1. Introduction

This Privacy Policy explains how VolleyPad LLC, a New York limited liability company (“VolleyPad,” “we,” “us,” or “our”), collects, uses, and shares information when you use VolleyPad, including the VolleyPad mobile application and the VolleyPad website at volleypad.com (together, the “Service”). By using the Service, you agree to the practices described here.

VolleyPad is designed for volleyball coaches and team staff. The Service is operated from the United States, and information is processed and stored in the United States. If you use the Service from another country, your information is transferred to the United States as described in Section 9.

2. Information We Collect

2.1 Account Information

When you create an account, we collect information you provide directly, such as your name, email address, and avatar image, along with any optional profile or account settings you choose to provide. If you sign in using Google or Apple, we receive basic account information from that provider as permitted by your settings with them.

2.2 Content You Add to the Service

We collect and store the content you create or upload, including team rosters, player and scouting information, scouting reports, notes, and shared-link settings. Some of this content may include information about other people whom you choose to add.

2.3 Usage and Diagnostic Information

We collect technical and diagnostic information generated by your use of the Service, such as server and request logs, device type, operating system version, app version, and error information. The app does not contain third-party analytics or advertising SDKs. This information helps us keep the Service reliable and secure and improve it.

2.4 Activity Logs

The Service maintains an audit log of certain actions taken by members within an organization. Organization administrators may be able to view these logs as part of managing their organization.

2.5 Payment Information

We do not collect government identification numbers, and we do not receive or store full payment card numbers. Subscription payments made in the iOS app are processed by Apple through the App Store; we use RevenueCat to manage and validate in-app subscriptions, and RevenueCat receives purchase-receipt and subscription-status information (not your card details). Subscription payments made on the website are processed by our payment processor, Stripe, which handles your card details under its own terms and security practices. We receive limited information such as subscription status and the last digits or type of card, but not your full card number.

2.6 Cookies and Local Storage

The website and app use cookies, local storage, and similar technologies to keep you signed in, remember your preferences and active organization, and keep the Service secure and working. Some of these are necessary for the Service to function; you can control or clear them through your browser or device settings, but doing so may affect how the Service works. The app itself does not use third-party advertising cookies. Our public marketing pages at volleypad.com may use optional analytics and advertising cookies from Meta, TikTok, and Google that load only if you accept them through the cookie consent banner; they are described in the “Web Analytics & Advertising Cookies” section of the policy posted at volleypad.com/privacy, and they never run inside the signed-in app. We do not currently respond to “Do Not Track” browser signals.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service and your account;
• Enable organization, team, and member features, including roles and permissions;
• Process subscriptions and manage billing through our payment processors;
• Generate and manage shared report links at your direction;
• Maintain audit logs and support account security;
• Understand usage and improve the Service’s features, reliability, and performance;
• Communicate with you about your account, updates, and support requests;
• Detect, prevent, and address technical issues, fraud, or misuse;
• Comply with legal obligations and enforce our Terms of Service.

We may also create and use aggregated or de-identified information that cannot reasonably be used to identify you — for example, overall usage statistics — for any lawful purpose, including operating and improving the Service and sharing or licensing such information to third parties.

4. How We Share Information

We do not sell your personal information. Except for the optional, consent-based marketing cookies described in Section 2.6 — which load only if you accept them and which you can decline — we do not share personal information for cross-context behavioral advertising. We share information only in the following circumstances:

4.1 Within Your Organization

Information you add may be visible to other members of your organization according to their assigned roles and permissions. Administrators may have broad access to organization content, members, and audit logs.

4.2 Shared Links

If you create a shared link to a scouting report, the content of that report may be accessible to anyone who has the link, based on the link’s settings, until the link is revoked.

4.3 Across Organizations

Scouting content is, by its nature, information about other teams and organizations. If the Service offers features that make certain information available across organizations — such as a public organization directory, opponent directories, or shared scouting features — information will be shared as those features describe and as you or your organization configure them.

4.4 Service Providers

We share information with third-party providers that help us operate the Service:

• Supabase — hosting, database, authentication, and file-storage infrastructure, on servers located in the United States (account information, content you add, and usage data);
• Apple — distributes the iOS app and processes in-app subscription payments (Apple Account and payment information, under Apple’s terms);
• RevenueCat — manages and validates in-app subscriptions on our behalf (purchase receipts and subscription status; no card details);
• Stripe — processes website subscription payments (payment details, under Stripe’s terms);
• Google and Apple — provide optional sign-in (basic account information from the provider you choose);
• Our email delivery provider — sends account emails, such as confirmation and password-reset messages, on our behalf (your email address and message content);
• Meta, TikTok, and Google (Analytics and Ads) — provide the optional, consent-based analytics and advertising cookies used only on the public marketing website, as described in Section 2.6 (visit and conversion events; never your account content).

These providers process information on our behalf or under their own terms and are expected to protect it.

4.5 Legal and Safety

We may disclose information if required by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, enforce our Terms, protect our rights or property, protect the safety of users or the public, or investigate fraud or security issues.

4.6 Business Transfers

If the Service or its assets are involved in a transfer, sale, merger, or other business transaction, information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Data Storage and Security

Information is stored using our backend provider, Supabase, on infrastructure located in the United States. We take reasonable technical and organizational measures designed to protect information against unauthorized access, loss, or misuse, and you are responsible for safeguarding your login credentials and the access you grant within your organization.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. To the extent permitted by law, we are not responsible for unauthorized access or other security incidents arising from causes beyond our reasonable control — including incidents originating at or affecting our third-party providers — or from your or your organization’s acts or omissions. If a security incident affecting your information occurs, we will notify affected users and regulators as and when required by applicable law.

You provide information to the Service at your own risk. Our responsibility in connection with any security incident is limited as described in the Terms of Service, including its disclaimers and limitation of liability, and nothing in this Privacy Policy creates any obligation beyond those required by applicable law.

6. Data Retention

We retain account and content information for as long as your account is active or as needed to provide the Service. When you delete your account, or when an organization administrator deletes teams, reports, or your account, we will delete or de-identify the associated information within a reasonable period, except where we are required or permitted to retain it by law (for example, records related to payments or legal obligations). Backup copies may persist for a limited time before being overwritten.

If you had already used your free preview period before deleting your account, we retain a one-way cryptographic hash of your email address in a separate abuse-prevention record after account deletion. This record cannot be reversed to reconstruct your email and is used solely to prevent a deleted-and-recreated account from claiming a second free preview period. It contains no other personal information about you.

7. Information About Other People

If you add information about other people — such as players, team members, or scouting subjects — you are responsible for having any rights, permissions, or consents required by applicable law, and for handling that information lawfully. We process that information on your behalf as part of providing the Service.

Scouting and roster content is, by its nature, often about athletes — including minor athletes — on your own team and on opposing teams, such as jersey numbers, names, positions, and observed play tendencies. This information is entered by coaches and staff, and we process it at the direction of the coach or organization that entered it. Players do not enter roster or scouting content; a player invited by their organization may hold an optional, view-only account used only to sign in and see the reports shared with them. We do not use it for advertising, and we do not sell it. Coaches and organizations are responsible for complying with applicable laws and any school, club, or league policies that apply to recording information about athletes. If you believe information about you or your child has been entered into the Service and you would like it reviewed or removed, contact us at contact@volleypad.com and we will work with the responsible organization to address the request as required by applicable law.

8. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. During account creation, users confirm that they are at least 13 years old, and we rely on that confirmation.

Because the Service may be used by teenagers (ages 13–17), we encourage parents and guardians to be involved in their child’s use of it. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us at contact@volleypad.com, and we will take steps to delete that information and the associated account.

9. Your Choices and Rights

9.1 All Users

You can:

• Access and update your account information within the Service’s account settings;
• Delete your account, which will remove or de-identify associated information as described above;
• Revoke shared links you have created;
• Manage device-level permissions through your device settings;
• Decline (or later clear) the optional marketing cookies on the public website, as described in Section 2.6.

To make any privacy request, contact us at contact@volleypad.com. We will respond as required by applicable law and may need to verify your identity before acting on a request. Where the law allows, you may use an authorized agent to submit a request on your behalf.

9.2 United States State Privacy Rights

Depending on your state (for example, California), you may have the right to request access to, correction of, or deletion of your personal information, to receive a copy of it in a portable format, and not to be discriminated against for exercising those rights. The categories of personal information we collect are described in Section 2, the purposes in Section 3, and the parties we disclose it to in Section 4. We do not sell personal information. We do not share personal information for cross-context behavioral advertising, except that the optional marketing cookies described in Section 2.6 may be considered “sharing” under some state laws — those cookies load only if you accept them, and declining them (or clearing your consent choice) opts you out.

9.3 European Economic Area, United Kingdom, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases: performance of our contract with you (providing the Service you sign up for); our legitimate interests (securing, maintaining, improving, and communicating about the Service); your consent (for example, the optional marketing cookies on the website), which you may withdraw at any time; and compliance with legal obligations.

You have the right to request access to, rectification of, or erasure of your personal data; to restrict or object to its processing; to data portability; and to lodge a complaint with your local data-protection supervisory authority (in the UK, the Information Commissioner’s Office). Your information is transferred to and stored in the United States, which may not provide the same level of data protection as your home jurisdiction; where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses with our service providers.

9.4 Other Regions

If you are in another jurisdiction with an applicable privacy law (for example, Canada or Australia), you may have similar rights to access and correct your personal information. Contact us at contact@volleypad.com and we will respond as required by the law that applies to you.

10. Third-Party Links and Services

The Service relies on third-party services, including Supabase, Stripe, Apple, Google, and RevenueCat, which have their own privacy policies. We encourage you to review the privacy policies of those services. We are not responsible for the privacy practices of third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting a notice in the Service or updating the effective date above. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact Us

If you have questions or requests regarding this Privacy Policy or your information, contact us at:

VolleyPad LLC

Email: contact@volleypad.com

Website: volleypad.com

New York, USA