Privacy Policy

Nutmeg is a soccer coaching app. We hold the data coaches and parents enter to run their teams — player names, attendance, match scores, fixture schedules — and not much else. We don't sell data, we don't run ads, we don't track you across other apps or sites. Email nutmeg.sports.app@gmail.com with anything that needs sorting.

When you sign up as a coach:

• Email address (for sign-in and account email)
• Name (so other coaches on a shared team know who's who)
• Push notification token (only if you grant notification permission)

What coaches enter into the app about their teams:

• Player first names, jersey numbers, positions, dates of birth
• Match results, goals, substitutions, awards
• Training and match attendance (parent RSVPs)
• Optional: a guardian's email address to invite them

What the app collects automatically:

• Sign-in timestamps and basic activity logs (debugging)
• iOS app version and platform, when running in the iOS app
• Crash and performance reports if a future build ships with error reporting (none in v1.0)

We do not collect: precise location, contacts, photos beyond optional team logos you upload, browsing history, advertising identifiers.

Nutmeg holds player records, and most players are children. The information stored is what a coach already keeps to run their team: first name, jersey number, age group, attendance, and match stats. Children do not log in to Nutmeg themselves — the app is used by coaches and (optionally) parents/guardians.

Parents who claim a player become the data controller for their child's record and can request deletion at any time. Coaches deleting a player from their roster removes the child's data from active use. Backups are purged on the normal Supabase rotation.

Nutmeg runs on Vercel (hosting + serverless functions, primary region: Sydney, Australia). Data is stored in a Supabase Postgres database in Australia. Authentication is handled by Supabase Auth.

Email is sent through Supabase's default SMTP for transactional auth emails. RSVP reminders, when enabled, go through Resend (in the United States).

Fixture data we sync from your association's competition platform is publicly listed information from that association's website — we don't share your team data back to them.

Only the third parties we already named (Vercel, Supabase, Resend), and only as required for the service to run. We do not sell or rent personal data to anyone, ever. We don't use advertising or analytics SDKs that profile you across other apps.

If we're ever legally compelled to disclose data (a court order or similar), we'll comply with the minimum required and notify the affected user where we're permitted to do so.

• See your data: open the app — most data is visible there. Email us if you need a machine-readable export.
• Correct your data: edit it inside the app, or email us.
• Delete your account: Settings → Delete account inside the app removes your sign-in, your team memberships, and any teams where you were the only coach. Players you owned are removed; players in teams with other coaches stay so the team keeps working.
• Withdraw consent / unsubscribe: turn off notification permission in iOS Settings → Notifications → Nutmeg, or disable email reminders in the app.

For anything else, email nutmeg.sports.app@gmail.com and we'll respond within 30 days.

All traffic is HTTPS. Passwords are hashed by Supabase Auth (we never see them). Database access is restricted via row-level-security policies that scope reads to the team(s) you're a member of. We're a small team; if a security issue is found, contact us at nutmeg.sports.app@gmail.com and we'll respond promptly.

If we materially change how we handle data, we'll update the "Last updated" date and, where it affects you, notify you in-app or by email. Continued use of Nutmeg after a change means you accept the updated policy.

The Nutmeg Coach team — nutmeg.sports.app@gmail.com.