LineUp Privacy Policy

What we collect

• Your account. Your name, email address, date of birth, gender, country, and a password (stored only as a secure hash, never as the password itself). This is the same whether you sign up with email or with Apple or Google. Apple and Google give us your name and email; the app then asks you for date of birth, gender, country and a password, because every account needs a way to sign in if you ever stop using that provider. Date of birth is collected to confirm account holders are adults.
• Your identity within a team. The name and relation you give when you join a team, for example "Sam Taylor, Parent". This is per team, so joining a second team does not rename you on the first.
• Team information. The team name, region, sport, game format, season end, schedule of games and trainings, venues and their map coordinates, notes, scores, awards, goals scored, and playing-time records, entered by the team's manager.
• Player information. Player names, and optionally shirt numbers and playing positions, entered by the manager or a parent. Players are usually children; see the section on children below.
• Availability. RSVP responses (in or out) for games and trainings, and who they were made by.
• Notification settings and device tokens. If you allow notifications, we store a push token for that device so we can send your team's reminders to it, plus your per-team reminder preferences.

What we do not collect

• No advertising, no ad identifiers, and no tracking of you across other apps or websites.
• No analytics or tracking SDKs inside the app, and no sale or sharing of personal information with data brokers.
• No precise device location. The app never asks for location permission. Venue maps are static images of the address the manager typed in.
• No access to your contacts, photos, microphone or camera.
• No reading of your calendar. Adding a game to your calendar opens your device's own "new event" screen with the details filled in; you save it, and the app never sees your calendar.

Children

LineUp accounts are held by adults: managers and parents or guardians. Children do not create accounts and cannot sign in. Player names are added by the adults running the team so that lineups and availability make sense, the same information that would otherwise sit on a paper team sheet.

A player's information is visible to the members of that team and to nobody else. Linking yourself to a child who is already on a roster is a request the team's manager has to approve, so holding an invite link is not enough to become listed as a child's guardian.

Notifications

If you turn notifications on, LineUp sends your team's reminders the evening before a game or training, and a short summary when a game finishes. A full-time summary can include a player's first and last name, for example when a player of the day has been picked, and like any notification it may appear on your lock screen. You can turn game and training reminders off per team in Settings, or turn notifications off entirely for the app in your device's settings.

Signing out unregisters that device. If that fails, because there is no signal or the app is closed straight afterwards, the app retries the next time it is opened, and any device that has not checked in for 60 days is dropped automatically.

Data stored on your device

So the app still works without a signal, it keeps a copy of your current team's data on the device: the roster including players' names, the schedule, RSVPs and attendance. It is held in the app's own storage, protected by the operating system's app sandbox, and is kept for at most seven days from the last time the app heard from our server, after which it is deleted. It never contains your password or your sign-in token, and the app cannot sign you in from it. Signing out, leaving a team or deleting the app removes it.

Your sign-in token and any invite code you hold are stored separately, in the device keychain on iOS or the equivalent encrypted store on Android.

Who processes your information

We do not sell or share your information for advertising. We use these providers to run the service, and each one only receives what that function needs:

• Cloudflare. Hosting and the database. All team and account data is stored here.
• Resend. Sends the verification, sign-in and password-reset emails. Receives your email address and the code being sent.
• Expo. Delivers push notifications to Apple and Google on our behalf. Receives your device's push token and the contents of the notification, which can include a player's name.
• Apple and Google. Deliver the notification to your device. They also verify your identity if you use Sign in with Apple or Sign in with Google.
• Google Maps. Draws the static map image of a venue. Receives the venue address or its coordinates.
• Komoot. Suggests addresses while a manager types a venue. Receives what is typed into that field.

Who can see what

Team data is visible only to that team's members: people who joined with the team's invite link. Managers can edit everything in their team, and can see playing-time and fairness figures for the whole squad. Parents can see the team's schedule, roster and results, and can set availability only for the children they are the approved guardian of. Nothing is public.

How long we keep it

• Team data is kept while the team exists. Deleting the team permanently removes the team and everything in it: players, schedule, availability, results, awards and playing-time records.
• Removing a player hides them, it does not erase them. When a manager removes a player, that player disappears from the roster, from availability and from every screen in the app straight away. Their name and their past record stay in the database so that finished games, results and playing-time history from before they left remain correct. That information is deleted when the team is deleted. If you want a specific child's record erased sooner, email us and we will do it.
• Sign-in codes and unfinished signups, which hold an email address, are deleted automatically the day after they expire.
• Expired invite links are deleted automatically. We only ever store a one-way hash of an invite code, never the code itself.
• Push tokens are deleted when you sign out, when you leave the team, when you reset your password, or after 60 days without the app checking in.

Deleting your account

You can delete your account inside the app: Settings, then Delete account. This permanently removes your account, your sign-in identities, your per-team identity and your personal links to players. If you are the only manager of a team, either make someone else a co-manager first or delete the team (Team settings, then Delete team), so a team is never left unmanaged.

This page

This page sets no cookies, runs no analytics, and does not track you.

Security

Traffic between the app and our server is encrypted in transit. Passwords are stored only as salted hashes with a high work factor, never in a recoverable form. Invite codes and email codes are stored only as hashes. Resetting your password signs out every other device and stops notifications going to them.

Your rights

Under the New Zealand Privacy Act 2020 you can ask for a copy of the personal information we hold about you, ask us to correct it, and ask us to delete it. Email us and we will sort it out. If you are somewhere with additional rights, for example the GDPR in the EU or the UK, those apply too.

Contact

Questions about privacy, or a request about your information: [email protected]

Changes

If this policy changes in a way that matters, we will note it in the app's release notes and update the date at the top of this page.