Terms of service

Version 1, 28 October 2026. Applies to the Squadpoint app for Android and iOS and to its sync service.

1. Who we are

Squadpoint is made and published by Christopher Brookes, trading as Brookes Industries, based in the United Kingdom ("we", "us"). Contact: contact@squadpoint.app.

2. Accepting these terms

Using the app means accepting these terms. Sync asks you to accept them in the app before it puts a team on our server or joins you to one, and records the version you accepted, whom you said you run the team for, and when. If you got the app from Apple's App Store, Apple's standard licence for apps applies too; Apple is not a party to these terms and is not responsible for the app.

3. Who can use it

Squadpoint is for adults: coaches, managers and other volunteers running a youth football team. You must be 18 or over to use it. Players do not use the app and have no accounts.

4. Running a team, and whom you act for

A team's records belong to whoever runs the team. When you put a team on our server you tell us which it is:

• A club. If the team is part of a club, the club is responsible for its players' records. You confirm that the club allows you to use Squadpoint for the team, and you accept these terms, the schedule included, on the club's behalf. If you are not sure, ask the club first (its secretary or welfare officer will know).
• Independently. If the team is not part of a club, you and the team's other coaches are responsible for its records, and accept these terms for yourselves.

If that changes, for instance an independent team joins a club, tell us at contact@squadpoint.app or answer again when the app asks.

5. What you put in

• Enter only what you need to run the team. A first name, or a first name and initial, is enough for a player.
• Don't use the app's free-text fields, such as team, award or opponent names, for anything sensitive about a child, such as health, family circumstances or safeguarding matters.
• Let players' families know the team uses Squadpoint. squadpoint.app/parents is a notice you can share with them for that.
• What you enter stays yours, or the club's. You give us only the permission we need to store it and send it to your team's coaches' phones.

6. Inviting other coaches

An invite code lets whoever types it in see and edit the whole team, players' names included. Give one only to someone you would hand the team sheet to, and remove anyone from the team who should no longer have it. You are responsible for whom you invite.

7. Fair use

Don't try to read or change a team you are not a coach of, get around the app's limits, overload or attack our server, or use Squadpoint for anything other than running a football team. We may suspend or close an account that does, and remove it from a team.

8. The service

• Price. The app and sync are free at present. We may charge for some features later, sync among them. Nothing will be charged without you choosing to pay, and we will tell you, in the app and here, before anything you use stops being free.
• Your phone is the master copy. The app is built so nothing on match day waits for the network, and every phone keeps its own copy of its teams. Sync may sometimes be slow or unavailable; your phone carries on regardless. Exporting a backup from time to time (Settings → Backup & restore) is a good habit.
• Changes. We improve the app and may change how it works. If we ever stop the sync service, we will give at least 30 days' notice where we can, and the copy on each phone stays.
• It is a tool, not a referee. The clock, playing-time figures and suggested line-ups are aids. Decisions on the day, and keeping to your league's rules, remain the coach's.

9. Ending

You can stop at any time: Stop syncing this team, sign out, or Delete my account under Settings → Account & sync. What deleting does, and how long anything is kept, is in the privacy policy; in short, a team and an account left unused for 18 months are deleted from our server. Sections 10 and 12 and the schedule's paragraph on deletion continue after you stop.

10. Our responsibility to you

• Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else the law does not allow us to limit, and nothing affects your statutory rights as a consumer.
• Otherwise, we are not liable for losses that were not foreseeable, for loss of business or profit, or for data lost where keeping the copy on your phone or an export would have prevented it.
• Subject to the first point, our total liability to you or your club for anything arising from Squadpoint is limited to the greater of what you paid us in the 12 months before the claim and £100.

11. Changes to these terms

A new version is published here with a new number and date. If a change affects how we hold a team's data, or what you agree to, the app asks you to accept it before that team carries on syncing. Small corrections that change nothing you agree to may be made without asking.

12. Law

These terms are governed by the law of England and Wales, and its courts may hear any dispute. If you live in Scotland or Northern Ireland, you may also bring proceedings in your own courts.

Schedule: data processing terms

UK GDPR Article 28 requires a written contract when one organisation processes personal data for another. For each team on our server, this schedule is that contract between the team's controller, whoever runs the team as recorded when it went on the server (section 4), and us as its processor. The coaches' own accounts are not covered here: we are the controller of those, as the privacy policy explains.

What is processed

Subject matter	Storing a team's records and keeping its coaches' phones in step.
Duration	For as long as the team is on our server.
Nature and purpose	Storage, transmission to the team's coaches, and deletion, solely to provide sync.
Personal data	Players' names, shirt colours and preferred positions; fixtures; line-ups, availability, goals and assists, and awards; settings; match clocks, with the random id of the phone timing them; coaches' display names.
People	The team's players, usually children, and its coaches.

What we undertake

1. Instructions. We process the team's data only on your documented instructions, which are these terms and what the team's coaches do in the app: adding, changing and deleting records, inviting and removing coaches. If the law requires us to do otherwise, we will tell you first unless the law forbids it, and we will tell you if we think an instruction breaks data protection law.
2. Confidentiality. Anyone we allow to access the data is bound to keep it confidential. At present that is Christopher Brookes alone, and only to run and support the service.
3. Security. We keep appropriate technical and organisational measures in place, including encryption in transit and at rest, a check on every request that the person asking is a coach of the team, one-time sign-in codes, and two-factor sign-in on every account that administers the service.
4. Sub-processors. You authorise Supabase, Inc. to host the database, in the European Union (Frankfurt, Germany), and Hetzner Online GmbH to host the server that keeps the database's nightly backups, in the European Union (Falkenstein, Germany), each under data protection terms that bind it as these bind us. The backups are encrypted as they are written, with a key that is not kept on that server. We will publish any addition or replacement here at least 30 days before it takes effect, and say so in the app where we can; if you object, you may stop syncing and delete the team before it does. Team data is not transferred outside the UK or the European Union.
5. Requests from individuals. Most requests, to see, correct or delete a child's records, a coach can answer in the app. Where a coach cannot, we will help, and any request that reaches us about a team's data we will pass to that team's coaches promptly.
6. Breaches and your obligations. We will tell the team's coaches without undue delay on becoming aware of a breach affecting the team's data, with what we know and what we are doing, and help you meet your own obligations on security, breach notification and impact assessments.
7. At the end. When the team is deleted from our server, by its last coach, with the last coach's account, or after 18 months unused, its data is deleted, except that our backups last at most seven days and a deleted record's id is kept for 30 days. Every coach's phone holds a full copy of the team, which can be exported at any time; that copy is the return of the data.
8. Demonstrating compliance. We will give you the information needed to show we meet these obligations, including a summary of our data protection impact assessment and our hosts' security certifications, and will allow for and contribute to a proportionate audit by you or an auditor you choose, on reasonable notice and at your cost.

Contact

Questions about these terms: contact@squadpoint.app. About your data: policy@squadpoint.app.