Privacy Policy

OffPitchOS is built for soccer teams: the coaching staff and the players on the roster. Every user must be 18 or older. This policy explains exactly what we collect, why, where it lives, and what we will never do with it.

The short version

• We will never sell your data or your players’ data. Not to advertisers, not to data brokers, not to anyone.
• We do not use team or player data to train AI models.
• We only collect what the app needs to do its job.
• You own your data. You can ask us for a copy or delete it at any time.

What we collect

• Account info: name, email, role on the team (for example head coach, coach, or player), and password hash.
• Team data: teams, rosters (including date of birth when the team adds it), schedules, RSVPs, attendance, game stats, feedback and development notes, gear sizes, travel details, and files and photos the staff upload.
• Daily check-ins: how a player rates their sleep, soreness and energy, whether they are fit, limited or out, and any note they add. Only the coaching staff and the player can see it.
• Communications: messages, announcements, replies, and poll votes.
• Device data: IP address and browser type for security; push notification tokens when you opt in.

Where it lives

Data is stored on Supabase (Postgres) in US-based data centers. All connections are encrypted with TLS. Passwords are hashed with bcrypt. Database backups are encrypted at rest.

Who we share it with

Only these service providers, and only what they need to do their job:

• Supabase: database hosting, file storage, and authentication.
• Vercel: web hosting.
• Resend: transactional email delivery.
• Anthropic (Claude): AI features (schedule and roster import, game reports, voice commands, the daily attention panel, the weekly digest, and drill PDF import). Under Anthropic’s commercial API terms, your data is not used to train their models.
• Your browser’s push service: delivers push notifications if you turn them on. It receives the notification text, nothing else.

We will disclose data to law enforcement only when legally required and will notify you unless prohibited.

Voice input

Coaching staff can speak instead of type in two places: voice commands, and dictating feedback on a player’s profile. The microphone is used only after you tap the mic button, and it stops when you tap stop.

Your browser turns the speech into text, not OffPitchOS. Chrome sends the audio to Google to do this, and Safari sends it to Apple. Their privacy policies cover that audio. OffPitchOS never receives or stores the audio, only the text.

For a voice command, we send the text to Anthropic (Claude) together with your team names, venues and the next two weeks of your schedule, so it can work out what you asked for. We don’t keep the text; only the change you confirm (for example, a moved practice or a posted announcement) is saved. Dictated feedback is saved as the note itself, the same as if you had typed it, and is not sent to Anthropic.

Users under 18

OffPitchOS is for adults only and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe someone under 18 is on a team or has given us information, email us.

Your rights

You can at any time:

• Get a copy of your data: email us at privacy@offpitchos.com and we’ll send your data within 30 days.
• Request correction of inaccurate data.
• Request full deletion of your account and associated data within 30 days.
• Turn push notifications on or off for each device from the notifications menu.

If you are in the EU, UK, or California, you have additional rights under GDPR / CCPA, including the right to know, the right to delete, and the right to non-discrimination. Email us to exercise any of these rights.

Data retention

We keep data for as long as your account is active. When you delete your account, personal data is removed within 30 days, except where we are legally required to retain it.

Cookies

We use only the cookies the app needs to work. No analytics, advertising, or tracking cookies.

• Sign-in session (sb-…-auth-token, set by Supabase Auth): keeps you signed in. Removed when you sign out.
• offpitchos_access: set when you enter an early-access code, so you can create an account without typing the code again. It holds a signed timestamp, nothing about you, and expires after 30 days.
• viewAsRole: used only by a team’s head coach. It remembers which view (for example, the player view) they picked in the “View as” switcher. It expires after 24 hours.

The app also saves two small flags in your browser’s local storage so it stops showing the “install the app” and “turn on notifications” prompts after you dismiss them. They never leave your device.

Changes to this policy

If we make material changes, we will notify account admins by email at least 14 days before the changes take effect.

Contact

Questions, data requests, or concerns: privacy@offpitchos.com