Privacy Policy
Last updated: May 15, 2026
Formation (“we”, “our”, the “Service”) is a sports team management tool currently in private beta. This page explains what information we collect, how we use it, and how to remove it. If something here is unclear, email kevin@formationsports.app.
What we collect
- Account information. Your name, email address, and (for password accounts) a salted hash of your password. If you sign in with Google or Apple, we receive your name and email from the provider.
- Team and roster data you enter. Teams you create or join, players on those rosters (including children added by a guardian), events, RSVPs, announcements, and chat messages.
- Push notification tokens. Per-device tokens issued by Apple Push Notification service or Firebase Cloud Messaging, used solely to deliver notifications about your teams.
- Operational logs. Standard server logs (timestamp, request path, status code, anonymized IP) and error reports via Sentry. Passwords and authentication tokens are stripped before logging.
What we do not collect
- We do not sell your data, ever.
- We do not run third-party advertising or tracking pixels.
- We do not access your contacts, photos, or device location.
- We do not collect payment information — the beta is free and we are not running Stripe.
Where your data lives
User accounts, teams, events, RSVPs, and messages are stored in a Postgres database hosted by Supabase (US region). Cached session state and notification queues use Upstash Redis. Push notifications are delivered via Apple Push Notification service and Firebase Cloud Messaging. Transactional email (account verification, password reset) is sent via SendGrid.
Public sources we read on your behalf
If you link a team to a BAYS (Boston Area Youth Soccer) team page, we periodically read that team’s publicly-available schedule and results page on bays.org and import the games into your team’s schedule. If you are a BAYS administrator and want us to stop, email the address above and we will remove the link and stop fetching.
Account deletion
You can delete your account at any time from Settings. Deletion immediately removes your account from active use; a background job hard-deletes the underlying records within 30 days. RSVPs and messages you posted to a team remain visible to other team members unless you delete them individually before deleting the account.
Children
Guardians can add a child as a roster profile on a team without giving the child a login. The child’s data consists only of the name, jersey number, position, and RSVP entries the guardian enters. We do not collect any independent contact information for the child. If you are a guardian who wants a child profile removed, email the address above with the team name and child’s name and we will remove it.
Contact
Questions, requests, or complaints: kevin@formationsports.app.