Privacy Policy
Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how [LEGAL ENTITY NAME] ("TeamSports", "we", "us") collects, uses, shares, and protects personal information when you use the TeamSports mobile app, the TeamSports web app and manager CMS, and our related services (together, the "Service"), accessible at teamsports.me.
By creating an account or using the Service you agree to this Policy. If you do not agree, do not use the Service.
1. Who we are
The data controller responsible for your personal information is [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. You can reach us at [privacy@teamsports.me].
2. Information we collect
Information you provide
- Account & identity. When you sign in we create an account using your email address and, where you use a social login, your name and profile photo. You can sign in with Google, Apple, Facebook, or email and password. From social providers we receive only the basic profile fields you authorize — we never receive your password for a social account.
- Profile information. First and last name, profile and cover photos, and any other details you add to your profile.
- Team and activity data. Teams you create, join, follow, or manage; your role (player, coach, manager, spectator); rosters; events, games, practices, and schedules, including event locations and venues.
- Content you upload. Photos and other media you add to your profile, teams, or games. Each uploaded image is owned by you; only you can modify or delete the original.
- Social connections. Friend requests and friendships, team followers, and parent/child relationships you establish (see "Children" below).
- Communications. Messages or requests you send through the Service and any correspondence with our support.
Information we collect automatically
- Device & usage data. Device type, operating system, app version, and general interaction events needed to operate and improve the Service.
- Log & connection data. IP address, timestamps, and request metadata collected for security and reliability.
- Push notification tokens. If you enable notifications, we store a device push token to deliver alerts. We treat these as sensitive credentials.
Location
We do not continuously track your device location. When you create or search for an event venue, we use Google Maps Platform to help you look up and select an address; the venue you choose is stored with the event.
3. How we use your information
We use personal information to: create and manage your account and authenticate you; provide core features (teams, rosters, schedules, events, games, media, and social connections); send notifications and service-related emails (such as event invitations and updates); let users search for and find teams and members (we only index fields intended to be discoverable); maintain security, prevent abuse, and debug; and comply with legal obligations.
4. Legal bases (EU/UK users)
Where GDPR/UK GDPR applies, we rely on performance of a contract, consent (e.g. push notifications and processing of children's data via a parent/guardian), our legitimate interests (securing and improving the Service), and legal obligation. You may withdraw consent at any time without affecting prior processing.
5. How we share information
We do not sell your personal information. We share it only:
- With other users, as you direct — your profile, team membership, shared media, and activity are visible to others according to your role and the Service's visibility rules.
- With service providers who process data on our behalf under contract: Google Firebase (authentication and push notifications), Google Cloud Platform (hosting, media storage, and async processing), Google Maps Platform (venue lookup), [EMAIL DELIVERY PROVIDER] (transactional email), and [ANALYTICS PROVIDER, if any].
- With identity providers you choose to sign in with (Google, Apple, Facebook), whose use is governed by their own privacy policies.
- For legal reasons — to comply with law, enforce our terms, or protect users.
- In a business transfer — as part of a merger, acquisition, or sale of assets.
6. International data transfers
Our providers may process data in [COUNTRIES/REGIONS]. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
7. Children
The Service is designed for sports teams that include minors.
- Accounts for children are intended to be created and managed by a parent or legal guardian (or a verified team manager acting under parental authorization), who provides any required consent.
- A parent/guardian linked to a child can access and manage that child's information. Information about a child is surfaced only to their linked parent or someone with equivalent verified authority, and to team adults strictly as needed to run the team.
- We do not knowingly collect personal information directly from a child [under the age of [13 / 16]] without verifiable parental consent.
- A parent or guardian may review, update, request deletion of, or withdraw consent for their child's information by contacting [privacy@teamsports.me].
If you believe a child has provided us information without the required consent, contact us and we will delete it.
8. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete the personal data you own (profile, your media, and your private data) from our active systems; residual copies may persist in encrypted backups for a limited period before being overwritten, and we may retain limited records where required by law.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to processing of your personal information, and to withdraw consent. You can edit your profile in the app, manage or disable push notifications in your device settings, delete your account (which removes the personal data you own), or email [privacy@teamsports.me] to request a copy of your data or exercise other rights. Automated self-service export is on our roadmap; until then we handle export requests manually.
California (CCPA/CPRA) and EU/UK residents have additional rights, including the right to lodge a complaint with a supervisory authority. We do not discriminate against you for exercising your rights.
10. Security
We protect your information with industry-standard measures, including encrypted transport (TLS), authenticated APIs with per-user access scoping, owner-only rights over your media, and least-privilege access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Third-party services
The Service relies on and links to third-party services (such as Google, Apple, Facebook, and Google Maps). Their handling of your data is governed by their own privacy policies, which we encourage you to review.
12. Changes to this Policy
We may update this Policy from time to time. We will post the new version with an updated date and, for material changes, provide additional notice through the Service.
13. Contact us
Questions or requests about this Policy or your data: [LEGAL ENTITY NAME], [privacy@teamsports.me], [ADDRESS].