Privacy Policy

What We Collect

We collect information you provide when creating an account and using Squadz, including:

• Account details: name, email address, phone number
• Athlete profiles: name, birth year, contact information
• Team activity: event RSVPs, messages, attendance records
• Custom roster fields defined by team administrators
• Files and photos you upload

Children's Privacy (COPPA)

Squadz is designed for youth sports organizations. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

• Children's data is only entered by their parent or team coach — children do not interact with the platform directly.
• Parents control who can see their child's contact information, medical details, and photos on a per-team basis through visibility settings.
• Parents can review, modify, export, or delete their child's data at any time through the Privacy & Account settings.

How We Use Your Data

• To operate the service: scheduling, RSVPs, messaging, and notifications
• To send you emails you have opted into (event reminders, messages, announcements)
• To enforce team and organization permissions

We do not sell your data. We do not show ads. We do not share your information with third parties except as needed to operate the service (e.g. email delivery, payment processing). The full list of sub-processors and our Data Processing Addendum is published at /dpa.

Who Can See Your Data

Access depends on your role and the visibility settings configured by parents:

• Team coaches and admins can see roster information and contact details for team coordination, subject to parental visibility controls.
• Team members can see other members' names and any information the parent has made visible to the team.
• Parents have full control over their child's data visibility per team.

Data Retention

We keep your data for as long as your account is active. Completed seasons can be archived and are recoverable. When you delete your account, we enter a 30-day grace period during which you can change your mind. After that, your personal data is permanently deleted or anonymized.

Your Rights

You can, at any time:

• Access all data we store about you through the Privacy Dashboard in your settings.
• Export your data in JSON or CSV format.
• Correct your profile and athlete information.
• Delete your account with a one-tap request and a 30-day grace period.
• Control visibility of your child's information on a per-team, per-category basis.

Security

Passwords are hashed using bcrypt. All communication uses HTTPS. Access to data is restricted by team and organization roles. Medical and sensitive custom fields receive additional access controls.

Analytics & Cookies

We use essential cookies to keep you signed in and to remember your cookie preferences. With your consent, we also use Google Analytics 4 (cookies _ga and _ga_*) to measure site traffic and how visitors find us. Google LLC acts as a third-party processor for this analytics data. These analytics cookies load only after you select “Accept all” in our cookie banner — if you choose essential only, Google Analytics never runs. For the full list of cookies and how to change your choice, see our Cookie Policy.