our website through Stripe Checkout. Stripe collects your card details; we never see or store them. We send Stripe your email address, the amount, and what the payment is for (for example, a team license). We keep a record of each payment: what it was for, the amount, Stripe’s reference for it and, for a club or a sponsorship, who paid.

When You Contact Us

• The emails you send us, including privacy requests.

Cookies and Local Storage

Our website uses only the cookies it needs to keep you signed in. We don’t use analytics or advertising cookies, and neither the app nor the website uses any analytics, advertising or tracking service.

The website also keeps a few items in your browser’s local storage: your display theme and, on a browser used to run or display tests, the device identifier described above. You can clear these in your browser settings. If you block cookies, you won’t be able to sign in.

How We Use Information

• To provide the Services: accounts and sign-in, teams and rosters, test sessions, device pairing, and showing results to the people who can see them.
• To ask a parent or guardian for consent, and to keep a player marked as under 18 from being tested until they consent.
• To send the service emails described below.
• To process payments and team licenses.
• To keep the Services secure, investigate problems, and prevent fraud or abuse.
• To comply with legal obligations and enforce our terms.

We don’t use your information for advertising, and we don’t sell it.

Where data protection law (such as the GDPR or UK GDPR) applies, we process your information on the legal bases of performing our contract with you, a parent or guardian’s consent, our legitimate interests in operating and securing the Services, and compliance with legal obligations.

Emails We Send

We send email from noreply@visioncombine.com through Amazon SES. Our emails are about the Services: verifying your email address, resetting your password, test session instructions, and parental consent requests and confirmations. We don’t send marketing email.

Players Under 18 and Parental Consent

• Players and their parents or guardians don’t need an account. A coach adds each player to a team.
• When a coach adds a player, the player is marked as under 18 unless the coach turns on “Player is 18 or older.” For a player marked as under 18, the coach must enter a parent or guardian’s email address. A player whose coach hasn’t recorded whether they are 18 or older, such as a player added before parental consent was introduced or from an older version of the app, can be tested without a consent request.
• We email the parent or guardian a link to a page where they choose “I consent” or “I do not consent.” They don’t need an account. To consent, they give their first and last name. The email and the page list what we collect and why. The link works once and expires 7 days after it was sent, and the coach can send a new one.
• A player marked as under 18 can’t be tested until a parent or guardian consents. Coaches see whether consent is waiting, given, declined, expired or withdrawn.
• For each consent request we record the email address it was sent to, the parent or guardian’s choice and, when they consent, the name they gave, when they made it, the IP address it came from (for an IPv6 address, only the first half, which identifies the network rather than the device), the version of this policy in force, and that the choice was made through the emailed link. Coaches see the consent status and, once a parent or guardian consents, the name they gave. We store the link itself only in a one-way hashed form.
• To withdraw consent or to ask us to delete your child’s information, email support@visioncombine.com. When we record a withdrawal, no new test can start, including the next test of a sequence already running. Results already recorded are kept. The coach can send a new consent request, and testing can resume only if you consent again. “Deleting Information” below explains what we can delete today.
• There is no advertising in the Services.

How We Share Information

We don’t sell personal information, and we don’t share it for advertising. We share information only in these ways:

• Your team. Coaches on a team see its roster, the information entered about each player, and the players’ test results.
• Eye-care practices. If your team has linked an eye-care practice to its account, each new test result for a player on the team creates a referral to that practice. The practice can see the player’s name and team and, once it accepts the referral, the player’s test results. The apps no longer offer a way to link a practice.
• Service providers that run parts of the Services for us:

  • Amazon Web Services (AWS), which hosts the Services and our database in the United States and sends our email through Amazon SES;
  • Google, for Sign in with Google and our company email, including our support mailbox;
  • Apple, for Sign in with Apple and for distributing the iOS app through the App Store;
  • Stripe, for payments on our website;
  • Expo, which delivers updates to the iOS app. When the app checks for an update, Expo receives the request, including an identifier its update service creates for the install.
• Legal and safety recipients, where required by law or to protect the rights, safety, and property of Vision Combine, our users, or others.
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

How Long We Keep Information

• We keep account, team and player information, test results, and consent records until they are deleted as described in “Deleting Information” below. When a coach asks again after a parent or guardian has responded, or a parent or guardian’s email address changes, we keep the earlier requests as a record.
• Server logs are kept for up to 30 days.
• Database backups are kept for 7 days, so deleted information can remain in a backup for up to 7 days.

Deleting Information

Deleting Your Account

You can delete your account yourself on the website or in the iOS app; our Support page lists the steps. Deletion happens right away and can’t be undone. It:

• Deletes your account, your sign-in details and your team memberships, and signs you out on every device. If you signed in with Apple, we also revoke our access with Apple.
• Permanently deletes each team you are the only owner of, with its players, test results, consent records and payment records. A player record that another team still holds is kept.
• Leaves teams you share with other owners in place, with their players and results.
• Leaves each club you are the only owner of in place, with no owner.
• Keeps a player record that a team holds for you, with its results, but no longer linked to your account.

For teams, clubs and sponsorships that remain, we keep payment records without the link to your account. We also keep an internal record that the deletion happened, which holds identifiers and counts only.

Players’ Information

• When a coach removes a player from a roster, or deletes a team, the information is kept and can be restored.
• When a parent or guardian asks us to delete their child’s information, we record the withdrawal of consent so that no new test can start, and we can remove the player from the team’s roster. Removing the player from the roster also deletes their consent records. The player record and past test results are kept: we can’t yet erase them on request.

Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated information, as described above
• Object to or restrict certain processing, or withdraw consent

You can change your name in your account settings and delete your account yourself. For any other request, email support@visioncombine.com; we will respond as applicable law requires.

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR and UK GDPR, including the right to lodge a complaint with a supervisory authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right not to receive discriminatory treatment for exercising your rights.

Data Security

Information travels to and from the Services over encrypted (HTTPS) connections, our database and cache are encrypted at rest, and passwords are stored only in hashed form. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

International Data Transfers

We are based in the United States, and we store and process information in the United States. If you use the Services from another country, your information is transferred to the United States, whose data protection laws may differ from those in your country. Our service providers may also process it in other countries where they operate.

Third-Party Services

Sign in with Google, Sign in with Apple and Stripe Checkout are run by those companies under their own privacy policies. This policy does not cover them, and we encourage you to review their policies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any change on this page and update the “Last updated” date above. When a parent or guardian responds to a consent request, we record which version of this policy was in force.

Contact Us

For questions about this policy, or to make a privacy request, including withdrawing a parent or guardian’s consent or asking us to delete information, email us at: