Children's Privacy (Our COPPA Commitment)

We follow the Children's Online Privacy Protection Act (COPPA). We do not collect personal information from a child under 13 without a parent's verifiable consent, given first.

What we collect from a child

Their responses to the Mindset Index assessment, and the report we generate from those responses. We do not collect a child's email, phone number, address, location, photos, or any other identifier beyond what the parent provides at checkout. A child under 13 has no login and no email on our platform, and reaches their assessment only through a private link the parent shares.

We ask only for what is needed to deliver the assessment, and we never require a child to share more than that in order to take it. Beyond the assessment responses, the only technical information involved is what is needed to run the assessment securely. We do not use it to advertise to a child or to build an advertising profile.

What we do with it

We generate the child's Mindset Index report and send it to the parent. Anonymized data, with no name and no date of birth and no personal identifier, helps us improve our scoring. Payment runs through our payment processor, and account data is stored with our cloud hosting provider. That is the entire use.

Who else can see it

If the child is on a team whose coach uses Project Limitless, that coach sees factor-level activation reads and a coaching playbook for the child. The coach never sees raw scores, individual answers, or scoring formulas. An athletic director or organization administrator, if any, has the same limited access as the coach. Named Project Limitless support staff may access data only when you contact us with a question, and every such access is logged.

What we never do

We never sell a child's data, share it with advertisers, or show a child ads, and a child under 13 cannot create an email account or a login on our platform.

How we get a parent's consent

Before any of the above is collected, the parent completes our checkout, which requires a payment and a signed consent confirming the parent is the child's parent or legal guardian. This card-based method is one of the methods the FTC recognizes for verifying a parent. We keep a record of that consent, including the date and the exact disclosure the parent agreed to.

How we protect it

We protect your child's data with reasonable security measures, described in our Privacy Policy. If a security incident ever affects your child's personal information, we will notify you.

Your rights as a parent, anytime

From your Parent Dashboard you can:

• Review everything we hold on your child.
• Export your child's data as a file.
• Delete your child's account and all assessment data. Deletion is one click and completes within 30 days.

You can withdraw your consent at any time by deleting the account. We keep a child's data only as long as the account is active, or 30 days after you withdraw consent, whichever comes first. After that, the child's identifiable data is removed, and only anonymized data with no personal identifier is retained.

If you have questions

Project Limitless, LLC, Deerfield, Illinois. Email privacy@projectlimitless.com. If you believe a child gave us information without your consent, contact us and we will review and delete it promptly.

This page describes our practices in the United States. Families outside the United States should also review our Privacy Policy, since different rules may apply.