Version 2026-06 · How Pillar handles athlete health & wellness data.
Pillar stores the wellness check-ins, pain & injury reports, training-load entries and questionnaire responses that athletes submit, plus basic profile details (name, email, sport, squad) provided by their organization.
This data exists for one purpose: to help an athlete's own staff monitor wellbeing, prevent injury and manage safe return-to-play. It is never sold, advertised against, or used to train third-party models.
Data is isolated per organization — staff only ever see their own roster. Within an organization, role-based access applies: coaches see wellness and availability, while clinical injury detail and private notes are restricted to medical roles (athletic trainer, team doctor) and owners.
Where athletes are minors, organizations are responsible for obtaining the appropriate guardian consent. Pillar provides the consent record and deletion tools to support this.
Each organization configures a retention period. Daily wellness, survey and training-load records older than that period are automatically and permanently purged.
Athletes (or their guardians) may request a copy of their data or request deletion. Organization owners can export an athlete's full record and can permanently delete an athlete and all associated data — these actions are recorded in an audit log.
Pillar is built to support organizations' obligations under FERPA (US student records), HIPAA-aligned handling of health information, and GDPR (EU personal data) — through tenant isolation, role-based access, consent records, configurable retention, data export, right-to-erasure, and an audit trail of sensitive actions.
Data is stored in the organization's configured database with access restricted to authenticated, role-authorized users over encrypted connections.
Questions about your data should be directed to your organization, who acts as the data controller. They can reach Pillar support for assistance.