Privacy

Summit Advisory, LLC d/b/a Level Field Hub · Pathway · Effective 5 October 2026

Pathway is used by a parent and is about a child. That shapes every decision below — most of all the one to store a birth month and year and never a full date of birth.

Who is who

You — the parent or guardian — hold the account, and you are our user. Your child is the subject of the plans Pathway builds and is never asked to sign in, give us anything, or interact with us at all. We collect nothing directly from a child.

What we hold about you

Your account.

Your email address.
A reference to your sign-in identity. Your password is held by our authentication provider and is never stored by us in a form we can read.
Your reminder preference — how far ahead of a registration deadline you want to hear from us, and the exact lead times if you choose your own.
The home ZIP code you give us, and the point inside that ZIP area we measure distances from. It is a ZIP-area point, never your street address, and we record where it came from and when you set it.
The search radius you choose, if you change it from the default.
How many free tournament plans remain on the account.
When the account was created and last changed.
Which version of our Terms and Privacy Policy you agreed to, and when.
When your billing address last reached our billing provider. The address itself is not kept by Pathway.

Your subscription.

Customer and subscription identifiers issued by our billing provider, the plan code, its status, and when the current term ends.
Which plan you chose — Solo, Duo or Family — and so how many children it covers; on Solo and Duo, which children you confirmed.
Your agreement to automatic renewal before checkout: which plan, which wording, and when.
Your billing address, which you give when you set up your account. Pathway passes it straight to our billing provider, Zoho, and keeps no copy. Zoho uses it to work out sales tax and to check your card against it to help prevent fraud.
No card number, no expiry date, no security code, and no bank detail is stored by Pathway or ever passes through it.

What we hold about your child

You tell us your child’s USTA membership number, their birth month and year, whether they play Boys’ or Girls’ events, and your home area. Everything else is looked up from public tournament records or worked out from them.

What you tell us about your child.

Their USTA membership number.
Their birth MONTH and birth YEAR — never the day, and never a full date of birth. There is no column in this database that could hold one.
Whether they play Boys’ or Girls’ events. We ask about the DRAW, not about your child: USTA runs the two separately, and until they have played a tournament it is the only way we can avoid offering them a bracket they cannot enter.
Their USTA section and district, and the town, state and postal code you play out of.
Match results you paste from your USTA account, if you choose to, so we can reconcile their points.

What we look up from public USTA sources.

Their name as USTA publishes it.
Their age division. Once USTA publishes one for your child it replaces what you told us, because an entered event is a record and your answer was a statement.
Their World Tennis Number for singles and doubles, and its confidence.
Their published match results, tournament entries, standings and ranking positions.
An approximate coordinate for your town, used only to measure distance to a tournament. It is a town-level point, not your address.
For every stored row: which endpoint it came from and when it was fetched, so a figure can always be traced to its source.

What we work out ourselves.

How many free tournaments the child was granted when you added them, the standing that decision was based on, and the reason in words.
How many free tournaments have been used.
For Beginner Development: when your child started and whether they qualified.

What we deliberately do not collect

A full date of birth. We store a month and a year, and the schema has no column for a day.
Your child’s sex asked directly. We ask which events they play — Boys’ or Girls’ — which is a fact about the USTA draw, and we store it as the B/G letter of their division code.
A stored street address. Your billing address passes through Pathway to our billing provider, Zoho, and Pathway keeps no copy. Zoho uses it to work out sales tax and to check your card against it to help prevent fraud. For tournament distances we use your home ZIP and nothing finer.
A phone number. Pathway sends no SMS at any stage.
Card or bank details, which go to our billing provider and never to us.
Anything at all about a child from the child. Only a parent or guardian creates an account and adds a child.

Where the public data comes from

Junior tournament results and standings are published by USTA, and World Tennis Numbers by the ITF. We read them; we do not send anything about your family back. These sources learn nothing about you from Pathway.

USTA TennisLink — published junior tournament records.
USTA’s public rankings and standings service.
ClubSpark, the tournament desk USTA events run on — published entry lists and event details.
World Tennis Number, published by the ITF — current and recent singles and doubles ratings.
The US Census Bureau’s gazetteer files, used to place a town or ZIP code on a map.

Other players in a tournament’s field

To assess a tournament for your child we read the entry list USTA publishes for it: each entrant’s name, USTA ID, standing and World Tennis Number, as published. These are public tournament records about other juniors. We use them only to work out your child’s position and the strength of the field, we show them only to signed-in parents, and we never put them on a public page.

Who else touches your data

We use a small number of service providers, each for one job. We do not sell personal information, and we do not share it with advertisers or data brokers.

Supabase — hosts the database and runs sign-in. All stored data lives here, in the United States.
Vercel — hosts and serves the application.
Resend — delivers account email — sign-in links, email confirmations, password resets, and the reminders you ask for.
Zoho — takes payment, receives your billing address for sales tax and to check your card against it, is the system of record for subscriptions, hosts the billing portal where you cancel, and runs our support inbox.
Google — four separate jobs. If you choose “Continue with Google”, Google tells us the email address on that account and is told nothing about your child. Our typefaces load from Google Fonts, so your browser asks Google for them on each visit. Email you send to our support address passes through Google Workspace on its way to our support inbox. And Google Analytics runs on our marketing pages only if you allow it (see Analytics and cookies, below).
Stadia Maps — draws the background of our maps. Your browser fetches the map images from Stadia Maps directly, so it sees your IP address and which area of the map is on screen — never your account or your child.

Analytics and cookies

Google Analytics can run on our public marketing pages only — /, /doubles, /weekend — and only after you choose “Allow” on the banner those pages show. It then sets cookies (_ga) that last about two years. If you choose “No thanks”, or choose nothing, Google Analytics does not load. We keep your choice in one cookie (pw_analytics) for a year; clear it to be asked again.

It does not run on any page that shows a child’s information. Not the sign-in pages, not the plan, not the page where you add a child, and not this page. Analytics is switched on per page rather than globally, specifically so a new screen is uninstrumented until someone deliberately turns it on.

Sign-in also sets cookies. Those are strictly necessary — without them you could not stay signed in — and they carry your session, nothing else.

Payment

Subscriptions are billed through Zoho. Card details are entered there and never reach Pathway; we receive only an identifier, a plan code, a status and a renewal date. If you dispute a charge, Zoho’s record is the authoritative one.

Email, and never SMS

We email you about your account and about the reminders you have asked for — a registration deadline coming up, or options after your child finishes an event. You choose the timing in Settings. Every reminder has a link to change or stop reminders without signing in, and your email app’s unsubscribe button works too. Pathway sends no text messages at any stage; there is no field in the system for a phone number.

Who at Pathway can see your family’s record

Families are separated in the database itself, not merely in the screens — one account cannot read another’s rows even if the application had a bug. A small number of administrators can look up a record for support, and every such look-up is logged: who did it, what they did, and how many records came back. That log is sealed so no customer can read it, and an entry that cannot name the person acting cannot be written at all.

How long we keep things

We keep your account and your children’s records while your account is open. If it closes — you cancel, or a payment is still unpaid 30 days after it was due — we keep them for 12 months so you can come back, and then delete them. If you ask us to delete your account we delete it straight away, or at the end of any period you have already paid for.

A few things outlive a deletion, and you should know why: public tournament records USTA and the ITF publish, which we do not control; a note of the free assessments already used under each USTA membership number, so they are not given twice; billing amounts and dates, kept for seven years without your name or email; and our staff access log, kept for 24 months so every look-up and deletion stays accountable.

Your choices

See what we hold — download it from Settings.
Correct it — a mistyped membership number is the common case, and you can have the child removed and re-added.
Delete it — ask, and the account and its children go.
Change your reminder timing, or stop the reminders, from Settings or from the link in any reminder.

Children’s privacy

Pathway is for parents. Accounts are created by adults and children do not sign in: everything we hold about a junior player is collected from the parent, not the child, or read from public tournament records. From you, that is their USTA membership number, their birth month and year (enough to work out their age division), whether they play Boys’ or Girls’ events, their USTA section and the town and postal code you play out of, and any match results you choose to paste from your USTA account. From public records, it is their name, tournament results, entries and standings as USTA publishes them, and their World Tennis Number as the ITF publishes it. We hold no full date of birth, no contact details for a child and no photographs.

Research and aggregate reporting

We do not share your family’s information with USTA or anyone else for research today. If that ever changes it will be aggregated and anonymised, it will be described here before it starts, and it will be your choice.

Changes

If we change how any of this works we will update this page and change the effective date at the top. If a change is significant we will email you rather than rely on you noticing.

Getting in touch

Questions about either document, a request to see or delete what we hold, or anything that looks wrong: email jurano@levelfieldhub.com. A person reads it.

Summit Advisory, LLC d/b/a Level Field Hub. Mailing address: 12801 N Central Expy Ste 750, Dallas, Texas 75243, United States.