OnFieldHQ Privacy Policy

Account information. Name, email address, phone number, password (stored in hashed form by our authentication provider), and profile photo.

Roster and team information. Athlete name, date of birth, jersey number, position, profile photo, emergency contact details, and any medical or allergy notes a coach or guardian chooses to record for safety purposes. Team, season, event, schedule, venue, and scoring data entered by coaches and admins.

Guardian and family relationships. Links between a minor athlete's profile and their parent/guardian account(s), used to route notifications, consent, and account access correctly.

Communications. Team chat messages, photos, files, and reactions sent within the Service; content of in-app notifications; and messages you send to us for support.

Payment information. If your team or organization uses OnFieldHQ's billing or dues-collection features, payments are processed by Stripe. OnFieldHQ does not receive or store full payment card numbers. We store payment metadata such as amount, status, invoice history, and subscription state.

Documents and waivers. Files you upload (e.g., signed waivers, team documents) and related e-signature and timestamp metadata.

Device and usage information. Device type and operating system, app version, push notification tokens, IP address, and basic diagnostic/crash information used to keep the Service reliable.

OnFieldHQ is built for youth sports teams, and many athlete profiles belong to minors. OnFieldHQ is not directed at children for independent, unsupervised sign-up: a minor athlete's profile is created and managed by a parent/guardian or a team/org administrator, not by the minor themselves creating an account on their own.

We provide safeguarding controls intended to reduce a minor's data footprint, including a public-facing name masking mode for scoreboards and public rosters. Medical notes are shown only to the athlete's own team staff, team/org admins, the athlete, and their linked guardians. An athlete's exact date of birth is shown to the same people. Coaches and staff in the organization can also use it in roster tools (finding and importing players). A guardian (or an adult athlete) can choose to share the birthdate with teammates; it is hidden from them by default.

Teams need to be able to reach each other. Everyone on a team (players, including minors, their parents/guardians, and coaches and other staff) can see each other's names, phone numbers and email addresses in the team's directory. The organization's admins and staff can see them too. They're never shown publicly.

If you are a parent or guardian and believe your child has provided us information outside of a guardian- or admin-managed flow, contact us using the details below and we will investigate and, where appropriate, remove it.

We use the information above to:

• Operate core features: rosters, scheduling, RSVPs, live scoring, chat, venues
• Send event reminders, chat notifications, and account/billing emails
• Process dues and subscription payments through Stripe
• Maintain safety records (emergency contacts, medical notes) for coaches/admins
• Secure accounts, prevent abuse, and enforce our terms
• Diagnose crashes and improve the Service

We do not sell your personal information. We share information with the following categories of service providers, solely to operate the Service:

• Supabase — database, authentication, and file storage
• Stripe — payment processing for dues and subscriptions
• Resend — transactional email delivery
• Apple / Google / Expo — push notification delivery to iOS and Android devices
• GIPHY — optional GIF search, only when you use that feature in chat
• Sentry — error reporting for the website, so we can find and fix problems

We may also disclose information if required by law, or to protect the rights, safety, and security of OnFieldHQ, our users, or the public.

Team chat is visible only to the members of that team's organization. OnField's platform administrators can't open your chats through the Service, and reports of chat messages are reviewed by your organization's own staff. Chat is encrypted in transit and at rest but is not end-to-end encrypted, so — as with most team apps — the infrastructure that stores it could technically be accessed by our hosting operator; we don't access it.

You may access, update, or request deletion of your personal information, or a minor athlete's information you are the guardian of, by contacting us at the email below or through your team/organization administrator. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA/CPRA.

Questions about this Privacy Policy or your data? Contact us at privacy@onfieldhq.com.