Privacy

This is a placeholder. Before you take on a paying customer, replace it with a real policy reviewed by someone qualified — you will be a data controller for other clubs’ members, including children in a junior section.

What the application currently stores:

• Account details: name, email address, hashed password, sign-in times and IP addresses.
• Team membership: roles, squad number, position, phone number and emergency contact.
• Activity: calendar responses, message board posts, tasks, kit assignments and stats.
• An audit log of consequential actions, retained indefinitely.

Data belonging to one team is isolated from every other team at the database level. Deleting a team removes its data by cascade.