ALL24
Privacy Policy
Effective Date: May 1, 2026
Version 1.3
Operated by Ascension Media Group Inc. | all24.ca
All24 is a closed, team-scoped Canadian football coaching platform operated by Ascension Media Group Inc. ("AMGI," "we," "us," or "our"), an Ontario corporation. All24 provides coaching tools including film review, playbook editing, team communication, and learning resources exclusively to registered teams and their authorized staff and players.
User account data is stored on Canadian infrastructure. AMGI is committed to handling personal information in accordance with Canadian privacy law and the principles of accountability, consent, limited collection, accuracy, safeguards, openness, and individual access.
All24 is not a social media platform. There are no public profiles, no advertising, no cross-team visibility of user account information, and no open forums. User data — personal account information, viewing and engagement data, chat and messaging, and roster details — remains within the Team's closed environment.
Film and other coaching content ("Team Content") is owned by the respective Teams. AMGI hosts Team Content on the Team's behalf; AMGI does not share Team Content with other teams or third parties. Any sharing of Team Content — for example, through coach-initiated exchange or opt-in League and Film Pool programs — is initiated by the Team's coaches or administrators, not by AMGI.
This Privacy Policy explains what personal information we collect, why we collect it, how it is used and stored, and your rights with respect to that information. We are committed to collecting only what is necessary to operate the platform.
This policy applies to all users of the All24 platform, including coaches, team staff, and players. It governs personal information collected through the All24 website and application at all24.ca.
All24 is intended for users aged 13 and older. We do not knowingly collect personal information from users under the age of 13. Registration requires confirmation that the user is 13 years of age or older. Teams with players under 13 are directed to use parent or guardian accounts.
For Authorized Users between the ages of 13 and 17, the Team Administrator is responsible for ensuring that any required parental or guardian consents have been obtained prior to the user's access to the Platform, as set out in the All24 Team Agreement. AMGI is not responsible for obtaining parental consent for minor players; this obligation rests with the registered team and its administrators.
When a user registers on All24, we collect the following:
* Full name
* Email address
* Profile avatar or photo (optional, user-uploaded)
* Age confirmation (a record that the user confirmed they are 13 or older at the time of registration)
* Parental or guardian permission attestation (a record that users between 13 and 17 confirmed they have parental or guardian permission to register)
* Roster information (team affiliation, position, jersey number, role designations such as captain status, and similar team metadata entered by coaches or the user)
We do not collect dates of birth, home addresses, phone numbers, or specific ages from Authorized Users. Subscription billing information — including billing name and billing address required for tax compliance — is collected and processed directly by Stripe under its own privacy practices. AMGI does not store payment card data or billing addresses.
Players enter their own profile information directly. Coaches may edit player names for roster management purposes. Players retain the right to delete their accounts, which removes their personal information from the platform (see Section 8).
We collect information about how users interact with the platform, including:
* Features accessed and actions taken within the platform
* Film playlists viewed and viewing timestamps
* Active presence in the film room (visible to teammates and coaches within the same team)
* Error and diagnostic data
This information is used solely to improve platform performance, identify commonly used features, assist with technical diagnostics, and help coaches understand player engagement with team content. It is not shared with any third party for commercial purposes.
Coaches can see which playlists their players have watched and when. Players who are actively viewing film may be visible to their coaches and teammates within the platform's film room. This is a deliberate coaching feature and is disclosed here so that users are aware.
We collect IP addresses at the time of login and connection. This information is used for security, authentication, abuse prevention, and technical diagnostics. IP addresses are stored in a separate login records table that can be retained in de-identified form after a user account is deleted (see Section 8). IP addresses are treated as personal information and handled accordingly.
Teams upload game and practice film to the platform for coaching purposes. This content is stored on your behalf and remains the property of your team. We do not use uploaded film for any purpose other than delivering the film review features of the platform.
Film is stored on Cloudflare R2 with Eastern North America (ENAM) location preference, which includes Canadian and US data centres. Cloudflare R2 does not currently support hard jurisdictional pinning to Canada; programs requiring strict Canadian data residency for media should contact us before adopting the platform. Transient processing files (created during video encoding) are stored on Amazon Web Services (AWS) for a maximum of 48 hours before automatic deletion.
AMGI does not share team film with any other team, organization, or third party. Film sharing, if any, is initiated by the Team's coaches or administrators, using Platform features designed for that purpose (such as coach-to-coach exchange or opt-in League and Film Pool programs).
AMGI does not collect or store user dates of birth or specific ages. Where users attest to being 13 or older, or 18 or older, we retain a record of the attestation made, but we do not derive or store a specific age.
A user who originally attested to being between 13 and 17 with parental permission may, upon reaching the age of majority, update their account to reflect adult status by completing a one-time transition attestation. This transition is irreversible. AMGI retains both the original attestation and the transition attestation as historical records. AMGI does not record the user's actual date of birth or the date the user attained the age of majority — only the date the user attested to having done so.
The reason for this transition is to ensure that the parental permission attestation, which was relevant when the user was a minor, is succeeded by an adult-status attestation that governs the relationship going forward. This protects the integrity of the user's attestation history and ensures that the platform's relationship with the user reflects their current legal status.
We use the information we collect for the following purposes:
* To create and manage user accounts
* To deliver and improve platform features
* To allow coaches to monitor player engagement with team content
* To investigate and respond to reported misconduct
* To maintain the security and integrity of the platform
* To comply with legal obligations
We do not use personal information for advertising, marketing profiling, or any form of data monetization. We do not sell or share personal information with any third party for commercial purposes.
AMGI staff have technical access to data on the platform as required to operate and maintain it. However, staff do not view team film, chat messages, or other team content in the normal course of operations.
Staff may access user data in the following limited circumstances:
* In response to a technical support request initiated by a user
* To investigate a reported conduct violation that has been escalated to platform administrators
* To comply with a legal obligation or valid legal process
* To diagnose and resolve a platform error or security incident
Teams and their administrators are responsible for controlling access within their organization. AMGI manages access at the platform level and becomes involved only when an issue is escalated or a legal obligation requires it.
We use a small number of trusted infrastructure providers to operate the All24 platform. These providers access personal data only as necessary to deliver their services. They are not permitted to use your data for their own purposes. We are not responsible for the independent data practices of these providers; please review their respective privacy policies for details.
* AWS RDS (Canada Central, Montreal, Canada) — Hosting of user account database, including names, email addresses, attestations, team memberships, chat messages, watch history, and login records. AWS Canada Central holds SOC 1/2/3, ISO 27001/27017/27018 certifications and is assessed against the Canadian Centre for Cyber Security Medium Cloud Security Profile.
* IONOS — Application server hosting in the United States. The application server processes user requests, reads and writes to the Canadian database over encrypted connections, and serves responses. Personal data exists ephemerally in memory on the application server during request processing; no persistent copy of user account data is stored on the application server.
* Cloudflare R2 — Film and media storage, configured with Eastern North America (ENAM) location preference. ENAM includes Canadian and US data centres; Cloudflare R2 does not currently support hard jurisdictional pinning to Canada.
* Amazon Web Services (AWS) — Transient video processing (MediaConvert) and short-term encoding buffer storage (S3); all files deleted within 48 hours.
* Google Firebase — Push notification delivery.
* Stripe — Payment processing for subscription billing. Stripe collects and processes payment information directly under its own privacy practices; AMGI does not receive or store payment card data.
We do not use third-party analytics services, advertising networks, or tracking pixels on the All24 platform.
We will update this list and notify users through the Platform if or when we add or change a primary infrastructure provider.
Cookies. We use first-party cookies solely to maintain login sessions and user preferences. We do not use cookies for advertising or third-party tracking.
Your privacy in connection with All24 is structured around a deliberate architecture: persistent user account data is stored in Canada, while application processing currently happens in the United States.
User account information — including names, email addresses, attestations, team memberships, chat messages, watch history, and login records — is stored at rest on AWS RDS in Canada Central (Montreal, Canada). This data is subject to Canadian legal jurisdiction. It is not stored on infrastructure located in the United States or any other foreign jurisdiction.
The All24 application server is currently located in the United States. When you use the Platform, the application server reads from and writes to the Canadian database over encrypted (TLS) connections. Personal data is transmitted in encrypted form between the application server and the Canadian database, and is processed in memory on the application server for the duration of each request. No persistent copy of user account data is stored on the United States application server; data exists ephemerally during request processing and is released when the request completes.
AMGI plans to migrate the application server to Canadian infrastructure in the coming months, completing the move to a fully Canadian operational stack. We will update this Privacy Policy and notify users when that migration is complete.
Some supporting infrastructure providers are based in or route through the United States. Cloudflare R2 stores team film with a location preference for Eastern North America (which includes Canadian and US data centres). AWS MediaConvert and S3 transiently process video content in the United States for under 48 hours per file. Firebase delivers push notifications. Stripe processes payments. These providers operate under their own privacy practices and are listed in Section 6.
By using All24, you acknowledge and consent to this architecture. We take reasonable contractual and technical steps to protect your information in transit and in storage, including the use of encrypted connections, certified infrastructure providers, and the data processing agreements maintained with each provider.
Personal information is retained for as long as an account is active and as reasonably necessary to provide platform services.
When an Authorized User leaves a Team voluntarily, their team-scoped data — including chat messages and watch history — is hidden from team views immediately, with a "user departed" placeholder displayed where applicable. The underlying data is retained for a 14-day grace period during which the user may rejoin the Team and have their full history restored. After 14 days, team-scoped data is permanently stripped: chat content is deleted, and watch history records have user identifiers removed.
When an Authorized User is removed from a Team by a coach or Team Administrator, team-scoped data is stripped immediately. There is no grace period; coach removal is treated as a final administrative action.
In both cases, the user's account itself is not deleted, and the user retains their login and the ability to join other Teams. Only the team-scoped data tied to the prior team is stripped.
After data is stripped, AMGI retains de-identified records solely to support platform health monitoring and aggregate analytics. Specifically:
* The fact that a chat message was posted at a given timestamp may be retained, with no content, sender, or recipient information
* Team-level aggregate engagement metrics (for example, the total number of times a playlist was watched by the Team's members across a season) may be retained, computed in a manner that prevents reconstruction of any individual user's activity
Coaches do not retain individual-level historical records of departed users. Once a user has departed and the grace period has expired, the coach has access only to team-level aggregate views.
A user may request deletion of their account at any time. Account deletion is subject to a 30-day grace period during which the user may log back in to cancel the deletion. During the grace period, the account is frozen: the user cannot join new Teams, receive notifications, or appear in pending approval queues, and any pending Team requests are auto-rejected.
Upon final account deletion:
* Personal information (name, email, avatar, profile data) is permanently removed from the platform
* All remaining team membership records are removed
* Login records have user identifiers nulled but may be retained in de-identified form for security analytics
* Chat messages are removed from the platform within 30 days of account deletion
* Usage and engagement data is de-identified and retained in anonymized form for platform analytics
De-identified usage data is retained in a form that cannot reasonably be linked back to an individual. No name, email, team association, or other identifying information is retained alongside this data.
If a user has departed from any Team within the 14 days preceding account deletion, their team-scoped data may be stripped during the account deletion process even if the 14-day team grace period has not yet expired. The 30-day account grace period and the 14-day team grace period operate independently; restoring an account after 14 days will not restore team-scoped data that has already been stripped.
Chat messages older than 12 months are automatically deleted from the platform on a rolling basis. This applies to all team chat content regardless of account status.
Where a conduct report is under active investigation, relevant messages may be preserved until the matter is resolved.
If a team's subscription lapses due to non-payment or the account is suspended, all team data including uploaded film is retained for 12 months from the date of lapse or suspension. This allows teams to reinstate their account and recover their content.
Teams may request permanent deletion of their data at any time by contacting All24 support. After 12 months, all data associated with the account is permanently and irreversibly deleted.
An "orphaned account" is one that is not currently associated with any active Team. Two retention windows apply:
* Accounts that have never had an approved Team membership are automatically deleted after 90 days from registration. Email warnings are sent at 30 days, 7 days, and 1 day before deletion.
* Accounts that have previously had at least one approved Team membership but currently have no active memberships are retained for 12 months from the user's most recent activity (login, app open, or email link click). Any meaningful activity resets this window. Email warnings are sent at 30 days, 7 days, and 1 day before deletion.
All24 includes chat and direct messaging features accessible to coaches and players within their team. While we implement a basic profanity filter, the team and its administrators are responsible for the conduct of all users under their account.
All24 is not a publisher of user-generated content. We are a platform. Reports of misconduct are taken seriously and handled through the following process:
* Users may report misconduct within the platform, including in team chat or direct messages
* Reports are directed to team coaches or administrators to address
* If a user accumulates five or more reports, the matter may be escalated to All24 system administrators
* All24 administrators will contact the team to address the issue
* Continued or unaddressed misconduct may result in suspension of the individual user or, in extreme cases, suspension of the team's access to the platform
Direct messages between users are private to the participants by default. Coaches cannot read direct messages they are not part of. However, any user may report a direct message for misconduct, and reported messages are reviewable by All24 administrators as part of the conduct escalation process. This provides accountability without ongoing surveillance.
AMGI takes abuse, bullying, and harassment seriously. We reserve the right to take action at any stage if conduct poses a risk to any user, regardless of escalation thresholds.
All24 does not send marketing emails to players. All24 does not send marketing emails to coaches without explicit opt-in consent.
We may contact users by email for the following purposes only:
* Responding to a technical support request initiated by the user
* Account-related notices (e.g., password reset, account security alerts, retention warnings)
* Required legal or policy notices
Platform announcements and product updates are delivered within the All24 platform itself. Email communications include an unsubscribe option where applicable and include our registered business address as required by the Canadian Anti-Spam Legislation (CASL).
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
* Know what personal information we hold about you
* Request access to your personal information
* Request correction of inaccurate personal information
* Withdraw consent for the collection or use of your personal information (subject to legal and contractual limitations)
* File a complaint with the Office of the Privacy Commissioner of Canada
You may view a record of your account information, attestations, and the agreements you accepted at any time through your account settings. You may also download a comprehensive PDF record of this information, including your registration date, attestation history with verbatim text and timestamps, login history, watch history, chat messages, team membership history, and any avatar image you uploaded.
Team Administrators and coaches may view a limited record of attestations made by Authorized Users registered under their Team, for the purpose of compliance verification. Coaches' views do not include private user information such as login IP addresses, chat message content, or individual watch history records.
To exercise any of these rights, contact our Privacy Officer at the address below.
We take reasonable technical and organizational measures to protect personal information from unauthorized access, loss, or disclosure. These measures include access controls, encryption of data in transit (TLS) and at rest using the encryption services of our infrastructure providers (AWS RDS encryption at rest, Cloudflare R2, AWS S3), and our use of established infrastructure providers with their own security programs.
The user account database is hosted on AWS RDS in Canada Central, which is encrypted at rest and accessed only over TLS-encrypted connections from authorized application servers. The database is not directly accessible from the public internet.
No method of electronic storage or transmission is completely secure. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date and version number at the top of this document and notify users through the All24 platform. Your continued use of All24 after any update constitutes acceptance of the revised policy. Prior versions remain accessible to users who attested to those versions until they accept an updated version.
Questions, concerns, or requests regarding this Privacy Policy or your personal information may be directed to:
Privacy Officer
Ascension Media Group Inc. (operating as All24)
114 Gemini Drive, Hamilton, ON L9C 6C4
Email: privacy@all24.ca
Website: all24.ca
We will respond to privacy inquiries within 30 days.
© 2026 Ascension Media Group Inc. All rights reserved.