Privacy Policy

Game Day Board helps coaches plan a youth team's lineups, and lets parents follow the team. This page explains what personal information it holds, why, who else handles it, how long it is kept, and what you can do about it.

Who we are. Game Day Board is run by Iain Bruce, an individual developer ("we", "us"). For your account and the other information described below, we decide how and why it is used, which makes us the "controller" under data protection law. For what a coach types in about their team (players, lineups, notes), the coach, or the club they coach for, decides what to enter and why, and we handle it for them to run the service. You can reach us at gamedayboard@gmail.com.

1. Information We Collect

When you sign in with Google or Sign in with Apple, we receive:

• Your email address. If you choose "Hide My Email" with Apple, this is Apple's private relay address, and it stays your email address in Game Day Board.
• Your display name, if the provider gives one
• Your profile photo (Google, if provided). It is shown to you in the menu; we do not copy it into our own records.

We keep a small record of your account: your name, email address, and when you last signed in. We do not collect passwords. Authentication is handled by Google or Apple.

We also store what you enter: teams, seasons, rosters (player names, shirt numbers, positions and ratings), game lineups, goals and notes, and the email addresses of coaches you invite. If you turn on lineup notifications, we store a push token for each of your devices. If you send feedback, we keep the message and your email address.

If you follow a team as a parent or guardian, we also keep which team you follow, the child or children you say are yours, any replies you give about them (see section 4), and, if you allow notifications, a push token for each of your devices. If a coach connects an AI app (see section 5), we keep a record of the connection: the app's name and address, what it was allowed to do, when it was last used, and a count of its requests each day.

Our servers, and the companies that run them (section 3), handle ordinary technical information when you use the service, such as your IP address, the type of device or browser, and the time of each request. We use it to keep the service working and to limit abuse (for example, to slow down someone guessing team codes). We do not use it to build a profile of you.

The apps for Android and iOS do not collect usage or analytics data. On the website, we use Vercel Web Analytics to count page views. It does not use cookies and does not identify you.

2. How We Use Your Information, and Why We May

We use it only for these purposes. Where the law of the UK or the EU applies, the reason we are allowed to is shown beside each one (the "legal basis").

• Authenticate your account and keep your session secure, and associate your data (teams, rosters, seasons, lineups) with your account so you can use it across sessions and devices. Basis: it is needed to give you the service you asked for (contract).
• Share team access with assistant coaches by email address, and show parents their team's games and lineups and pass their replies to the coaches. Basis: contract, and the legitimate interest of a team in running its fixtures.
• Notify you when another coach changes a lineup, when a lineup is published, or to ask for a reply, if you have allowed notifications. Basis: your consent, which you give in your device's settings and can withdraw there at any time.
• Keep the service secure and working: limit abuse, fix faults, answer your feedback, count website page views. Basis: our legitimate interest in a safe, working service, which does not override your rights because the information is limited and used for nothing else.
• Meet legal requirements and respond to lawful requests. Basis: legal obligation.

We do not use your information for marketing, advertising, or profiling purposes of any kind, we do not make decisions about you by automated means, and we do not track you across other companies' apps or websites.

3. Who Handles Your Data

We do not sell or rent your personal information, we do not share it for advertising, and we do not trade it. We use a small number of service providers to run Game Day Board, and they process data on our behalf only for the purposes below:

• Google (Firebase and Google Cloud): sign-in, database storage of everything above, and push notifications.
• Apple: Sign in with Apple, and push notifications to iPhones.
• Vercel: hosts the website and the server functions the apps call, and provides the website's page-view analytics.
• Google Gemini: when you import a roster or schedule by pasting text or taking a photo, that text or photo is sent to Gemini to read it. It is sent only when you submit it, and is not stored by us. Google handles it under the terms for its Gemini API.

Coaches you invite can see the team's players, seasons and games, and your name as a coach. Parent links are public to anyone who has the link: they show first names with a last initial, shirt numbers and the lineup, and no playing-time figures. We may also disclose information where the law requires it.

A coach who connects an AI app (Claude, ChatGPT or Gemini) sends it information at their request, as described in section 5. Those companies are not our service providers: what they do with it is governed by their own privacy policies.

4. Parents and Guardians

A coach can share a link or a short code so that parents can follow the team. A parent signs in with Google or Apple and becomes an account holder, linked to the team and to each child they say is theirs. They are never made a coach.

What a parent can see.

• The team's games and the lineups the coach has published, with results.
• Players by first name and last initial and shirt number, and, if the coach shows highlights, who scored, the captain and the player of the game.
• Their own children's replies, and any mark a coach made for them.

A parent never sees a coach's ratings of players, positions a player does not play, playing-time figures, season totals of playing time, the coaches' email addresses, or other families' replies.

What the coaches see about a parent. The coaches on the team can see which parents follow it: their name and email address, and which child they picked.

Attendance replies. A parent can answer "Going" or "Can't make it" for their child at a game or training session, and add a short note (up to 280 characters) when they can't. A reply records the answer, the parent's first name and email address, and the time. The coaches on the team see replies and notes. Notes are for the coaches only: they are never shown to other parents and never appear on a public link. A child marked as not going is left out of the lineup the parents' page shows.

Notifications. If a parent allows notifications, we send push notifications about their child's games: when a lineup is published or their child's place changes, and a reminder to reply if the coach has turned reminders on. We store a push token for each device for this, and nothing else. Notifications can be turned off in the device's settings.

Removing a parent. A coach can remove a parent from the team, and can change the team's code so the old one stops working. Removing a parent deletes their membership of the team and their claims on its children, and they are told the next time they open the app. A parent can also leave a team themselves ("Leave this team", at the foot of their view), which does the same, and makes the replies they gave on that team anonymous.

Deleting a parent's account. Delete account (menu ☰) removes the parent's sign-in and profile, their memberships of teams, their claims on children and their notification settings, and, if they signed in with Apple, tells Apple to end the link. Replies a parent has already given stay in the team's attendance record, as a record of who was going, without their name, email address or note.

5. Connecting an AI App

A coach can connect an AI app they choose (Claude, ChatGPT or Gemini) to their Game Day Board account. Nothing is connected unless the coach signs in and presses Allow. Once connected, the app can read what the coach can see in Game Day Board: their teams, players (names, shirt numbers, positions and the ratings the coach gave them), games, lineups, goals and playing time. If the coach allows each part on the Allow screen, it can also change the match (the clock, goals, the captain and the player of the game), add games and players, and publish a game's parents' link. It acts only when the coach asks it to.

What the app does with that information, and how long it keeps it, is governed by that app's own privacy policy, which the coach agrees to with them, not with us. We cannot see or control the conversation. Game Day Board records which app made each request and when, never the content of the conversation, and keeps the connection as a secure token that is stored only as a hash and expires. A coach can disconnect any app at any time in the menu (☰ › Connected apps); it loses access at once, and deleting the account disconnects every app. Anything an AI app publishes appears as a parents' link with the same short names (first name and last initial) as one the coach publishes. We do not use connected-app activity for advertising or profiling. A parent can also connect an AI app to see their own child's games and lineups and to reply for them; it can see only what the parent's own view shows.

6. Where It Is Stored, and Moving It Abroad

Your data is stored using Google Firebase, part of Google Cloud infrastructure, with encryption in transit (TLS) and at rest. Access to it is governed by security rules that restrict reads and writes to the signed-in coaches of each team, and parents see a team only through our server, which applies the limits in section 4.

Google, Vercel and Apple are companies based in the United States, and they may process information there and in other countries. If you are in the UK, the EU or the EEA, that is a transfer of your information outside your region. We rely on the safeguards these providers offer: the UK–US and EU–US data bridges where the provider is certified, and otherwise the standard contractual clauses approved by the EU and the UK, which are part of their data-processing terms. You can ask us for more detail.

No system is perfectly secure. If a breach puts your information at risk, we will tell you and the regulator where the law requires it.

7. How Long We Keep It

• Your account, teams and everything on them: until you delete the account or the team. A coach can delete a game, a season or a team at any time; deleting a team also removes its parent links, parents' memberships and replies.
• A player who has left the team stays on the team's old games, so those games still read correctly, until the coach deletes the player and their history.
• After you delete your account: what section 8 lists is removed from our live database straight away. Copies in Google's own backup and disaster-recovery systems are overwritten on Google's schedule, which Google states takes up to about six months at most. We keep no separate backups of our own, and we do not restore a deleted account.
• Attendance replies: kept without a name, email address or note after the parent leaves or deletes their account, for as long as the team keeps that game.
• Feedback you send: the message and your email address, until you ask us to delete them.
• AI app connections: the token expires and is removed with the connection; the daily request count is short-lived.
• Server and analytics records: kept by Vercel and Google for the short periods their services set, and only as long as needed to run and secure the service.
• A parents' link stays readable until the coach deletes the game or the team.
• Your name on a team you left: a team's records can still show the name of the coach who last saved a lineup, or logged a goal, after that coach leaves.

8. Your Rights and Deleting Your Account

Wherever you live you can ask what we hold about you, ask us to correct it, and ask us to delete it. In the UK, the EU and the EEA the law also gives you the right to restrict or object to how it is used, to receive a copy in a common format, and to withdraw consent you gave (notifications are switched off in your device's settings). If you live in California or another US state with a privacy law, you have the rights to know, delete, correct, and to opt out of the sale or sharing of your information. We do not sell or share it, so there is nothing to opt out of, and we do not treat you differently for asking.

To delete your account in the app, open the menu (☰) and choose Delete account. This permanently deletes your sign-in and profile, the teams you own with their players, seasons, games and parent links, and your notification settings. You are removed from teams you were invited to; their lineups stay with their head coach. If you signed in with Apple, we also tell Apple to end the link. If you are the head coach of a team that other coaches are on, remove them or delete the team first. It also disconnects any AI apps you connected and removes your parent memberships and claims (section 4). Feedback you sent is not part of this: ask us by email to delete it.

You can also ask us to do any of this by email, at the address in section 11. If you ask on behalf of someone else, or for a child, we may ask for proof that you may. We will answer within one month (30 days), and tell you if we need longer, which the law allows for a complicated request.

If you are unhappy, please tell us first and we will try to put it right. You also have the right to complain to the data protection regulator where you live. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU, the authority of your country. In California you can contact the California Privacy Protection Agency or the Attorney General.

9. Children's Privacy

Game Day Board is for adults: coaches and team administrators, and parents or guardians. Children do not have accounts, and the service is not directed to children. A coach enters a player's name and shirt number on their roster, and parents see each child by first name and last initial only. We do not knowingly collect personal information from children themselves, and we do not knowingly allow anyone under 13 (or under the age set by local law, which is higher in some countries) to create an account. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

A parent or guardian of a child named on a team can ask us to show what we hold about their child, or to remove it, by email. The coach who entered the child is the person who can correct it in the app, and we will ask them to, or do it ourselves where they do not.

10. Cookies, Storage and Do Not Track

We do not use advertising or tracking cookies. To work, the website and the apps keep your sign-in and any unsaved lineup on your own device, in the browser's or the app's storage. That is needed for the service you asked for, and you can clear it in your device or browser settings (you will be signed out). Our website does not track you across other sites, so it has nothing to switch off for a "Do Not Track" or Global Privacy Control signal, and it treats every visitor the same.

11. Contact Us, and Changes to This Policy

For any question about this policy, or to ask for access to, correction of, or deletion of your data, write to Iain Bruce at:

gamedayboard@gmail.com

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date, and we will tell signed-in users in the app if a change matters to them. Our Terms of Use and help page are also public.