Privacy Policy

Last updated: 17 April 2026

Squadd ("we", "us", "our") operates the Squadd mobile application. This policy explains how we collect, use, and protect your personal data.

1. Data We Collect

Account data

• Email address and display name (required to create an account)
• Password (hashed, never stored in plaintext)

Team data (provided by coaches)

• Player names, dates of birth, positions, shirt numbers
• Guardian/parent relationships
• Team names, age groups, formats

Usage data

• Availability responses
• Match events (goals, cards, substitutions, minutes played)
• Chat messages
• Newsfeed posts, poll votes, reactions
• Match day photos
• Payment/subs tracking records
• Player ratings and MOTM/POTM votes

Device data

• Push notification tokens (when you grant permission)
• Theme preference (dark/light/system)

2. How We Use Your Data

We use your data solely to provide the Squadd service: managing team rosters, fixtures, training, availability, communication, match statistics, payment tracking, calendar feeds, and fixture schedules.

We do not sell your data. We do not share it with third parties for advertising or marketing.

3. Children's Data

Squadd handles data about children (player names, dates of birth, photos, match statistics). This data is:

• Only visible to authenticated members of the same team
• Protected by row-level security policies
• Never shared outside the team
• Deletable on request

Explicit parental consent. When a parent or guardian registers their child via the "Add my child" flow, they must confirm — with an explicit tick-box — that they are the parent or legal guardian of the child and that they consent to the child's data being processed for team management. We store the timestamp of that consent as an auditable record.

When a coach invites a parent to link to their child, the parent's acceptance of the invite acts as the consent confirmation for that linking.

Parents/guardians can withdraw consent and have their child's record deleted at any time by asking the coach to remove the player, or by emailing hello@squadd.co.uk.

Users must be at least 16 years old to create a Squadd account, or have parental consent. The app is designed for use by coaches, team administrators and parents/guardians — children appear in the app as players (managed by their parent/guardian or coach), not as account holders.

4. Data Storage and Security

• All data is stored on Supabase (hosted on AWS in the EU region)
• Database access is protected by row-level security (RLS)
• Photos are stored in private buckets requiring signed URLs
• All connections use HTTPS/TLS encryption
• Passwords are hashed using bcrypt via Supabase Auth

5. Third-Party Services

Service	Purpose	Data shared
Supabase	Database, auth, storage	All application data
Expo	Push notifications	Device push tokens
Open-Meteo	Weather forecasts	Location coordinates (not stored)
postcodes.io	UK postcode geocoding	Postcodes (not stored)

6. Your Rights (UK GDPR)

You have the right to:

• Access your data — contact us and we will provide a copy
• Rectify inaccurate data — edit your profile and player information in-app
• Delete your account — use "Delete my account" in Settings
• Port your data — request an export in a machine-readable format
• Object to processing — contact us
• Withdraw consent — stop using the app at any time

Account deletion is immediate and irreversible.

7. Data Retention

• Active accounts: data retained while the account exists
• Deleted accounts: all personal data removed immediately

8. Cookies

The Squadd web app stores an authentication session token and theme preference. We do not use tracking cookies, analytics cookies, or advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via an in-app announcement.

10. Contact

For data requests, questions, or concerns:
Email: privacy@squadd.co.uk

Squadd is operated from Wales, United Kingdom.