Privacy policy
Last updated October 23, 2026
TeamRoots helps youth soccer clubs run their teams: schedules, rosters, lineups, messages and fees. This policy explains what we collect, why, who can see it, and how to remove it. Questions go to support@teamroots.app.
- We collect only what the app needs to run your team.
- We don't sell your information, show ads, or use advertising trackers.
- Families see only their own teams. Clubs and coaches see the teams they run.
- Children under 13 get a login only when a parent sets it up and agrees.
- You can delete your account in the app at any time.
What we collect
Account information. Your email address, so we can send sign-in codes, and the name you give us. We don't use passwords.
Team information added by you or your club. Club and team names; players' names, jersey numbers, positions and (if the club adds it) birthdate; which parent goes with which player; and coach and team manager names and the teams they're assigned to.
What you do in the app. Events and their locations, RSVPs and attendance, lineups, tryout notes and ratings, team and private messages, announcements, and fees with whether they're marked paid. We don't process card payments, so we never see card or bank details.
Kept on your device. A player's weekly training plan and hydration reminders stay on their phone and aren't sent to us. The app also keeps your sign-in session on your device.
Technical information. Our service providers keep standard logs, such as IP address, device type and time of request, to run and secure the service.
How we use it
Only to run TeamRoots: to sign you in, show your club its teams, deliver messages and announcements (including by email), and keep the service secure. We don't use it for advertising and we don't sell it.
Who can see it
- Club admins can see everything in their club.
- Coaches and team managers can see the club's rosters and schedules, and manage the teams they're assigned to, including those teams' parents.
- Parents and players see only their own teams' rosters, schedules and RSVPs.
- Players' birthdates are seen only by the club's admins, coaches and team managers, never by other families.
- Team chat is visible to that team's staff, parents and players. Private messages are only between a coach and one family. Club admins can also read them.
- Announcements go to the staff and families of the teams the sender picks, in the app and by email.
Children's privacy
TeamRoots is used by coaches and parents. Players' names and team details are entered by their club or their parent. A child under 13 can have their own login only if their parent sets it up from the parent's account and confirms consent, and we record when consent was given. Anyone joining as a player is asked whether they're 13 or older, and children under 13 who try to join on their own are told to ask a parent. Player logins aren't part of private coach messages.
Parents can review their child's information in the app, except a birthdate the club entered, which we'll send on request. To correct or delete it, or to withdraw consent, email support@teamroots.app. When consent is withdrawn, we remove the child's login.
Service providers
A few companies help us run TeamRoots. They handle information only on our behalf.
- Supabase: database and sign-in, in the United States
- Resend: sends sign-in codes and announcement emails
- Cloudflare: hosts this website and the web app
- Expo: delivers app updates to phones
We may also share information when the law requires it, or to protect our users' safety.
How long we keep it
We keep your information while you or your club use TeamRoots. When you delete your account, your login is removed right away and you're unlinked from your teams. Messages and announcements you sent stay with the team so conversations still make sense. A club can ask us to delete all of its information.
Your choices
- Delete your account: in the app, tap your avatar, open My account, then choose Delete my account.
- Change your name: in My account.
- Get a copy of your information, or correct or delete it: email us and we'll respond within 30 days.
Security
Information travels over encrypted connections, and the database itself enforces who can see what, so people can only read their own club's and teams' information. No system is perfectly secure. If we learn of a breach that affects you, we'll tell you.
Changes to this policy
When we change this policy, we'll update the date at the top. For significant changes, we'll also tell you in the app or by email.