Privacy Policy

1. Data Controller

The controller of your personal data for the operation of TrainTeam is Przemysław Padrak, jednoosobowa działalność gospodarcza, registered at Otwarta 9, 60-185 Skórzewo, Polska, tax ID 6722053457.

Contact for data matters: email contact@trainteam.pl, phone +48 664 736 118.

For data about players, parents, coaches and other club members entered into TrainTeam by a club or sports organisation, that club is the controller. The Service Provider processes that data as a processor under a data processing agreement.

2. Data We Process

We process account and profile data: name, email address, phone number, photo, club roles, team memberships and invitation history.

Player profiles may include sports and organisational data: date of birth, position, height, weight, nationality, licence number, national ID where provided, address, medical exam date, parent-child links, attendance, call-ups, availability decisions, announcements, chat messages and notifications.

For club administrators, we process club data, team settings, billing data, payment identifiers and club fee statuses. For technical reports, we may store report content, device metadata, email address, role and an optional screenshot. In product analytics we process only safe technical metadata such as technical identifiers, role, device type, action status, counts and performance timings - without message bodies, notes, medical data, national IDs, addresses, phone numbers or passwords.

3. Purpose and Legal Basis

We process data to provide TrainTeam, support billing, manage club fees, keep the service secure, improve product quality, defend possible claims and, where consent is required, on the basis of that consent.

4. Children and Guardians

The service may contain data about children and young players registered with teams. Data is entered by the club, parent or legal guardian. Access is limited by roles and by club or team scope. A parent or guardian may exercise the rights described in section 7 on behalf of the child.

5. Recipients and Sub-processors

We use trusted providers:

• Supabase Inc. (USA / EU) - database hosting, authentication and file storage. Data is stored on EU servers.
• Vercel Inc. (USA / EU) - web application and edge server hosting.
• Stripe Payments Europe Ltd (Ireland) - recurring payments for service plans and online club fee payments if the club enables them. Card data never reaches our servers.
• Google LLC (USA / EU) - Google Calendar integration, only if the user enables it, and Google Analytics after analytics consent.
• PostHog Inc. (USA / EU) - product analytics, errors and performance after analytics consent.
• CookieYes Limited (EU / EEA) - cookie consent and privacy preference management.
• Resend, Inc. (USA / EU) - transactional email, invitations and password reset delivery.
• Push notification providers - browser and system push notification delivery.

Transfers outside the European Economic Area are based on European Commission Standard Contractual Clauses and supplementary safeguards.

6. Retention

Account data is kept while the account is active and for up to 12 months after deletion, unless a longer period is required by law, for example for accounting records. Reports, audit logs and technical information may be kept for up to 24 months for security and incident handling.

7. Your Rights

You have the right to access, rectify, delete, restrict processing, transfer data, object to processing and withdraw consent. You also have the right to lodge a complaint with the Polish data protection authority.

Requests concerning club data should first be sent to your club administrator. For matters related to the service, contact contact@trainteam.pl.

8. Security

We use role-based access control, club and team scope limits, database security policies, encryption of sensitive tokens at rest, private attachment storage, API mutation protection, audit logs and abuse-prevention mechanisms.

9. Cookies

Details about cookies used by the service are available in the Cookie Policy.

10. Policy Changes

This Privacy Policy may be updated when new features are added or sub-processors change. The current version is always published on this page, and we notify users in advance about material changes.