PRIVACY POLICY

Skipper is team management software for youth sports organizations. This policy explains what we collect, why, and who can see it. It is written to be read by parents, not lawyers.

Who controls your data

Your sports organization (for example, Fulton Sting Youth Athletics) decides what to collect and who on their staff can see it. Skipper provides the software and stores the data on their behalf. If you want something changed or deleted, your organization is the fastest route — but you can contact us directly too.

What we collect

Account information

• Name, email address, and phone number
• Your role (coach, parent, player) and which teams you belong to
• How you prefer to be contacted

Player information

Provided by a parent, guardian, or coaching staff:

• Name, date of birth, grade, school, and city
• Uniform sizes, positions, jersey number, and roster history
• Emergency contact name and phone number
• Medical information a coach may need on the field — allergies, conditions, medications, and whether the player carries an EpiPen or inhaler
• Statistics, training activity, and awards

How the app is used

• Which screens are opened and which features are used, recorded as event names and record identifiers — never the contents of a form, never keystrokes
• How long the app is actively on screen. This counts only time the app is visible and in use; a tab left open is not counted
• The type of device and browser

This is used to understand what is working, to know who may need a reminder, and to fix problems. It is kept for 90 days and then deleted automatically.

Notifications

If you turn on notifications, your browser gives us an address that lets us send a message to that specific device. It contains no personal information and we delete it when you turn notifications off.

Children

This is a youth sports app, so most of the players are minors.

• Information about a player is normally entered by a parent, guardian, or coach — not by the child.
• A player under 13 can only have their own login if a parent or guardian is already linked to them in the app. In practice, a parent sets it up. A child cannot create an unaccompanied account.
• When a parent creates or links a child's account, we record that consent with a timestamp and the version of this policy they agreed to.
• A parent or guardian can ask to see, correct, or delete their child's information at any time, and can withdraw consent — contact your organization or us.

Who can see your information

• Your organization's coaching staff — roster, contact, medical, and emergency information for the teams they run.
• You — your own account, and the players you are linked to.
• Other families — only limited roster information, such as a player's name and jersey number. Never medical or contact details.

Another organization's staff can never see your data. Access is enforced by the database itself, not just by what the app chooses to display.

Messages

Skipper's messaging is built for a team, not for private, unmonitored conversation, and three things about it are worth stating plainly.

• Message content is not end-to-end encrypted. It is encrypted in transit and at rest, and the app's own access rules mean your own organization's admin cannot read a private conversation between two other adults — but the data itself is not scrambled with a key that only the sender and recipient hold. Someone with direct access to the underlying database, which in practice means Skipper as the company operating it, could read message content if needed. This is a deliberate trade, not an oversight: coaching staff being able to review a team channel, or a conversation that includes a child, is a safeguarding feature this app is built around, and true end-to-end encryption would make that impossible.
• A push notification can show up to 140 characters of a message on your lock screen, and that preview passes through Apple's, Google's, or Mozilla's notification service on its way to your device. It is the least private moment in a message's life, and also what makes the notification useful without opening the app. You can turn notifications off per device any time in Settings.
• Deleting ("retracting") a message removes it from the conversation but does not erase it from our records. This is deliberate: a sender should not be able to make it look like a message was never sent to someone who already read it, and a message that was reported before it was retracted has to stay reviewable.

What stays private within the app: nobody outside a conversation — including staff at your own organization who are not part of it — can read it, and an organization can never see another organization's messages. Nobody, including the sender, can edit what a message says after it is sent; retracting it is the only change allowed.

Companies that process data for us

• Supabase — database and application hosting
• Netlify — website hosting
• Stripe — payment processing, if your organization collects dues or runs a store. Card details go directly to Stripe and never touch Skipper.
• Printful — printing and shipping, if you order merchandise
• Apple, Google, and Mozilla — delivering notifications to your device

We do not use advertising networks or third-party analytics services. Activity data stays in our own database.

Cookies

Skipper does not use advertising or tracking cookies. To keep you signed in, the app stores a session in your browser's local storage, and it keeps a random per-tab identifier that is discarded when you close the tab. Neither is shared with anyone else or used to follow you across other websites.

How long we keep things

• Usage and screen-time records: 90 days, then deleted automatically
• Roster, statistics, and team history: kept while your organization uses Skipper, because past seasons are part of the record
• Account information: until the account is deleted

Your choices

• Turn notifications off, per device, in Settings
• Choose which kinds of reminders you receive, set quiet hours, or pause reminders entirely
• Correct your own contact details and your player's information
• Ask for a copy of your information, or ask us to delete it

Security

Data is encrypted in transit. Access rules are enforced in the database, so a bug in the app cannot expose another team's records. Medical and emergency information requires an approved link between an account and a player.

Changes

If we change this policy in a way that matters, we will ask you to agree to the new version the next time you sign in, and we record which version you agreed to.

Contact

Questions, corrections, or deletion requests: contact your organization's administrator, or Skipper at support@getskipper.app.