Privacy policy
The short version. The app keeps everything you enter on your own phone, and works fully without an account. If you choose to turn on sync, you sign in and your team's data is also stored on our server, so it is the same on every phone signed in to that team. Only your team's coaches can see it. The app contains no advertising, analytics or tracking code.
This website sets no cookies and loads nothing from third parties. The web server keeps ordinary access logs for a short time.
Who we are
Squadpoint is made and published by Christopher Brookes, trading as Brookes Industries, based in the United Kingdom. For anything about this policy, or about your data, contact policy@squadpoint.app.
The app
What the app stores
The app is a tool for a coach to run a youth football team's match day. It stores:
- Squad: player names, shirt colour, preferred position, and whether they are available for a fixture.
- Matches: opponent, date, venue, format, line-ups by period, substitutions, goals and other actions recorded during play, the score, and any awards given.
- Settings: team name, home ground, match format, positions, formations, your team's Full-Time code, and the state of the match clock.
With sync off, all of it is stored only in the app's private storage on the device it is installed on. With sync on, it is also stored on our server, as described below.
Player names are typed in by the coach. Most players in a youth squad are children. We recommend entering a first name, or a first name and initial, rather than a full name. What is entered is the coach's choice and stays under the coach's control.
Sync and your account
Sync is off until you sign in, under Settings → Account & sync. Until you do, nothing is sent to us.
Signing in. You sign in with a code we email to you, or with Google or Apple where the app offers them. We receive your email address, and from Google or Apple your name if they share it. Signing in with Apple lets you hide your email address from us, and if you delete your account we also tell Apple to stop Squadpoint signing you in. You also choose a name to be shown to your team's other coaches.
Signing in with Google. If you sign in with Google, or add Google sign-in to your account, we ask Google only for basic sign-in information, and Google shares your email address, your name, a link to your Google profile picture, and an identifier for your Google account. We use the email address and the identifier to sign you in to the same account each time, and the name only to fill in the name your fellow coaches see if you have not chosen one, which you can change. We do not use the picture: the app never fetches or shows it, though the sign-in service stores the link with the rest of what Google sends. We do not ask Google for anything else, such as your contacts, calendar or files, and what we receive from Google is never sold, never used for advertising, and never shared except with the processors below who run the service for us. It is stored with your account and deleted when you delete your account; removing Google sign-in stops Google signing you in, and what Google sent stays with the account until you delete it. Google learns that you signed in to Squadpoint, under its own privacy policy. Squadpoint's use of information received from Google adheres to the Google API Services User Data Policy, including its Limited Use requirements.
What goes to our server. When you put a team on our server, or join one, the app copies that team's squad, positions, formations, fixtures, line-ups, availability, goals, awards and settings to it, and from then on sends each change as you make it. A match clock is shared too: its period, whether it is running, when the period ends, and which coach's phone is timing it. To tell one phone from another, the app makes a random identifier for itself the first time it syncs. It is not your phone's serial number or advertising ID, and it means nothing outside Squadpoint.
Whose it is. A team's data belongs to whoever runs the team: its club, or the coaches themselves for a team that is not part of one. Its coaches look after it on their behalf, and we hold it for them, to keep their phones in step and for nothing else.
Who can see it. The team's coaches, on any phone they sign in to. A coach can invite another coach with a code; once that coach types it in, they can see and edit the whole team, players' names included, so only give a code to someone you would hand the team sheet to. Each coach of a team sees the others' names as they gave them in the app, never their email addresses. A coach can remove another, or leave a team. A coach who leaves or is removed can no longer read anything new from our server, though their phone keeps what it already had unless they remove it. Nobody else can read it: the server checks who is asking on every request.
Where it is held. On servers run for us by Supabase, Inc., which hosts the database and the sign-in service as our processor, in the European Union (Frankfurt, Germany), which UK data protection law recognises as protecting personal data adequately. Each night a backup of the database is copied to a server we rent from Hetzner Online GmbH, also in Germany (Falkenstein), as our processor; it is encrypted as it is written, with a key that is not kept on that server. Sign-in codes are emailed through Amazon Web Services' email service (Amazon SES), in the United States, which receives your email address for that alone; it is covered by AWS's data processing terms and the UK Extension to the EU–US Data Privacy Framework. Data travels between the app and the server encrypted.
Records kept to run the service. While you are signed in, the server keeps a record of your sign-in with the IP address and the type of software it came from, which goes when you sign out or delete your account. Supabase also keeps short-lived logs of requests to the server (IP address, time and what was asked) to keep it running and secure, discarded after a few days.
How long. Your account and your team's data stay until you delete them, or until they go unused for 18 months: a team nobody has synced for 18 months is deleted from our server, and so is an account nobody has signed in to for 18 months, with any team it was the only coach of. That leaves a full season and a summer break before anything goes, and the copy on your phone always stays, so signing in again puts the team back. A team's last coach can delete the team from our server for everyone, and its contents go at once. Something you delete in the app, such as a player, a fixture or a goal, is removed from the server at once except for its record id, a code with nothing about your child in it, which stays as long as the team does so that every phone with the team learns it has gone, however long since the phone last opened it. A team that is deleted leaves only its own record id behind for 30 days, and then that goes too, with every record id under it. Our backups of the database are kept for at most seven days, so anything deleted is gone from those within a week.
Players are children. The names in a squad are typed in by a coach and are usually children's. With sync on, they are stored on our server for the team's coaches, and are never used for anything but showing the team to them.
What leaves the phone
Nothing leaves the phone unless you start it. There are three ways it can.
| Feature | What happens | Who receives data |
|---|---|---|
| Fetch from Full-Time | Opens The FA's Full-Time website inside the app so you can find your team's fixture list. The app reads the page you land on and turns the fixtures into calendar entries. Nothing about you or your squad is sent to The FA by the app; the request is the same as visiting the site in a browser. | The Football Association, under its own privacy policy. |
| Export and import | Writes your squad, positions and chosen matches to a file you save wherever you choose, using the phone's own file picker, and reads such a file back. The file contains player names. Where it goes, and who you send it to, is up to you. | Whoever you share the file with. Squadpoint does not receive it. |
| Sync (only when you sign in) | Your email address and name, what Google shares if you sign in with it (above), and your team's squad, fixtures, line-ups, scores, awards, settings and match clocks, as described above. | Squadpoint, held by Supabase as our processor with encrypted backups at Hetzner, and your team's coaches. Your email address also goes to Amazon SES (US) to send the sign-in code. |
Permissions the app asks for
- Internet: used by Fetch from Full-Time and, if you turn it on, by sync.
- Run in the background, and show a notification: so the match clock keeps counting and can sound the alarm when the screen is off. The notification is the running clock.
- Keep the device awake: so the alarm can sound at the end of a period.
The app does not ask for location, contacts, camera, microphone, photos or any advertising identifier.
Analytics, advertising and crash reporting
None. The app contains no analytics, advertising or crash-reporting software. If the app crashes, nothing is reported to us unless you choose to tell us.
Children
The app is for adults: coaches and other volunteers running a youth team. It is not aimed at children and children are not expected to use it. Information about children in the app is entered by an adult. With sync off it stays on that adult's device; with sync on it is also held on our server for that team's coaches.
Deleting your data
- On your phone: uninstalling removes everything the app stored, and Settings → App data wipes it while keeping the app. Neither touches your account or your team on our server. Any export files you saved are yours to delete.
- One player, fixture or other record: delete it in the app, and it goes from our server too, as above.
- Your account: Settings → Account & sync → Delete my account deletes your account. A team you are the only coach of is deleted from our server with it; a team with other coaches carries on with them, without you. The copy on your phone stays. You can also ask us by email at policy@squadpoint.app, or follow the steps at squadpoint.app/delete-account.
- Signing out stops sync and keeps everything, on the phone and on our server.
Data protection law
With sync off, the app sends no personal data to us, so we do not process it. The coach who installs the app is responsible for the information they enter and for any export files they share, in the same way they are for a paper team sheet.
With sync on, we are the controller of your account data (your email address, your name, and what Google shares if you sign in with it), held to run your account, on the basis of providing the service you asked for. For a team's data, the controller is whoever runs the team, its club or its coaches, acting through the coaches who use the app; we are their processor, holding it only to provide sync to them, under the data processing terms in our terms of service. Questions from a player's family about the team's records are best asked of the team's coach or club, and we will help them answer. A short notice coaches can share with families is at squadpoint.app/parents. You can ask to see, correct or delete what we hold about you at policy@squadpoint.app.
This website
- Cookies: none. There is nothing to consent to and no banner.
- Third parties: the site loads no fonts, scripts, images or analytics from anyone else.
- Server logs: the web server records each request's IP address, time, page requested, and browser type. This is the standard log every web server keeps, used only to keep the site running and secure. Logs are rotated automatically and the oldest entries are discarded once the log reaches a fixed size. At our level of traffic that means an entry is typically kept for a few weeks, and never indefinitely. The legal basis is our legitimate interest in running a secure website.
- Hosting: the site is hosted on a server operated by Hetzner Online GmbH in the European Union.
Other Squadpoint services
The web app at squadpoint.com, for organising your own games, is a separate service with accounts of its own. It has its own privacy policy, published there. This policy covers only the coaching app and this website.
Changes
The date at the top of this page changes whenever the policy does. If a version of the app is going to send anything to our server that this page does not describe, the policy is rewritten to say so before that version is released.
Contact
Questions, requests or complaints: contact@squadpoint.app. You also have the right to complain to the Information Commissioner's Office.