Privacy Policy

1. Information We Collect

We may collect the following categories of information:

2. How We Use Your Information

We use your information for the following purposes:

• To provide, operate, and maintain the Services
• To facilitate team management features (e.g., rosters, scheduling, messaging)
• To send notifications (such as game reminders, payment updates, and team communications)
• To send transactional SMS messages (such as signup phone verification and password reset codes) that you request
• To process transactions through third-party providers
• To respond to support requests and communicate with you
• To monitor, analyze, and improve the performance and functionality of the Services
• To enforce our terms, policies, and legal obligations

Legal Basis for Processing (Applicable under GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it. We typically collect personal information under the following bases:

• Consent: We may rely on your consent to process your personal data (e.g., for sending certain optional communications).
• Contractual Necessity: Processing is necessary to perform our contract with you (e.g., providing the core Services and managing your account).
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided they do not override your fundamental rights (e.g., securing, improving, and analyzing our Services).
• Legal Obligation: We may process your data to comply with legal requirements.

3. How We Share Information

We do not sell your personal information.

We may share information in the following limited circumstances:

• Service Providers: Stripe (payment processing), Supabase (data storage and real-time infrastructure), Twilio (transactional SMS delivery), Resend (transactional email delivery), Apple Inc. (push notification delivery).
• Legal Requirements: If required to do so by law, regulation, or valid legal process.
• Business Transfers: In connection with a merger, sale, financing, or acquisition of all or part of our business.

All third-party service providers are contractually obligated to safeguard your information and process data solely on our behalf.

4. Team Data and Visibility

Content created within a team (including schedules, rosters, messages, and photos) is visible only to members of that team, subject to user roles and permissions.

We do not use team content for advertising purposes and do not disclose such content to unrelated third parties except as necessary to operate the Services.

5. Data Retention

We retain personal information for as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may delete your account at any time through the application. Upon account deletion:

• Personal data is scheduled for deletion
• Data is permanently removed within a reasonable timeframe, generally within 30 days, unless retention is required for legal or operational purposes.

6. Your Rights and Choices

Depending on your location, you may have the right to request access, correction, deletion, or restriction of your data. You may exercise these rights by contacting us using the information in Section 12.

European Economic Area (EEA) and UK Rights (GDPR)

If you reside in the EEA or UK, you possess the following rights regarding your personal data:

• Right of Access: Request access to the data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Request restrictions on how we process your data.
• Right to Data Portability: Request a structured, commonly used electronic copy of your data for transfer to another controller.
• Right to Object: Object to our processing of your data, especially for direct marketing or when relying on legitimate interests.
• Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.
• Right to Make a Complaint: You have the right to lodge a complaint with a supervisory authority regarding our data processing activities.

International Data Transfers: Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ (e.g., to the United States). By consenting to this Privacy Policy, you agree to such transfers. We ensure appropriate safeguards are implemented for such transfers.

California Resident Privacy Rights (CCPA, CPRA, CalOPPA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA) provide you with specific rights regarding your personal information:

• Right to Know and Access: You may request details on the categories and specific pieces of personal information we have collected over the past 12 months, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of your personal information, subject to certain legal exceptions.
• Right to Correct: You may request the correction of any inaccurate personal information we maintain.
• Right to Opt-Out of Sale/Sharing: We do not sell or "share" (as defined by the CCPA/CPRA for cross-context behavioral advertising) your personal information.
• Right to Limit Use of Sensitive Personal Information: We only collect and use sensitive information (e.g., account logins) as strictly necessary to perform our core Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• CalOPPA "Do Not Track" Signals: Currently, our Services do not respond to "Do Not Track" (DNT) signals. Our website and app do not track users across time and third-party websites to provide targeted advertising.

To exercise your rights under GDPR, CCPA/CPRA, or CalOPPA, please email us at info@alignapps.com with the subject line "Privacy Request." We will verify your identity before processing your request.

7. Children's Privacy

The Services are not directed to children under the age of 13 (or under 16 in the EEA/UK where applicable law so requires). We do not knowingly collect personal information from children under 13 (or 16).

If we become aware that such information has been collected, we will take steps to delete it promptly.

8. Security

We implement reasonable administrative, technical, and organizational measures to protect your information. However, no system can be guaranteed to be 100% secure.

9. Data Use Restrictions

ALIGN Sports does not use collected data for:

• Third-party advertising
• Data brokering
• Cross-app or cross-site tracking

Personal information is used solely for providing and improving the Services as described in this Privacy Policy.

10. Platform-Specific Disclosures (Apple & Google)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be effective when posted, and the "Last Updated" date will be revised accordingly.

Your continued use of the Services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us