Privacy Policy

1. Introduction

TeamFlow (“we,” “our,” or “us”) operates the TeamFlow sports team management platform (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and your rights with respect to that information.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, and password when you register.
• Profile information: profile photo, date of birth (for player profiles), jersey number, position, and dominant hand/foot where applicable to your sport.
• Emergency contacts: name and phone number for minor players on youth teams.
• Team and roster data: team name, sport, age group, and information about team members you add.
• Communications: messages, announcements, and direct messages sent through the Service.
• Media: photos and documents you upload to team albums or share in chat.
• Event and attendance data: events you create, RSVP responses, and attendance records.
• Game results and statistics: scores, player stats, and MVP votes you record.

2.2 Information collected automatically

• Authentication session data: secure session tokens stored in cookies to keep you signed in.
• Push notification identifiers: a device-level token (OneSignal Player ID) if you grant push notification permission, used solely to deliver notifications to your device.
• Log data: IP address, browser type, pages visited, and timestamps, collected automatically by our hosting infrastructure for security and debugging purposes.

2.3 Information from third parties

• Google OAuth: if you sign in with Google, we receive your name, email address, and profile photo from Google. We do not receive your Google password.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and team
• Provide, operate, and improve the Service
• Send push notifications, email reminders, and in-app notifications you have enabled
• Enable communication between team members
• Enforce our Terms of Service and safeguarding policies
• Respond to support requests and inquiries
• Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising profiling or share it with advertising networks.

4. Sharing of Information

We share your information only in the following circumstances:

• Within your team: information you add to a team (name, profile photo, jersey number, position) is visible to other active members of that team, subject to any privacy settings you configure. Emergency contact information is visible only to coaches and team managers.
• Service providers: we use Supabase (database and authentication), Vercel (hosting), and OneSignal (push notifications). These providers process data on our behalf and are contractually obligated to protect it.
• Legal requirements: we may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: if TeamFlow is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your account information for as long as your account is active. Team data (rosters, events, messages, stats) is retained for the duration of your team subscription. You may request deletion of your account and associated data at any time (see Section 7).

Certain records (such as message audit logs on youth teams) may be retained for a longer period where required by applicable safeguarding obligations.

6. Children's Privacy

The Service is intended for use by adults (coaches, team managers, and parents). Minor players may have profiles created on their behalf by a parent or guardian. We do not knowingly allow minors to create their own accounts directly.

On youth teams, the Service automatically enforces safeguarding controls, including blocking direct messages between adults and minors, and maintaining a message audit log accessible to coaches and designated safeguarding leads.

Parents or guardians may request access to, or deletion of, information associated with their child's player profile by contacting us at privacy@teamflow.app.

7. Your Rights and Choices

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information via your profile settings.
• Data export: download a machine-readable export of your personal data at any time from your account settings.
• Deletion: request deletion of your account and associated personal data. We will process deletion requests within 30 days, subject to legal retention requirements.
• Notification preferences: manage push notification and email preferences in your account settings at any time.

To exercise any of these rights, contact us at privacy@teamflow.app.

8. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, row-level security on our database, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

If you discover a security vulnerability, please report it responsibly to privacy@teamflow.app.

9. International Data Transfers

TeamFlow is operated in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice in the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or to report a concern, contact us at: