Sideline Log
DRAFT. This document has not yet been reviewed by a lawyer and may change before launch. Text in [square brackets] still needs to be filled in.

Privacy Policy

Last updated: [date]

Sideline Log (“we”, “us”) helps parents and coaches track the development of young athletes. This policy explains what information we collect, why, and the choices you have. The service is operated by [legal entity name and address]. Contact: [privacy contact email].

Who this service is for

Sideline Log is for adults: parents, guardians and coaches who are 18 or older. It is not directed at children, and children do not create accounts. Adults enter information about the young athletes they are responsible for, and by doing so confirm they have the authority to do that.

Information we collect

  • Account information: your name, email address, password (stored hashed, never in plain text), chosen role (coach or parent), and optional profile details such as a bio and experience.
  • Information about athletes: a name, age and position for each athlete you add. We recommend using a first name or nickname instead of a full name.
  • Performance information: skill ratings, session and match notes, match events (goals, assists, substitutions), team rosters and invite codes.
  • Technical information: basic request data our hosting providers process to serve the app (such as IP address and browser type) and error logs.

We do not collect precise location, photos, payment details, or government identifiers.

How we use information

  • To provide the service: show your athletes, teams, charts and recommendations.
  • To secure accounts, prevent abuse, and fix problems.
  • To send account emails, such as password resets.

We do not sell personal information and we do not use athlete data for advertising.

Who can see athlete information

  • The adult who added the athlete can see everything about that athlete.
  • If a parent links an athlete to a team using an invite code, that team's coach can see the athlete's name, age and position. Other parents on the team cannot see that athlete.
  • Performance logs are private to the person who wrote them. When saving a log (or later), the author can choose “Share with coach”, which lets the coach of the athlete's team see that one log and its ratings. Sharing is off by default and can be turned off again at any time.

Service providers

We use these providers to run Sideline Log. They process data only to provide their service to us.

  • Supabase: database and authentication.
  • Vercel: application hosting.
  • [Email provider]: sending account emails.

Storage on your device

We use cookies that keep you signed in. To work without a connection, the app also stores entries you make while offline in your browser's local storage and caches static files such as images. This data stays on your device until it syncs. We do not use advertising or cross-site tracking cookies.

Retention and deletion

We keep your information while your account is active. You can delete an individual athlete at any time, which removes that athlete's records. You can also permanently delete your whole account from your Profile page (Delete Account). This immediately removes your account, your athletes, your logs, and any teams you coach. Items queued on your device are cleared too. Deleted data cannot be recovered. Data held in our providers' routine backups is overwritten on their normal backup cycle, [typically within 30 days]. You can also email [privacy contact email] to request deletion; see /account-deletion for step-by-step instructions.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, and to object to certain processing. Parents and guardians may review or delete their child's information at any time. Contact us at [privacy contact email] to make a request.

Children's privacy

We do not knowingly collect information directly from children under 13 (or the applicable age in your country). Information about young athletes is provided by their parent, guardian or coach. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, and access to each record is restricted by account. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.

International transfers

Our providers may process data in the United States and other countries. [Add details if you serve users in the EU/UK.]

Changes to this policy

We will post updates here and change the date above. For material changes we will notify you in the app or by email.

Contact

[Legal entity name], [address], [privacy contact email].