Privacy Policy

1. The short version

PlayHub stores the least it can: who you are, which teams you belong to, and what happened in your matches. We do not sell data, we do not share it with advertisers or data brokers, and there is no advertising anywhere in the product.

This policy covers PlayHub at app.playhub-os.com, operated by PlayHub OS.

2. What we store

• Your account: your email address, and a display name if you set one. There is no password — signing in uses a link sent to your email.
• Your teams: which teams you belong to and what you are allowed to do in them.
• Rosters: the player names and shirt numbers a coach enters. For youth teams these are usually children.
• Matches: fixtures, the clock, scores, and events like goals, cards and substitutions, with the player each one is attributed to.
• Calendar imports: if a team syncs a club calendar, the fixture information in that feed, and the feed's address so it can be refreshed.
• Payments: whether a team holds a season pass and when it expires. Card details go directly to Stripe and never reach us.
• Messages: what you write to your team, or to the people on it you chose, and what your club sends to every team. We also record when you opened a conversation, which is what lets whoever wrote a message see how many people have read it. That is a count of who has opened it, not where you were or when you were last using the app.
• Usage: anonymous counts of pages viewed and of a few actions — a team being created, a calendar imported, a match started. No cookies, no cross-site tracking, and nothing that identifies you or a player: these are totals, not records of who did what.

We do not collect phone numbers, home addresses, dates of birth, photographs or video.

Voice notes. Where a team turns on voice recording, holding the microphone button sends those few seconds of audio to be transcribed into a match event. We do not keep the recording — only the event it became, the same as if it had been tapped in. The app asks for shirt numbers rather than names, but the audio is whatever was said, so a name spoken aloud is part of what is transcribed. It is off unless a team switches it on.

5. Who else touches your data

We use a small number of services to run PlayHub, and nothing beyond them:

• Supabase — the database, and the sign-in emails.
• Vercel — hosting, and anonymous page-view counts.
• Stripe — payments. They receive your card details; we do not.
• Resend — sends the emails about your team's matches: one when a game kicks off and one with the result. They receive your email address and the text of that message, which names the score and the scorers. Every one has a one-click unsubscribe, and you can switch them off on the team page.
• OpenAI — transcribes voice notes into match events, and writes the optional match summary. Both are off unless a team turns them on. The summary is built from shirt numbers and never contains a player's name when we send it; names are put back afterwards, here.

Each of them acts on our instructions. None of them is permitted to use your information for their own purposes, and we do not sell or rent data to anyone.

6. How long we keep it

Match and roster records are kept while the team exists, because a season's results are the point of keeping them. Deleting a team deletes its matches, its roster and its conversations. Deleting your account removes your profile and memberships. We will delete anything on request as described above.

Voice recordings are not kept at all. The audio is sent for transcription, the words become a match event, and nothing is stored on our side but that event.

7. Security

Data is encrypted in transit and at rest by our hosting providers. Access to a team's data is enforced in the database itself, not only in the app, so a person who is not in your team cannot read it even by asking the server directly. No system is perfect; if we discover a breach affecting you, we will tell you.