Squadd Squadd
Home Help

Privacy Policy

Last updated: 29 September 2026

Squadd ("we", "us", "our") operates the Squadd mobile application. This policy explains how we collect, use, and protect your personal data.

1. Data We Collect

Account data

  • Email address and display name (required to create an account)
  • Password (hashed, never stored in plaintext)
  • If you buy a season pass on our website: what you paid, when, and which teams it covers (your card details go to Stripe, never to us)

Team data (provided by coaches)

  • Player names, dates of birth, positions, shirt numbers
  • Guardian/parent relationships
  • Team names, age groups, formats

Usage data

  • Availability responses
  • Match events (goals, cards, substitutions, minutes played)
  • Chat messages
  • Newsfeed posts, poll votes, reactions
  • Match day photos
  • Payment/subs tracking records
  • Player ratings, Player of the Match picks and Parents' Player of the Match votes

Device data

  • Push notification tokens (when you grant permission)
  • Theme preference (dark/light/system)

2. How We Use Your Data

We use your data solely to provide the Squadd service: managing team rosters, fixtures, training, availability, communication, match statistics, payment tracking, calendar feeds, and fixture schedules.

We do not sell your data. We never use your account, team, or children's data for advertising or marketing. (Our public marketing website, squadd.co.uk, separately uses cookie-based analytics and ad measurement to run our social-media campaigns — this is disclosed in §8 and never touches the app or any team's data.)

3. Children's Data

Squadd handles data about children (player names, dates of birth, photos, match statistics). This data is:

  • Only visible to authenticated members of the same team
  • Protected by row-level security policies
  • Never shared outside the team, apart from the services in section 5 that run Squadd for us
  • Deletable on request

Explicit parental consent. When a parent or guardian registers their child via the "Add my child" flow, they must confirm — with an explicit tick-box — that they are the parent or legal guardian of the child and that they consent to the child's data being processed for team management. We store the timestamp of that consent as an auditable record.

When a coach invites a parent to link to their child, the parent's acceptance of the invite acts as the consent confirmation for that linking.

Parents/guardians can withdraw consent and have their child's record deleted at any time by asking the coach to delete the player (in the app: Squad, tap the child's name, then Delete player permanently), or by emailing hello@squadd.co.uk.

Deleting a player removes their record straight away: their name, date of birth, medical and emergency details, links to their parents, availability answers, attendance, match stats and awards, and payment records. Their photo, Time Capsule voice notes and the share images made for them are removed from storage within the hour. Match results stay, without the child's name on them. Things people wrote that mention the child by name, such as chat messages, feed posts and match reports, stay as they were written; email us and we'll remove them.

A coach can also remove a player from the squad without deleting them, for example when they leave the club. That hides them from the team but keeps their record and stats, so it doesn't delete their data.

Users must be at least 16 years old to create a Squadd account, or have parental consent. The app is designed for use by coaches, team administrators and parents/guardians — children appear in the app as players (managed by their parent/guardian or coach), not as account holders.

4. Data Storage and Security

  • All data is stored on Supabase (hosted on AWS in the EU region)
  • Database access is protected by row-level security (RLS)
  • Photos are stored in private buckets requiring signed URLs
  • All connections use HTTPS/TLS encryption
  • Passwords are hashed using bcrypt via Supabase Auth

5. Third-Party Services

These are the companies that handle personal data for Squadd, what each one does for us and what it receives.

ServicePurposeData shared
SupabaseStores the app's data and files, and runs sign-in and our server code (hosted in the EU)All app data
ExpoPush notifications and app updatesYour device's push token and the text of each notification, which Expo passes to Apple or Google to deliver. When the app checks for an update: a random install ID, your device type and the app version.
Apple and GoogleSign in with Apple or Google, if you choose it, and Squadd Pro purchases through the App Store or Google PlayTo sign you in, they confirm who you are and give us your name and email address (Apple can give us a private relay address instead of your real one). They take the payment for Squadd Pro, so we never see your card details.
SentryCrash and error reports, so we can find and fix problems (stored in the EU)Your Squadd user ID (a random code, not your name or email), device details such as the model, operating system and app version, and technical details of what went wrong
RevenueCatManages Squadd Pro subscriptions bought in the appYour Squadd user ID (a random code, not your name or email) and basic device details, including a device ID on iPhone. If you subscribe, your App Store or Google Play purchases and renewals.
StripeTakes the payment for a season pass bought on our website, for coaches with more than one teamWhat you enter to pay: your name, email address and card details, which go straight to Stripe (we never see your card). With them, your Squadd user ID and the teams the pass is for. Stripe sends your receipt.
ResendSends our emails, such as password resets and a note before your team's free trial endsYour email address and the email itself, which can include your first name and your team's name
AnthropicAI features for coaches: reading a fixture list or festival schedule you photograph or paste in, and Coach's Read, The Dossier and the half-time readThe photo or text you give it, and team names. For the match features: scores, match events and minutes played, with player names only for senior (adult) teams, never for youth teams.
Open-MeteoWeather forecasts for matchesThe venue's map coordinates, worked out from its postcode
postcodes.ioLooking up UK postcodes for venues and forecastsThe venue's postcode
HostingerHosts our website, squadd.co.uk, and our email inboxWhat your browser sends when you visit the website, such as your IP address, and any email you send us
Google FontsSupplies the typefaces on our websiteYour IP address and browser details when a page loads

Your phone contacts some of these services directly, so, like any website, they also see its IP address. Some of these companies are based in the United States, so the data they receive may be processed there. Our website's analytics and advertising cookies are covered in section 8.

6. Your Rights (UK GDPR)

You have the right to:

  • Access your data — contact us and we will provide a copy
  • Rectify inaccurate data — edit your profile and player information in-app
  • Delete your account — use "Delete my account" in Settings
  • Delete your child's record: ask the coach to delete the player, or email us (see section 3)
  • Port your data — request an export in a machine-readable format
  • Object to processing — contact us
  • Withdraw consent — stop using the app at any time

Account deletion is immediate and irreversible.

Complaints

If you're unhappy with how we've handled your personal data, or with our answer to a request, please tell us. You don't need to use legal terms. Email privacy@squadd.co.uk.

We'll acknowledge your complaint within 30 days of getting it, look into it, keep you updated, and tell you the outcome without undue delay. If you're complaining for someone else, such as your child, we may need to check you're allowed to act for them.

You can also complain to a data protection regulator at any time. It's usually quickest to give us the chance to put things right first. Keep a copy of your complaint to us, as the regulator will normally ask for it.

  • In the UK: the Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
  • In Ireland: the Data Protection Commission, dataprotection.ie, or write to 6 Pembroke Row, Dublin 2, D02 X963.
  • Elsewhere in the EU: the data protection authority in the country where you live or work, or where you think the problem happened.

7. Data Retention

  • Active accounts: data retained while the account exists
  • Deleted accounts: your personal data, including your profile photo and the files that go with it, is removed as soon as you delete your account. A few things are kept, each for a stated reason: the record of the deletion keeps your name and email address for 30 days, then erases them; backups are kept for up to 30 days; suggestions you sent us stay without your name; and a team that carries on keeps its own records. The account deletion page lists everything that's removed and what's kept.
  • Deleted players: a player a coach deletes is removed straight away, as described in section 3, and from our backups within 30 days.

8. Cookies & Analytics

The Squadd app (iOS, Android, and the in-app web view) stores only an authentication session token and a theme preference. The app itself uses no advertising cookies and does not load third-party analytics.

The Squadd marketing website (squadd.co.uk) uses anonymised visitor analytics to understand which content is useful and improve the site. We currently use:

  • Google Analytics 4 — page views and basic engagement, with IP anonymisation enabled. No personal identifiers are collected.
  • Fastlane Analytics — visitor-level engagement attribution for short-form content (TikTok, Instagram Reels, YouTube Shorts) we publish. Trial period from May 2026. No personal identifiers are collected.
  • Meta Pixel — on our advertising landing pages only, to measure whether our paid Facebook/Instagram ads reach the right people and to show relevant follow-up ads. This is an advertising cookie provided by Meta Platforms Ireland. It runs only if you accept it, and never on any signed-in app screen.

These load only after you accept them via the cookie banner shown on your first visit — if you decline, nothing is loaded. To change your choice later, clear this site's data in your browser and reload. Only the Meta Pixel sets an advertising cookie (and only on our ad landing pages); you can block any of them via standard browser tools (Brave Shields, Safari Intelligent Tracking Prevention, Firefox Strict mode, uBlock Origin, etc.).

Link click counts. When you follow one of our short tracking links (e.g. squadd.co.uk/go/… from a social-media bio), we record an anonymous tally of the tap — the link code, the time, and standard request information (browser type, referring page) — before sending you on to the destination. This sets no cookie, stores no IP address and identifies no individual; it simply tells us how many people clicked. As it is first-party and non-identifying, it does not require the cookie consent above.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via an in-app announcement.

10. Contact

For data requests, questions, or concerns:
Email: privacy@squadd.co.uk

Squadd is operated from Wales, United Kingdom.

Squadd Squadd
Privacy Policy Terms of Service Contact
© 2026 Squadd. All rights reserved.