Privacy Policy

Squadora ("we", "our", "us") operates the squadora.com website and the Squadora mobile application (collectively, the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service. We are committed to protecting the privacy of our users, including club administrators, coaches, players, parents, and guardians. By using the Service, you agree to the collection and use of information in accordance with this policy. For questions about this policy, contact us at support@squadora.com.

We collect the following types of information to provide and improve our Service: Account Data: When you register an account, we ask for information such as your name and email address, and you may add a phone number, date of birth, profile photo, mailing address, and an emergency contact. Club and Participant Data: Information related to your sports club, including club name, location, team rosters, player profiles (name, date of birth, position, jersey number, photo, parent or guardian contact), player statistics, match results, schedules, availability responses, registration forms, and financial records. Clubs may also choose to record medical information about participants (such as allergies, medical conditions, medications, and injuries) for safety purposes; this information is entered by club staff or parents and is visible to authorized club staff. Health and Fitness Data: If you use the coaching and nutrition features, we store the information you log, such as workouts, meals and nutrition entries, body weight, sleep, hydration, journal notes, and progress photos. Content You Submit: Messages you send in club chat, photos and files you upload, and forms you fill out. Usage Data: Only if you accept analytics in the cookie banner, we use Google Analytics for Firebase to collect information about how the Service is used, such as pages visited, sign-ups, and general device information. Nothing is collected unless you accept, and you can change your choice at any time on our Cookie Policy page. Device Data: When you enable notifications, we store push notification tokens for your device (web, iOS, or Android) so we can deliver them. Payment Data: When processing payments through our platform, payment information is handled by our third-party payment processor (Stripe). We do not store full credit card numbers on our servers. When a club collects a payment, the club is the merchant of record and Squadora acts only as a technology and payment-facilitation provider, as described in our Terms of Service. We retain transaction records, logs, and consents in the ordinary course of business, and you agree these records may be used as authoritative evidence in any dispute, subject to applicable law. Business Contact Information: To introduce Squadora to sports clubs, we collect publicly available business contact information about club officials (such as name, role, organization, and work email) from public websites and directories. We use it only to contact clubs about Squadora. Every such email includes a one-click unsubscribe link, and opt-outs are honored permanently.

Some features of the Service use artificial intelligence, including the AI assistant, coaching and training plan generation, food photo analysis, and the creative studio. When you use these features, the content you submit (such as your text prompts and, for photo analysis, the photo itself) is sent from our servers to Google's Gemini API to generate the response. These requests are made server-side; we do not expose your data or our API credentials to other users. Automated safety screening runs on AI requests. If a request is flagged as a potential safeguarding concern, a short excerpt of the prompt may be retained for human review. AI features are optional. If you do not use them, no content is sent to AI providers.

We use the collected data for the following purposes: - To provide, maintain, and operate the Service - To notify you about changes to our Service - To provide customer support - To gather analysis or valuable information to improve our Service - To monitor usage of the Service - To detect, prevent, and address technical issues and safety concerns - To process payments and manage subscriptions - To send you club communications, match notifications, and scheduling updates - To generate analytics and reports for club administrators - To facilitate team management, including roster management and availability tracking We do not sell your personal data to third parties. We do not use your data for advertising purposes unrelated to the Service.

Your data is stored on secure cloud infrastructure provided by Google Cloud Platform (Firebase). Security measures we apply include: - Encryption in transit (TLS/SSL) for all data transfers - Encryption at rest for stored data on Google Cloud infrastructure - Role-based access controls enforced by database security rules, so users can only read and write data their role permits - Server-side handling of sensitive credentials (payment and AI provider keys are never present in the app you run) - Logging of administrative and support access to club data - Automated daily database backups with 14-day retention Data is primarily stored in data centers located in the United States. For users in the European Economic Area, please see our GDPR policy for information about international data transfers. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

We may share your personal data in the following situations: With Club Administrators: Club administrators and coaches can view data related to their club members, including profiles, availability, and performance statistics, and any medical information recorded for participant safety. With Service Providers: We use third-party services to operate the Service. They receive only the data needed to perform their function: - Firebase / Google Cloud (Google) - authentication, database, file storage, hosting, push notifications, and analytics - Stripe - payment processing - Google Gemini API - processing of content you submit to AI features (see the AI Features section) - Microsoft 365 - delivery of emails we send (invites, notifications, receipts, support) - OpenStreetMap and Google Maps - address search and venue maps (the address or venue you type is sent to look up or display the location) - Open-Meteo - weather forecasts for event venues (the venue location is sent) - Open Food Facts and USDA FoodData Central - food and barcode lookups (the barcode or search term is sent, without personal identifiers) With Our Staff for Support: Squadora staff can view club data when providing support or investigating problems. This access is logged. For Legal Reasons: We may disclose your data if required to do so by law or in response to valid requests by public authorities. Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred.

We use cookies and browser storage (localStorage and IndexedDB) to operate the Service: - Authentication and session management (keeping you signed in) - Remembering user preferences (theme) and your cookie choice - Offline caching of your club data so the app works with a poor connection - Analytics (Google Analytics for Firebase) to measure how the Service is used - you can decline this via the cookie banner, and you can change your choice at any time You can instruct your browser to refuse cookies or clear stored data. However, if you do, some portions of our Service (such as staying signed in) may not function properly. For more details, please see our Cookie Policy at /cookies.

Clubs decide what information they collect from their members and participants through the Service and how they use it to run their operations. Squadora provides the technology platform and handles that information on the club's behalf, as described in this policy. For payments, the club is the merchant and seller of record and Squadora acts as a technology and payment-facilitation provider, with processing performed by Stripe (see Payment Data above and our Terms of Service). If you have questions about how a specific club collects or uses your information - for example its registration forms, refund decisions, or communications - those are directed to the club. We support clubs in meeting their obligations and honor the privacy rights described in this policy.

Our Service is used by sports clubs whose participants include minors, and we take children's privacy seriously. The Service is not directed at children. As set out in our Terms of Service, you must be at least 13 years old to create an account, users between 13 and 18 must have parental or guardian consent, and accounts or participant profiles for children under 13 must be created and managed by a parent, guardian, or authorized club administrator - never by the child. Information about minor participants (such as name, date of birth, and team assignment) is provided to us by clubs, parents, or guardians for the purpose of organizing sports activities. Clubs that enter a child's information are responsible for having the parent's or guardian's consent to do so, typically as part of the club's own registration process. Parents and guardians can: - Review their child's personal information held in the Service - Request correction or deletion of their child's data - Refuse further collection of their child's data - Contact us at support@squadora.com for any privacy concerns regarding minors If we learn that a child under 13 has created an account directly, we will delete it.

Depending on your jurisdiction, you may have the following rights regarding your personal data: - Right to Access: You can request a copy of the personal data we hold about you. - Right to Rectification: You can correct your profile information in the app, or request that we correct inaccurate personal data. - Right to Erasure: You can delete your account yourself in the app (Profile or Settings), or request deletion by contacting us, subject to legal obligations. - Right to Restrict Processing: You can request that we limit how we use your data. - Right to Data Portability: You can download a copy of your personal data as JSON at any time in the app (Profile on desktop, Settings on mobile), or request a copy by contacting us. - Right to Object: You can object to our processing of your personal data. - Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time (for example, declining analytics in the cookie banner or unsubscribing from emails). To exercise any of these rights, contact us at support@squadora.com. We will respond to your request within 30 days.

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy: - Active account data is retained for the duration of your account. - You can delete your account at any time in the app (Profile on desktop, Settings on mobile) or by contacting support@squadora.com. Deletion takes effect immediately: your account profile, club memberships, notifications, push notification tokens, and your personal files in storage (such as your profile photo) are deleted, and your sign-in is removed. - If you own a club, you must transfer or delete the club before deleting your account, so the club's members are not stranded. - Player participation records (rosters, statistics, match results) are unlinked from your account on deletion but remain part of the club's records, which the club manages. Content you contributed to a club workspace (such as messages, photos, and form responses) likewise remains subject to the club's management. - Photos and media files uploaded to a club are automatically deleted 3 years after upload, or when the club's account is closed, whichever comes first, unless the club enables media retention in its club settings. Club administrators receive advance warnings starting 6 months before any scheduled deletion. - Payment and transaction records are retained for 7 years as required by financial regulations. - Aggregated or anonymized analytics data may be retained indefinitely. To request removal of specific content or of a child's information from a club's records, contact the club administrator or support@squadora.com.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide notice through the Service or via email before the change becomes effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page. If you have questions about this Privacy Policy, contact us at support@squadora.com.