Privacy Policy

Version 2.1 · November 2026

Who is responsible

SportNex is operated by Uliana Belli, a natural person. Contact for privacy questions: office@sportnex.app. We act in two roles. For the data of a club (children, schedules, attendance, chats, invoices, documents) the club is the controller and Uliana Belli processes the data on its behalf, under an agreement with the club. For the accounts of users, security, help requests and the improvement of the service Uliana Belli is the controller. If you have a question about how your club uses data, ask the club first.

What data we process

Parents and other users: name, e-mail, password (stored only in a protected form), language, notification settings. Children: name, date of birth, team, shirt number and position, attendance, goals, assists and cards, notes and badges from coaches, and a photo only if one is added. Payments: invoices and receipts; the app stores only the invoice and the note that the club marked it as paid — no card or bank credentials are entered in the app. Messages: team chats and direct chats, with photos and links. Documents: files and links that coaches or the club add for a team. Help: the questions you type into the help assistant and the reports you send us. Technical: device type, app version, language and error reports. We do not collect precise location, and we do not ask for health data.

Why we use it and on what basis

To provide the service you or your club asked for: schedule, replies, lineups, scores, chat, notifications, invoices (performance of a contract, Article 6(1)(b) GDPR). To keep the service secure, prevent abuse, give help and fix errors (our legitimate interest, Article 6(1)(f)). To keep accounting records (legal obligation, Article 6(1)(c)). For photos of children and other optional features, only with the consent you give, which you can withdraw at any time (Article 6(1)(a)). The club has its own legal basis for the data it manages in the app.

Health data and sensitive content

Please do not write health information (injuries, diagnoses, medicines) in notes, chats or file names. Information about health is a special category of data (Article 9). If a club needs medical certificates or similar forms, it may upload them to team documents only when it has a legal basis and the permission of the parent, and it chooses who can see them. We treat all uploaded documents as confidential, they are not public and are opened only through short-lived links.

Photos and documents

A profile photo is added by the parent. Coaches and the club may add photos of training, matches and events; before doing so the club must have the permission of the parents of the children who can be recognised. The photo setting of a child’s profile records the consent. Photos and documents are visible only to the audience chosen when they are added (for example the team’s parents). You can ask the club or us to remove a photo or a document at any time.

Who sees the data

Coaches, team managers and administrators of your child’s team see the child’s profile, attendance and notes. Other parents of the same team see a child’s first name and initial in lineups and, if they have not switched it off in Profile, can send you a private message. Administrators of your club see invoices and payments of the club. An accountant invited by the club sees the club’s invoices and payments, including the names and e-mail addresses of the invoiced parents, and can download them, but nothing else. A young athlete aged 13 or older who has been given an own account by a parent sees only their own data. We do not sell data and we do not use it for advertising.

Service providers and transfers

Providers process data on our instructions: Supabase (database, sign-in and file storage, hosted in the European Union); Cloudflare (hosting and delivery of the website and web app, and the Turnstile check that protects sign-in and sign-up from bots; it processes technical data such as the IP address and browser signals); Resend (delivery of account e-mails and of messages sent through the contact form on the website); Telegram (service notices to the owner of SportNex: names of newly registered clubs, security warnings and contact-form requests; no data of children); Expo, Apple and Google (delivery of push notifications, when switched on). If the help assistant is switched on in your club’s version, the question you type is processed by Anthropic (United States) to produce an answer; we do not send names, children’s data or invoices to it. Where data leaves the European Economic Area we rely on the European Commission’s standard contractual clauses or an adequacy decision. The current list of providers is available at office@sportnex.app.

Contact form on the website

When you write to us through the form on sportnex.app, we use your name, e-mail, club and message only to answer you and, if you wish, to prepare a pilot or an offer for your club (steps before a contract and our legitimate interest, Article 6(1)(b) and (f) GDPR). The request is delivered to us through Resend and Telegram and kept for up to 12 months. You can ask us to delete it at any time.

How long we keep it

Account data: until you delete the account or the club removes the profile. Data of a club: while the club uses the service; after it leaves, it can export its data, which is then deleted within 30 days. Paid invoices and receipts are kept without your name for the period set by accounting law, currently up to five years; when a club marks payments from a bank statement, we keep only the amount, date and bank reference of the matched payment, not the statement. Help questions: up to 12 months. Activity log of a club: up to 24 months. Error reports and the security log: up to 90 days. Requests sent through the contact form on the website: up to 12 months, unless they lead to an agreement with a club. Backup copies of the database are kept encrypted for up to 30 days, so deleted data also disappears from backups within that time.

Your rights

You can ask to see, correct, restrict, export and delete your data, and object to processing. In the app: Profile → Delete account; on a child’s page → download all data (a machine-readable file) or delete the profile. You can withdraw consent at any time, which does not affect earlier processing. We answer within one month and may ask you to confirm your identity. You may complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or to the authority of your country.

Children and young people

The app is for parents, coaches and club staff. Data of children is entered by their parents or by the club. Children under 13 never have an account. A young athlete aged 13 or older can have an own account only if a parent invites them for their own child; the parent can withdraw this access at any time. We do not direct marketing at children.

Security and incidents

Data is encrypted in transit and stored with encryption by our infrastructure providers. Access rules separate clubs, teams and families, passwords are stored only as protected hashes, and we cannot see them. No system is perfectly secure. If a personal data breach occurs, we notify the clubs concerned without delay and, where the law requires, the Data State Inspectorate within 72 hours and the people affected. Report any problem through Profile → Help and feedback.

Automated decisions, cookies and device storage

We do not use automated decision-making or profiling that has legal effects on you. We do not use advertising or analytics cookies and do not track you across websites. The app stores on your device only what it needs to work: your sign-in session, language and a few display settings (for example the last chosen tab). The sign-in, sign-up and password-reset pages use Cloudflare Turnstile to check that you are not a bot; it is strictly necessary for security. Because all of this is strictly necessary for the service you asked for, no consent banner is shown. The public website sportnex.app uses no cookies, loads its fonts from our own server and has no advertising or tracking.

Changes

We may update this policy. The version and date are shown at the top; important changes are shown in the app before they apply and earlier versions are available on request.