Privacy Policy

Dugout FC (“we”, “us”, “our”) is a soccer club management platform. Our platform is available at dugoutfc.app and through our iOS mobile application.

You can contact us at info@dugoutfc.com.

We collect the following categories of personal data:

• Account data: name, email address, and password (or OAuth tokens if you sign in with Google or Apple).
• Profile data: profile photo, role within your club (coach, parent, player).
• Club and team data: club name, logo, brand colours, team names, age groups, and season information you enter during setup.
• Player data: player names, jersey numbers, positions, and date of birth entered by coaches or parents.
• Event data: schedules, locations, RSVP responses, lineups, and match notes.
• Communications: messages sent through the in-app chat and announcements.
• Device data: push notification tokens to deliver notifications to your device.
• Usage data: anonymised analytics via PostHog to help us improve the product.

We use your data solely to provide and improve the Dugout FC service:

• To create and manage your account and club.
• To display schedules, rosters, and availability to the correct team members.
• To send push notifications about events, RSVPs, and messages.
• To send transactional emails (invite emails, schedule confirmations) via Resend.
• To power AI features (schedule import, roster import, lineup suggestions) using the Anthropic Claude API. Your data is sent to Anthropic only to fulfil your specific request and is not used to train their models.
• To generate anonymised analytics that help us understand how the product is used.

We do not sell your data to third parties. We do not use your data for advertising.

Your data is shared only with the following third-party services, each necessary to operate the platform:

• Supabase — database, authentication, file storage, and real-time messaging. Data is stored in the US (East region).
• Anthropic — powers our AI features. Data sent is limited to the specific content you upload (roster file, schedule, lineup). See Anthropic's privacy policy.
• Resend — transactional email delivery for invites and notifications.
• Expo / Apple — push notification delivery via the Apple Push Notification Service (APNs).
• PostHog — anonymised product analytics. No personal identifiers are sent.

Within the platform, data is scoped strictly to your club. Coaches see their team's data only. Parents see their child's team only. No data is ever visible across clubs.

We retain your personal data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days. Club and team data may be retained in anonymised form for analytics purposes.

You can request deletion of your account and data at any time by emailing info@dugoutfc.com or using the Delete Account option in the app settings.

Our platform is designed for use by coaches and parents. We do not knowingly collect personal data directly from children under 13. Player roster entries (name, jersey number, position) are entered by coaches or parents, not by the players themselves.

If you believe we have inadvertently collected personal data from a child under 13, please contact us immediately at info@dugoutfc.com.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent at any time (this will not affect the lawfulness of prior processing).

To exercise any of these rights, email info@dugoutfc.com. We will respond within 30 days.

We take security seriously. All data is encrypted in transit (TLS) and at rest. Access to your club data is enforced at the database level using row-level security — it is architecturally impossible for one club's data to be accessed by another club. We use Supabase Auth for authentication, which follows industry best practices including bcrypt password hashing and secure OAuth flows.

Our mobile app does not use cookies. Our website (dugoutfc.app) uses only essential cookies required for authentication and session management. We use PostHog for anonymised analytics, which may set a cookie to track sessions. You can opt out of analytics tracking by contacting us.

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. The date at the top of this page reflects the most recent update. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this privacy policy or how we handle your data, please contact:

Dugout FC
info@dugoutfc.com