FirstTeamHQ

Platform Privacy Policy

Last updated: August 12, 2026

1. The short version

Clubs use the Platform to run their operations, and that means families entrust it with real information about real kids. We treat that as the most sensitive data we hold: we use it only to run the club’s program, we never sell it, we never use it for advertising, and clubs can take it with them or delete it.

2. What we collect

  • Account data — name, email, password (stored hashed), language preference.
  • Player data entered by clubs and parents — player name, birth year, emergency contact, medical notes provided at registration, team placement, attendance, evaluations, development notes, and (if a family chooses) photos and highlight videos.
  • Payment records — what was owed and paid. Card numbers go directly to our payment processor and never touch our servers.
  • Technical basics — logs and device tokens for push notifications you enable.

3. Children’s data

Player profiles exist because a parent or guardian registered the child with their club, or the club entered its roster. Children under 13 do not create their own accounts; their information is provided and controlled by a parent, guardian, or club official acting with parental consent (COPPA-style consent is collected by the club at registration, including a separate photo/media consent). Parents can review their child’s information in the app, and can ask their club — or us directly — to correct or delete it.

4. Who can see what

  • Families see their own children’s information and their team’s schedule.
  • Club staff see the players they coach or administer, within their club only.
  • Medical notes and emergency contacts are visible to club staff only — never to other families.
  • A player’s recruiting profile is visible outside the app only via a share link the family controls and can disable.
  • No club can ever see another club’s data.

5. Who we share with

Only the vendors it takes to run the service — hosting, database, email delivery, push notifications, and payment processing — each bound to use the data solely to provide their service to us. We do not sell personal data, run ads, or share data with brokers. We disclose data only if the law requires it.

6. Retention and deletion

Data lives as long as the club’s account does. Clubs can remove members (which deletes their club records), and clubs can export everything to CSV. If a club leaves the Platform, its data is deleted on request. To exercise any right, contact your club or support@sodacityfc.app.

7. Security

All traffic is encrypted in transit; the database is encrypted at rest; access is role-scoped per club. No system is perfect — if we ever learn of a breach affecting your data, we will notify affected clubs promptly.

8. Contact

Privacy questions or requests: support@sodacityfc.app.