Privacy Policy

Effective [EFFECTIVE DATE]

This policy explains what information Clutch collects, how we use and share it, and the choices you have. It covers the Clutch apps for Android and iOS and clutchteams.com, including the web app (the "Service"). The Service is provided by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we", "us"), which is responsible for your information.

Information we collect

You give us

• Account: your email address and name. If you sign in with Google or Apple, we receive your email and name from them.
• Profile on a team: jersey number, positions, handedness or preferred foot, staff role, photo and phone number, if added by you or a team manager.
• Phone verification: if you verify your number, the number and the fact it's verified.
• Team content: schedules, attendance answers, lineups, stats, awards, duties, fees and dues records, bulletins, chat messages and pictures.
• Calendar links you connect to import a schedule.
• Messages to us when you contact support.

Collected automatically

• Notification tokens for your devices, with their language and time zone, so we can send push notifications.
• Advertising: unless you have an ad-free plan, our advertising partner (Google AdMob) collects device identifiers (such as your advertising ID), IP address and information about ad interactions to show and measure ads. See "Your choices" below.
• Technical information our hosting provider records when your device connects, such as IP address, device and browser type, and request logs, used for security and to keep the Service working.

We don't use analytics or crash-reporting tools in the apps, and we don't collect your precise location, contacts, or photos you haven't chosen to share.

How we use information

• To provide the Service: create your account, run your teams, sync your data between devices, and send the notifications and emails you ask for (invites, schedule changes, chat messages, duties).
• To verify phone numbers, by texting a code.
• To show ads in the free version, and to provide ad-free plans.
• To keep the Service secure, prevent abuse, and fix problems.
• To respond to you, and to meet legal obligations.

Where the law requires a legal basis (for example in the EU or UK), we rely on: performing our contract with you (running the Service); our legitimate interests (security, improving the Service, ads in the free version where permitted); your consent (where required, such as for personalized ads); and legal obligations.

Who sees your information

Your teams

Information you add to a team is shared with that team. Its admins and managers can see the team's information, including members' email addresses and phone numbers. Other members see what the team's privacy settings allow: managers choose whether everyone, the roster and staff, the staff, or only admins can see emails, phone numbers and the team chat. Photos and team logos are shown only to people who can see the team.

Service providers

We use these providers to run the Service. They process information on our behalf, under contract:

• Supabase: hosting, database, sign-in and file storage.
• Google: Google Sign-In; Firebase Cloud Messaging (Android notifications); Gmail (sending invite emails); AdMob (ads); Google Play (purchases).
• Apple: Sign in with Apple, Apple Push Notification service, and App Store purchases.
• GIPHY: GIF search in the chat. Search words go through our server; the GIFs themselves load from GIPHY, which can see your device's IP address.
• [SMS PROVIDER, e.g. Twilio]: texting phone verification codes.
• [WEBSITE HOST, e.g. Cloudflare]: serving clutchteams.com.

Other sharing

We share information if required by law or to protect the rights, safety and security of our users, the public or us; and as part of a merger, acquisition or sale of assets, in which case this policy continues to apply. We don't sell your personal information. [CONFIRM WITH COUNSEL: whether AdMob personalized ads count as "sharing" under California law, and add a "Do Not Sell or Share" option if so.]

Your choices

• Profile and team information: edit it in the app, or ask a team manager. Leave a team from its settings.
• Notifications: choose what you hear about from each team in Team Settings › Notifications, or turn them off on your device.
• Ads: reset or limit your advertising ID in your device settings (Android: Settings › Privacy › Ads; iOS: Settings › Privacy & Security › Tracking). Where required, we ask for your consent before personalized ads. An ad-free plan removes ads entirely.
• Delete your account: email [CONTACT EMAIL] from the address you sign in with. We delete your account and personal details within 30 days. Records you created for a team (such as game stats) may stay with the team without your name.

Your rights

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict some processing, and to withdraw consent. To make a request, email [CONTACT EMAIL]. We'll respond within the time the law requires and may need to confirm your identity. You can also complain to your local data protection authority.

How long we keep it

We keep your information while your account is active. When you delete your account we delete or anonymize your personal information within 30 days, except where we must keep it longer by law or to resolve disputes. Team content stays with the team until its managers delete it or the team is deleted. Server logs are kept for [LOG RETENTION PERIOD].

Security

Information is sent over encrypted connections. Access to each team's data is enforced by our database's access rules, so only the people a team allows can read it; pictures are stored privately. No system is perfectly secure, but we work to protect your information and will tell you about a breach that affects you as the law requires.

International transfers

We and our providers may process information in countries other than where you live, including [COUNTRIES, e.g. the United States and Canada]. Where required, we use safeguards such as standard contractual clauses.

Children

Clutch isn't directed at children under [MINIMUM AGE], and they shouldn't create accounts. A team manager who adds a minor to a team is responsible for having their parent or guardian's permission. If you think a child has given us information without permission, contact us and we'll delete it.

Changes

We may update this policy. If a change is significant, we'll tell you in the app or by email before it takes effect.

Contact

Privacy questions or requests: [CONTACT EMAIL], or write to [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. See also our Terms of Service.