PRIVACY & TRUST
Privacy is part of the playbook.
ONWARD Playbook™ supports youth-program operations, so some organizations use it for youth, guardian, attendance, enrollment, permission, payment and program records. We design access around purpose, organization boundaries and least privilege.
Information the platform may process
Depending on how a program configures Playbook, information may include account details; youth and guardian contact information; enrollment and attendance; emergency, medical or custody notes; permissions and signatures; registration answers; program documents; payments; surveys and outcomes; and operational audit records.
Sensitive youth information
Medical, allergy, medication, custody and designated sensitive custom fields are restricted to authorized staff. Playbook redacts those fields for staff without sensitive-data permission and records authorized views and edits. Private documents use authorization checks before access.
Families and organizations
Family portal access is tied to the authenticated guardian account and eligible enrollment. Organizations control their program records and staff permissions. Playbook is not intended for youth to create independent accounts or bypass a parent, guardian or authorized program workflow.
How information is used
Information is used to provide and secure the service, operate programs, process registrations and permissions, communicate about programs, maintain records requested by organizations and families, support reporting, prevent misuse and improve reliability. We do not describe sensitive youth records as advertising profiles.
Service providers
Playbook uses managed infrastructure and authentication providers needed to operate the service. Additional processors or integrations are reviewed before production use. Connected credentials are not treated as approved processors merely because they are technically available.
Retention and deletion
Records are retained according to operational, contractual, legal and safety needs. Families can delete their own uploaded documents where the product provides that control. Access, correction and deletion requests can be submitted through the Privacy Request Center. A deletion request is reviewed before removal because program, payment, signature, safety or legal records may require a defined retention period rather than immediate deletion.
Security
Controls include authenticated sessions, organization-scoped authorization, guardian-bound access, restricted sensitive-data permissions, audit logging and private document access checks. No security program can eliminate every risk, so controls are reviewed and tested as the product changes.
Children and youth
Playbook is designed for adults—parents, guardians and authorized program staff—to manage youth-program participation. Organizations remain responsible for obtaining the authority and consents required for the information they collect and the programs they operate.
Your choices
You may request access to, correction of or deletion of account-associated information, subject to identity verification and applicable retention obligations. Do not send medical, custody or other highly sensitive details in the request description.
Contact and updates
Privacy requests should be submitted through the authenticated Privacy Request Center so they can be tracked securely. This notice may be updated as Playbook’s features and processors change. Last updated October 1, 2026.