Privacy Policy

TeamHQ ("we", "us") is a team-management service for youth sports: schedules, RSVPs, rosters, messaging, volunteer coordination, and dues. This policy explains what we collect, why, and the choices you have. The short version: we collect what the product needs to work, we don't sell it, and you can delete it.

Information we collect

• Account information. Name, email address, optional phone number, and a password (stored as a salted hash by our authentication provider — we never see it).
• Team and household data you enter. Team names, schedules, rosters, RSVPs, messages and attachments, volunteer signups, emergency contacts, and invoices/dues records.
• Children's information. Player profiles (name, birth year, jersey number) are created and managed by a parent, guardian, or team staff member — children under 13 cannot create accounts. Athletes 13 and older may be given their own sign-in by their household; athlete accounts cannot see billing information.
• Payment information. Payments are processed by Stripe. Card numbers go directly to Stripe and never touch our servers; we store only payment status, amounts, and Stripe's reference IDs.
• Technical basics. IP address and user agent for rate limiting, abuse prevention, and a security audit log of sensitive account actions (signup, account deletion).

How we use it

• To run the service: showing schedules, delivering messages, tracking RSVPs and dues.
• To secure the service: rate limiting, abuse and bot prevention, audit logging.
• To answer questions you ask the built-in assistant ("Ask TeamHQ"). Assistant questions are processed by Anthropic's Claude API with read-only access scoped to your own teams; assistant conversations are not used to train AI models.

We do not sell your data, show ads, or share your information with third parties except the service providers below.

Service providers

• Supabase — database, authentication, and file storage.
• Stripe — payment processing and team payout accounts.
• Vercel — web hosting.
• Upstash — rate limiting.
• Anthropic — AI assistant responses.
• Cloudflare Turnstile — bot protection on signup.

Sharing within your teams

TeamHQ is a team tool, so some information is visible to your teammates by design: names, jersey numbers, RSVPs, and messages you post. You control whether your email and phone number are shared with teammates from your account settings; coaches and team admins can always see contact details for the families on their roster. Emergency contact details are visible only to your own household and your team's staff.

Data retention & deletion

Your data is kept while your account is active. You can delete your account at any time from the app or website (Account → Delete account). If you are the last adult in your household, this deletes the entire household — including player profiles, RSVPs, messages, and invoices. Deletion is immediate and permanent. You can also email rltw.dev@gmail.com to request deletion or a copy of your data.

Security

All traffic is encrypted in transit (TLS). Database access is enforced row-by-row so signed-in users can only read and write data for their own teams and household. Sensitive operations are rate-limited and logged.

Changes

If we make material changes to this policy we'll update the date above and note the change on this page.

Contact

Questions? Email rltw.dev@gmail.com.