FortiFly Sports Privacy Policy
Effective Date: August 24, 2026
Last Updated: August 24, 2026
Soar by FortiFly LLC, doing business as FortiFly Sports (“FortiFly,” “we,” “us,” or “our”), respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:
Visit our website;
Complete the FortiFly Growth Code or another assessment or questionnaire;
Purchase or receive a Growth Blueprint;
Enroll in or participate in a Growth Pathway;
Participate in a virtual FortiFly session;
Upload game film, photos, videos, or other materials;
Enter a giveaway or promotion;
Join our email list;
Communicate with FortiFly; or
Otherwise interact with FortiFly products and services.
(collectively, the “Services”).
Because FortiFly provides certain Services to youth athletes ages 10 through 18, this Policy includes additional information about how we handle children’s and youth athletes’ information.
1. Information We Collect
The information we collect depends on how you interact with FortiFly and which Services you use.
Information You Provide
We may collect information you or an authorized parent or legal guardian provide, including:
Name;
Email address;
Phone number;
Parent or legal guardian name and contact information;
Athlete name;
Athlete age or date of birth;
Grade;
Sport;
Position or role;
Competition level;
Team or general sport-participation information;
Growth Code responses and results;
Growth Blueprint responses and results;
Assessment, intake, questionnaire, and written responses;
Athlete goals, strengths, patterns, challenges, and areas of focus;
Parent observations and context;
Information relevant to an athlete’s participation in FortiFly;
Information about habits, readiness, recovery awareness, confidence, focus, communication, leadership, decision-making, and related development areas;
Photos, videos, game film, audio, and other materials submitted to FortiFly;
Virtual-session audio, video, screen content, chat, and recordings where applicable;
Customer-support requests;
Safety-related communications or reports;
Giveaway or promotion entries;
Purchase and transaction information;
Communication preferences;
Marketing preferences; and
Other information you choose to provide.
FortiFly’s Services are educational and development-focused. We do not ask users to provide unnecessary medical or clinical information.
If information concerning an injury, health issue, mental-health concern, safety issue, or similar matter is voluntarily provided to FortiFly, we may process that information as reasonably necessary to respond appropriately, administer the Service, address a safety concern, or comply with applicable law.
Payment Information
Payments may be processed by third-party payment processors.
FortiFly generally does not receive or store full payment-card numbers.
We may receive transaction-related information such as:
Customer name;
Purchase;
Amount;
Payment status;
Payment-plan information;
Transaction identifier; and
Limited billing information.
Information Collected Automatically
When you visit or use our website or online Services, we and our service providers may automatically collect information such as:
IP address;
Browser type;
Device type;
Operating system;
Pages viewed;
Features used;
Referring and exit pages;
Dates and times of visits;
General usage and engagement information;
Cookie identifiers; and
Similar technical information.
We may use this information to operate our Services, maintain security, understand website performance, improve the user experience, and, where permitted, support analytics and marketing activities.
2. How We Use Personal Information
We may use personal information to:
Provide, operate, and administer FortiFly Services;
Deliver Growth Code results;
Prepare and deliver Growth Blueprints;
Administer Growth Pathways;
Personalize relevant portions of an athlete’s FortiFly experience;
Identify development strengths, patterns, and focus areas;
Match athletes with appropriate Athlete Captains;
Coordinate and schedule sessions;
Communicate with parents, legal guardians, athletes, and customers;
Provide Athlete Captains or other authorized personnel with information reasonably necessary to provide the Service;
Prepare educational materials and athlete-facing resources;
Support appropriate follow-up and progress comparison;
Process purchases and payments;
Maintain transaction and business records;
Provide customer support;
Administer giveaways and promotions;
Operate and maintain our technology;
Conduct appropriate internal quality assurance;
Maintain the security and integrity of our Services;
Detect fraud, misuse, unauthorized access, or policy violations;
Respond to safety or welfare concerns;
Investigate complaints or incidents;
Enforce applicable agreements and safety requirements;
Comply with legal and regulatory obligations;
Protect the rights, safety, and property of FortiFly, our users, and others; and
Perform other purposes disclosed at the time information is collected or with appropriate consent.
We may also send promotional or marketing communications where you have chosen to receive them or where otherwise permitted by applicable law.
Entering a FortiFly giveaway does not require consent to receive marketing communications unless expressly stated otherwise.
3. Growth Blueprints and Athlete Development Information
FortiFly may combine information supplied by an athlete, parent, or legal guardian with assessment responses, sport-related questions, scenarios, educational frameworks, and other relevant information to prepare a Growth Blueprint or other athlete-development materials.
FortiFly may use this information to:
Identify current strengths and patterns;
Identify useful development focus areas;
Provide educational recommendations;
Inform a Growth Pathway;
Help an Athlete Captain understand relevant areas of focus; and
Compare development information over time where the family participates in an authorized follow-up process.
Growth Blueprint information is used for educational athlete development.
It is not treated by FortiFly as a medical diagnosis, psychological diagnosis, clinical evaluation, scouting evaluation, or permanent label.
4. Session Recordings
Unless FortiFly expressly states otherwise, Growth Pathway virtual sessions are recorded.
Recordings may include:
Audio;
Video;
Screen content;
Chat or written messages; and
Other information exchanged during the virtual session.
FortiFly provides recording notice and obtains consent from participants or their authorized parent or legal guardian as required by applicable law.
For minor participants, FortiFly may require a separate Parent/Guardian Authorization and Recording Consent before participation.
How Recordings May Be Used
FortiFly may use session recordings for legitimate purposes including:
Youth safety;
Program administration;
Session documentation;
Internal review;
Quality assurance;
Training or supervision of authorized FortiFly personnel where permitted by the applicable consent;
Responding to complaints;
Resolving disputes;
Investigating potential policy or safety violations; and
Complying with legal obligations.
Access to recordings is limited to persons who have an appropriate business, safety, operational, or legal need.
Public or Marketing Use
Participation in a recorded session does not authorize FortiFly to use an identifiable athlete’s recording in advertising, social media, testimonials, promotional videos, or other public-facing marketing.
FortiFly will obtain separate permission where required before making that type of use.
5. Athlete Captains and Other FortiFly Personnel
FortiFly may provide relevant personal information to authorized Athlete Captains, Navigators, consultants, contractors, or other personnel involved in providing a Service.
We seek to limit access to information reasonably necessary for each person’s assigned role.
For example, an Athlete Captain may receive information concerning an athlete’s:
Name;
Age or age range;
Sport;
Relevant Growth Blueprint focus areas;
Scheduling information;
Appropriate athlete context; and
Other information reasonably necessary to prepare for or provide the athlete’s sessions.
An Athlete Captain does not receive unrestricted access to all information FortiFly maintains about a family.
FortiFly personnel and contractors are subject to applicable privacy, confidentiality, safety, communication, and information-handling requirements.
6. Service Providers and Technology Partners
FortiFly uses third-party providers to help operate our business and Services.
These providers may support functions such as:
Website hosting;
Databases and cloud storage;
Forms and assessments;
Payment processing;
Scheduling;
Virtual meetings;
Session recording;
Customer and account management;
Email and communications;
Analytics;
Security;
Background screening;
Program administration; and
Other technology or operational functions.
These providers may process personal information as reasonably necessary to provide services to FortiFly.
For personal information collected online from children under age 13, FortiFly seeks to disclose information only to service providers and other parties as permitted by applicable children’s privacy law.
FortiFly takes reasonable steps when selecting providers that handle children’s personal information to assess whether those providers are capable of maintaining appropriate confidentiality, security, and integrity.
7. Children’s Privacy
FortiFly provides certain Services designed for youth athletes ages 10 through 18. Additional protections apply when FortiFly knows that a participant is under age 13.
Parent or Guardian Involvement
For athletes under age 13, a parent or legal guardian must participate in the applicable registration, assessment, or enrollment process.
Direct Parental Notice
Before collecting personal information online from a child under age 13 in circumstances requiring parental consent, FortiFly will provide the parent or legal guardian with direct notice describing, as applicable:
The personal information FortiFly proposes to collect;
How the information will be used;
The categories of third parties or service providers to whom the information may be disclosed;
The purposes of those disclosures;
The parent’s rights regarding the child’s information;
How the parent may review or request deletion of the information;
How the parent may prevent further collection or use; and
The method by which the parent may provide verifiable parental consent.
The direct notice will also provide access to this Privacy Policy.
Verifiable Parental Consent
Where FortiFly collects personal information online directly from a child under age 13, FortiFly will obtain verifiable parental consent before collecting, using, or disclosing that information, except where an applicable legal exception permits otherwise.
Acceptance of FortiFly’s Terms & Conditions alone does not constitute verifiable parental consent where a separate consent process is required by law.
Information We May Collect From Children Under 13
Depending on the Service and the parent’s authorization, information may include:
Name;
Age;
Sport and sport-related information;
Assessment or questionnaire responses;
Growth Code or Growth Blueprint responses;
Written reflections;
Athlete-development information;
Photos, video, or game film;
Session audio or video;
Session recordings;
Technical information necessary to operate the Service; and
Other information reasonably necessary for the Service the parent has authorized.
FortiFly will not knowingly require a child under age 13 to provide more personal information than is reasonably necessary to participate in the applicable activity or Service.
Parent Choices
Where required by applicable law, parents may:
Review personal information collected from their child;
Request correction of inaccurate information;
Request deletion of their child’s personal information;
Refuse further collection or use of their child’s personal information; and
Where applicable, consent to FortiFly’s collection and internal use of a child’s information without consenting to non-essential disclosures to third parties.
Some information may need to be retained where permitted or required for legal, safety, security, consent-documentation, dispute-resolution, or other legitimate purposes.
If withdrawal of consent makes it impossible for FortiFly to safely or lawfully provide a Service, the child may no longer be able to participate in that Service.
Targeted Advertising and Children Under 13
FortiFly does not knowingly sell personal information collected online from children under age 13.
FortiFly does not knowingly use personal information collected online from children under age 13 for targeted or behavioral advertising.
FortiFly does not knowingly permit advertising pixels, behavioral advertising technologies, or similar non-essential advertising trackers to collect personal information within portions of the Services designated for known users under age 13, unless such collection is permitted by applicable law and supported by any required verifiable parental consent.
FortiFly does not knowingly disclose a child’s personal information to a third party for targeted advertising or another non-integral third-party commercial purpose without obtaining separate parental consent where required by law.
Information Collected Without Required Consent
If FortiFly learns that it collected personal information online from a child under age 13 in circumstances requiring parental consent and did not obtain the required consent, FortiFly will take reasonable steps to delete the information.
8. Youth Ages 13–17
FortiFly recognizes that teenagers may be entitled to additional privacy protections under applicable state or federal law.
Parents or legal guardians may be required to authorize participation in certain Services even where the athlete is permitted to complete portions of the Service independently.
Where applicable law provides additional protections relating to:
Sale of personal information;
Targeted advertising;
Profiling;
Consent;
Deletion;
Access; or
Other uses of a minor’s information,
FortiFly will provide the applicable notices, rights, or choices.
9. Aggregated and De-Identified Information
FortiFly may create information that has been aggregated or de-identified so that it cannot reasonably be used to identify or be linked to a particular individual.
We may use aggregated or de-identified information to:
Understand athlete-development patterns and trends;
Evaluate FortiFly programs and assessments;
Improve educational frameworks;
Conduct research and analysis;
Develop new products, assessments, reports, or insights;
Support benchmarking;
Prepare aggregate reports;
Understand use of our Services; and
Support other legitimate business purposes.
FortiFly may disclose, license, or commercialize appropriately aggregated or de-identified information, including in connection with research, benchmarking, reporting, or business partnerships, provided the information is maintained in a form that cannot reasonably identify or be linked to an individual.
Information represented by FortiFly as de-identified is not intended to include names, direct contact information, or other direct identifiers.
FortiFly will take reasonable measures designed to maintain information represented as de-identified in de-identified form and will not attempt to re-identify individuals from it except where permitted by applicable law.
Nothing in this section permits FortiFly to use identifiable children’s personal information as though it were de-identified or to circumvent applicable children’s privacy requirements.
10. Other Ways We May Disclose Information
In addition to the disclosures described above, FortiFly may disclose information in the following circumstances.
Legal and Safety Purposes
We may disclose information when we reasonably believe it is necessary or appropriate to:
Comply with applicable law;
Respond to legal process or governmental requests;
Fulfill mandatory-reporting obligations;
Address suspected abuse, neglect, exploitation, or safety concerns;
Protect an athlete or another person’s health or safety;
Contact a parent or legal guardian regarding a welfare concern;
Investigate suspected fraud, misconduct, misuse, or security incidents;
Enforce our Terms, safety rules, or other policies; or
Protect the rights, safety, or property of FortiFly, our users, or others.
Business Transactions
If FortiFly is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.
With Your Direction or Consent
We may disclose information when you direct us to do so or provide appropriate authorization or consent.
11. Sale, Sharing, and Targeted Advertising
FortiFly does not sell personal information in exchange for monetary payment.
We may use certain analytics, cookies, pixels, or similar technologies on our general public-facing website to understand website use, measure performance, and support permitted marketing activities.
Some privacy laws use broad definitions of terms such as “sale,” “sharing,” or “targeted advertising” that may include certain advertising or analytics technologies even when no money is exchanged.
Where applicable law provides a right to opt out of these activities, FortiFly will provide the required choice or mechanism.
Personal information collected online from known children under age 13 is subject to the more restrictive practices described in the Children’s Privacy section.
12. Cookies and Similar Technologies
FortiFly and our service providers may use cookies, pixels, and similar technologies to:
Operate the website;
Maintain website functionality;
Remember preferences;
Maintain security;
Understand how visitors use the website;
Measure engagement and performance;
Support analytics; and
Support permitted marketing activities.
Where required, FortiFly will provide cookie choices or consent mechanisms.
You may also be able to control certain technologies through browser settings or tools made available through our website.
Disabling certain technologies may affect the functionality of some features.
FortiFly does not knowingly use non-essential behavioral advertising trackers within portions of the Services designated for known children under age 13 except as permitted by applicable law and any required parental consent.
13. Data Retention and Deletion
FortiFly does not intend to retain identifiable personal information indefinitely.
We retain information for defined periods based on:
The type of information;
The Service involved;
The purpose for which the information was collected;
Safety and security needs;
Consent-documentation needs;
Legal and accounting obligations; and
Whether a complaint, dispute, investigation, or preservation obligation exists.
FortiFly may delete or appropriately de-identify information earlier when it is no longer reasonably necessary.
Growth Code Information
If an individual completes a Growth Code but does not purchase or participate in another FortiFly Service, identifiable Growth Code responses and related athlete information will generally be deleted or appropriately de-identified within 12 months after completion.
Contact information may be retained separately where the individual or parent has an active customer relationship, has separately chosen to receive marketing communications, or where another lawful purpose applies.
Growth Blueprint and Growth Pathway Information
Identifiable Growth Blueprint responses, athlete context information, parent responses, Pathway focus information, and related athlete-development records will generally be deleted or appropriately de-identified within 24 months after the athlete’s participation in the relevant FortiFly Service ends.
This period is intended to allow FortiFly to:
Deliver the Service;
Support an active Pathway;
Maintain appropriate program records;
Respond to family questions;
Support an authorized follow-up Blueprint or progress comparison; and
Address reasonably foreseeable administrative matters.
FortiFly may delete this information earlier when appropriate or retain a limited portion longer where another section of this Policy permits or requires it.
Session Recordings
Unless a recording has been preserved for an active safety concern, complaint, investigation, dispute, or legal obligation, identifiable Growth Pathway session recordings will generally be deleted within 90 days after the applicable Growth Pathway ends.
A recording may be retained longer when reasonably necessary to investigate or resolve:
A safety concern;
A reported policy violation;
A complaint;
A dispute;
A legal matter; or
Another documented issue requiring preservation.
When that need ends, the recording will be deleted or securely disposed of unless continued retention is required by law.
Parent/Guardian Consent and Authorization Records
Records documenting parental authorization, verifiable parental consent, recording consent, Terms acceptance, safety acknowledgments, and similar enrollment authorizations may generally be retained for up to 6 years after the relevant Service or authorization ends in order to document consent, permissions, and FortiFly’s compliance practices.
These records do not require FortiFly to retain the underlying child-generated content for the same period.
Transaction and Accounting Records
Purchase, payment, refund, and other transaction records may generally be retained for up to 7 years after the relevant transaction or account activity, or longer where required by applicable tax, accounting, or other law.
FortiFly seeks to retain only the information reasonably necessary for these recordkeeping purposes.
Safety and Incident Records
Records concerning significant safety concerns, mandatory reports, suspected misconduct, policy violations, complaints involving youth safety, or related investigations may generally be retained for up to 7 years after the matter is closed, or longer where reasonably necessary or required by law.
Where practical, FortiFly seeks to separate necessary incident documentation from unrelated athlete-development information.
Marketing Information
If you have chosen to receive FortiFly marketing communications, FortiFly may retain your contact information and marketing preferences until you unsubscribe or the information is no longer needed.
FortiFly may retain a limited suppression record after an opt-out so that we can honor your request not to receive future promotional communications.
Children’s Personal Information
For personal information collected online from a child under age 13, FortiFly applies both the specific retention periods above and a purpose-based limitation.
FortiFly will not retain a child’s personal information longer than reasonably necessary to fulfill the specific purpose for which it was collected.
If that purpose ends before the stated maximum retention period, FortiFly may delete or appropriately de-identify the information earlier.
FortiFly periodically reviews children’s personal information and takes reasonable steps to delete, securely dispose of, or appropriately de-identify information that is no longer reasonably necessary.
Legal Holds and Required Retention
The periods above may be extended where information must reasonably be preserved because of:
A legal requirement;
Litigation or anticipated litigation;
A subpoena or governmental request;
A safety matter;
An investigation;
A fraud or security matter;
A pending privacy request; or
Another valid preservation obligation.
When the reason for extended retention ends, FortiFly will apply the appropriate retention and deletion practices described above.
De-Identified Information
Information that has been appropriately aggregated or de-identified so that it can no longer reasonably identify or be linked to an individual may be retained for longer periods.
14. Data Security
FortiFly uses reasonable administrative, technical, and organizational safeguards designed to protect personal information from:
Unauthorized access;
Unauthorized disclosure;
Loss;
Misuse;
Alteration; and
Destruction.
Our safeguards may include:
Access controls;
Role-based access;
Authentication controls;
Secure service providers;
Data-access restrictions;
Security monitoring;
Internal policies and procedures; and
Other measures appropriate to the nature of the information and Services.
Where required by applicable law, FortiFly maintains or implements a written information-security program appropriate to the nature and sensitivity of the personal information handled through the Services.
FortiFly also takes reasonable steps when selecting service providers that handle children’s personal information to assess whether those providers are capable of maintaining appropriate confidentiality, security, and integrity.
No website, online service, database, or electronic transmission can be guaranteed to be completely secure.
If FortiFly becomes aware of a security incident involving personal information, we will investigate and respond appropriately and provide notifications where required by applicable law.
15. Privacy Rights and Requests
Depending on your location, the type of information involved, and applicable law, you may have rights to:
Request access to personal information;
Request correction of inaccurate personal information;
Request deletion of personal information;
Obtain information about how personal information is used or disclosed;
Receive a portable copy of certain information;
Opt out of certain sales, sharing, or targeted advertising;
Withdraw certain consent;
Appeal a decision concerning a privacy request; or
Exercise other privacy rights provided by law.
Parents and legal guardians may also submit appropriate requests concerning personal information associated with their child.
We may need to verify your identity, parental status, or legal authority before completing a request.
FortiFly will not discriminate against you for exercising a privacy right provided by applicable law.
To submit a privacy request, contact:
We will review and respond to requests in accordance with applicable law.
16. Marketing Communications
You may opt out of promotional or marketing emails from FortiFly at any time by:
Using the unsubscribe link included in the email; or
Contacting FortiFly.
Opting out of marketing does not prevent us from sending non-promotional communications reasonably necessary to provide a Service, such as messages concerning:
Purchases;
Accounts;
Assessments;
Scheduling;
Sessions;
Active programs;
Safety matters;
Customer support;
Giveaway administration; or
Other transactional or operational matters.
Marketing permission is handled separately from parental consent required for a child’s participation in FortiFly Services.
17. Third-Party Websites and Services
Our Services may contain links to, integrations with, or functionality provided by third-party websites, platforms, or services.
FortiFly does not control the independent privacy practices of third parties.
When you interact directly with a third-party service, that provider’s privacy policy and terms may also apply.
This section does not reduce FortiFly’s responsibilities for third-party service providers where applicable law imposes obligations on FortiFly concerning their handling of personal information.
18. Processing in the United States
FortiFly is based in the United States.
Personal information may be stored and processed in the United States by FortiFly and service providers supporting our operations.
If you access the Services from outside the United States, your information may be transferred to and processed in the United States, subject to applicable law.
19. Changes to This Privacy Policy
FortiFly may update this Privacy Policy from time to time to reflect changes to our Services, technology, data practices, business operations, safety practices, or legal requirements.
When changes are made, we will update the Last Updated date at the top of this Policy.
If required by applicable law, FortiFly may provide additional notice or obtain renewed consent before applying a material change to certain information or practices.
Changes involving children’s personal information will be handled in accordance with applicable children’s privacy requirements.
20. Contact Us
If you have questions about this Privacy Policy, FortiFly’s privacy practices, or personal information associated with you or your child, please contact:
Soar by FortiFly LLC
d/b/a FortiFly Sports
Email: info@fortiflysports.com
Website: www.fortiflysports.com
Mailing Address:
2125 Biscayne Blvd, STE 204
Miami, FL 33137