This policy outlines how RosterUp collects, uses, shares, and protects personal data across iOS, Android, and web platforms. The service complies with the EU General Data Protection Regulation (GDPR) and applicable privacy laws.
1. Overview
RosterUp is a sports team management platform for coaches, players, and teams. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over your information.
2. Personal Data We Collect
Information you provide
- Name
- Email address
- Profile photo(s)
- Team Data (team name, roster, player info, attendance, events, game stats, posts, comments, and messages)
Information collected automatically
- Device and usage data (app version, basic diagnostics, crash logs, action timestamps) for security, fraud prevention, and performance improvement.
We do not sell personal data.
3. How We Use Your Data
- Create and manage accounts and authentication
- Provide core features (Squad Splitter, Live Game, Schedule, Feed & Chat)
- Enable team collaboration and communication
- Maintain security and prevent abuse
- Provide customer support
- Improve app performance and reliability
4. Legal Bases for Processing (GDPR)
- Contract — providing app services
- Legitimate interests — security, fraud prevention, service improvement
- Consent — optional permissions and communications
- Legal obligation — law-required processing
5. Data Processing, Supabase & Lovable Cloud
Processors
- Supabase (Supabase Cloud) — authentication, database, storage, and infrastructure
- Lovable Cloud — cloud platform tooling and service provisioning
Sub-processors
Supabase and Lovable Cloud may use additional sub-processors for infrastructure and hosting, with contractual safeguards in place.
Hosting
- Provider: Lovable Cloud (powered by Supabase)
- Server Region: European Union (Frankfurt, Germany)
- Primary Data Storage: EU (Germany)
6. Sharing Your Data
Data is shared only when necessary with:
- Service providers (Supabase, Lovable Cloud) for app operations
- Team members — your name, profile photo, and team activity visibility depends on role and settings
- Legal entities — when required by lawful requests or to protect rights and security
Data is not shared with third parties for their own marketing purposes.
7. International Data Transfers
Transfers outside the European Economic Area employ Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, with additional safeguards where required.
8. Data Retention
- Account data (name, email, profile photo) is retained during active account status.
- Team data is retained while teams remain active and for legitimate operational purposes.
- Deletion is available upon request unless legal obligations, dispute resolution, or agreement enforcement require retention.
9. Security
The service implements reasonable administrative, technical, and organizational measures for protection, including access controls and encrypted connections. No system is 100% secure, so absolute security cannot be guaranteed.
10. Children’s Privacy
RosterUp is not intended for children under 13 (or higher ages where applicable). The service does not knowingly collect children’s data. Contact office@rosterup.eu if a child’s data was provided.
11. Your GDPR Rights
Users may exercise rights to:
- Access personal data
- Correct inaccurate information
- Delete data
- Restrict or object to processing
- Data portability
- Withdraw consent (where applicable)
To exercise these rights, email office@rosterup.eu with identity verification. You may also lodge a complaint with your local data protection authority.
12. Account Deletion & Data Deletion Requests
You can delete your account directly within app settings or by emailing office@rosterup.eu.
13. Changes to This Policy
Updates occur periodically with effective date changes and appropriate notice provided through the app or website.
14. Contact
Effective Date: 13.03.2026