Maximizing Human Potential, Inc.

MHP Privacy Policy

Version 1.3. Effective November 4, 2026.

Maximizing Human Potential, Inc. ("MHP," "we," "us") runs mhpdevelopment.com and the MHP Player Development Portal. This policy explains what information the service collects, why, who can see it, how we protect it, and the choices you have. We wrote it in plain language on purpose. If anything here is unclear, email us at hello@mhpdevelopment.com and we will answer.

Who this covers

The service is used by athletic programs (schools, teams and clubs), the athletes on their rosters, the parents and guardians of those athletes, the program's coaches and staff, and, as we grow, individual coaches and practitioners who work with adult clients. This policy covers all of them. Where a rule applies only to one group, it says so.

Athletes under 18. An athlete under 18 gets an account only through a program, and only after a parent or legal guardian and the athlete have both read and signed that program's Family Permission Form. That form lists everything the portal collects and is signed before the account works. If the form changes, families sign the new version. For an athlete under 13, we rely on the parent or guardian's signature on that form as consent, and we do not collect more than the form describes.

What we collect

We collect only what the service needs to do its job for your program. The list is complete on purpose.

If you are an athlete:

• Who you are. Name, school or program ID number, grade or level, email, cell phone number, position and group, and a username and password.
• Body and performance. Height and weight over time, a target weight, strength, speed and power test results, and a mobility screen that records where you hurt and any left-right imbalances.
• School. For programs that choose to track it: grade point average and any D or F grades by course and teacher, which the program's coaches check regularly. You see only your own grades; your coaches see the team's.
• Discipline. School discipline entries a coach records, with a category and a note.
• Health. Injuries you report, how an injury is doing day to day, daily soreness, and hours of sleep. This is your own report. It is not a medical record and it does not replace an athletic trainer, a doctor, or the program's injury process.
• Heart and mind. A daily check-in we call the Heart Check (green, yellow or red, with room to say more; a red answer goes to the head coach so someone can check on you that day), a motivation and readiness check-in, and a short survey about sleep habits and screen time.
• Family and home. Who lives at home and whether you split time between homes, and a few reflection questions: who you look up to, a lesson your family taught you, whether you have a mentor, and whether you have lost someone you carry with you.
• What coaches and teammates say about you. Coach evaluations of skills, effort and attitude with written strengths and weaknesses, teammate ratings of effort, attitude and toughness, attendance, and milestones and achievements.
• Nutrition. A daily calorie target built from a published formula and your height and weight, and a meal planner.
• Connected devices. If you choose to connect a wearable or scale, the device data described under Connected devices below.

If you are a parent or guardian: your name, relationship to the athlete, email, phone numbers, how you prefer to be contacted, and your signature on the Family Permission Form.

If you are a coach or staff member: your name, email, phone, role, your signature on the Staff Confidentiality Agreement, and everything you enter about the athletes you coach.

If you are a program: the roster and records the program uploads or enters, which can include student ID numbers, grades, attendance and discipline the program chooses to import, and the names and contact details of its staff.

Collected automatically: one cookie that keeps you signed in (named hero_portal_session, readable only by our server, expiring when your session does); and the ordinary server logs our hosting provider keeps for every request, which include your device's internet address, the page requested and the time. We do not use analytics trackers, advertising cookies, or any third-party tracking on the site. We do not send text messages.

When you write to us: whatever you send to hello@mhpdevelopment.com or through the support desk in the portal.

When you ask for a demo, coaching, speaking or consulting through a form on our website: the email address, name and program or school you type into the form, and the date. We keep it so we can reply, follow up, and send you news about MHP. Tell us to stop at any time by replying, and we will. It is not shared with anyone else.

Connected devices

You can choose to connect a wearable or smart scale, such as a Garmin watch or Garmin Index scale, an Oura ring, a WHOOP strap, or Apple Health on your phone. Connecting is always your choice. It works through the device maker's official connection: you sign in on the device maker's own screen, you choose what to share, and the device maker gives us permission to read it. We never see or store your device-account password.

What we read, depending on the device and what you allow: sleep and sleep stages, readiness and recovery scores, resting heart rate and heart rate variability, blood oxygen, stress, cardiovascular fitness (VO2 max and cardiovascular age), daily activity and workouts, body weight and body composition. We use it for one purpose: to show it on your own page and to the coach or practitioner you have chosen, interpreted against the standards your program sets. We do not sell it, we do not use it for advertising, we do not share it with anyone outside your program, and we do not use it to develop or train artificial intelligence models.

You can disconnect a device at any time from your settings in the portal, or by removing our access in the device maker's app. When you disconnect, we stop reading and delete the permission the device maker gave us. If you also want the data we already pulled deleted, ask us and we will delete it. Device data is information for coaching. It is not medical advice or a diagnosis.

Garmin, Oura, WHOOP and Apple Health are trademarks of their owners. Their own privacy policies govern what they do with your data on their side.

How we use information

• To run the service for your program: your record, your program's dashboards, leaderboards and reports.
• To show your information to the people this policy says can see it, and nobody else.
• To send email: sign-in and password reset messages; evaluations and results to parents where the program chooses; daily reports and alerts to a program's coaches, including a red Heart Check; a receipt when you contact us through a form on our website, and news about MHP afterward until you tell us to stop; and replies to your questions. Email is sent from hello@mhpdevelopment.com.
• To keep the service secure, find and fix problems, and understand how the service is used, which we do with information that does not identify you wherever possible.
• To meet legal obligations.

We do not sell personal information. We do not use it for advertising. We do not share it with colleges, recruiters or anyone else unless you ask us to in writing. We do not use personal information to train artificial intelligence models.

Who can see it

• You see your own record and nobody else's.
• Your program's coaching staff sees the team. Each coach and staff member with access signs a confidentiality agreement that limits use to this program and these athletes. Each program decides who on its staff needs access, and nobody else gets it.
• A parent or guardian of an athlete under 18 can see that athlete's record through the parent portal.
• For an adult client of an individual coach or practitioner, that coach or practitioner sees the client's record.
• No other school, program or practitioner can see your record. Every program is walled off from every other one.
• MHP's own people and its development partners see information only to run, fix and secure the service, and only under signed confidentiality agreements.
• Service providers that help us run the service, listed below, process information on our instructions and may not use it for their own purposes.
• Law. Coaches are mandatory reporters under Louisiana law. If anything you share gives a coach reason to believe a child is being abused or neglected or is in danger of serious harm, the coach is required to report it, and will. If a coach believes an athlete may hurt themselves, the coach will contact the family and get help right away. We may also disclose information when a law, a court order or a lawful request requires it, or to protect someone's safety.
• A new owner. If MHP is ever sold or merged, your information would pass to the new owner under this same policy, and you would be told.

Service providers

Netlify hosts the application and serves it through a content delivery network. Supabase hosts our database, on servers in the United States. Resend delivers our email. Cloudflare Stream hosts the how-to videos on our help pages; when you play one, Cloudflare receives your device's request. Device makers you choose to connect (Garmin, Oura, WHOOP, Apple) provide your device data under their own policies. We will keep this list current.

How we protect it

Information travels over encrypted connections. The database is kept in the United States. Passwords are never stored as typed; the system stores a protected form of them. Access is limited by role, so a player cannot open a teammate's record and one program cannot open another's. The fewest people possible have access, each under a confidentiality agreement. No system is perfectly secure. If a security incident affects your information, we will tell your program and you as the law requires.

How long we keep it

We keep your information while your program uses the service and your account is active. When an athlete leaves a program, the program can ask us to delete that athlete's record, and we will. When a program ends its use of the service, we delete the program's records on its request. You, or the parent or guardian of an athlete under 18, can ask us to delete the record at any time. Server logs and security records are kept for a limited time and then deleted. We may keep information that does not identify anyone, and information the law requires us to keep. Deletion is carried out by our team and confirmed to you by email.

Your choices and rights

You can ask to see everything the portal holds about you or your athlete, ask us to correct anything that is wrong, ask for a copy, ask us to delete it, and withdraw permission at any time. A parent or guardian can do these things for an athlete under 18. You can disconnect a device at any time. Email hello@mhpdevelopment.com and we will respond within 30 days. For school records, your rights under the Family Educational Rights and Privacy Act run through your school, and we will help your school answer any request. Residents of states with privacy laws that give additional rights can exercise them the same way, and we will not treat you differently for doing so.

The public demo

The demo on our website uses an invented program with fictional people. Nothing in it is a real person's information.

Changes

When this policy changes, we will post the new version here with a new date, and tell programs in the portal. Where a change affects what the Family Permission Form discloses, families sign the new form.

Contact