Privacy
Privacy Notice
This Notice explains what Sportual processes, why, who receives it, how long it is kept, and the choices available to users, guardians, and organization members.
Last updated and effective September 10, 2026
1. Who is responsible
Sublime Software LLC, doing business as Sportual, is responsible for personal data used to operate Sportual accounts, platform security, support, product administration, and our own analytics. Contact: support@sportualapp.com; Gilbert, Arizona 85298, United States.
An organization using Sportual may independently determine why and how it uses member, dependent, attendance, payment, and organization records. For those purposes, the organization may be a separate controller or business and Sportual may act as its service provider or processor. Contact the organization for its own decisions; we will assist as required by law and applicable agreements.
2. Information we collect
Do not submit sensitive information that is not needed for the relevant feature. Administrators should collect only the minimum dependent and member data required for a legitimate organization purpose.
- Account and identity data: name, username, email, authentication identifiers, profile image, locale, and account status.
- Profile and preference data: date of birth, gender where provided, city or postal area, sports and interests, skill or attendance information, social links, and settings.
- Organization and participation data: memberships, roles, invitations, schedules, registrations, waitlists, attendance, waivers or acknowledgments, fees, and administrator actions.
- Dependent-profile data: a dependent’s name, date of birth, image, guardian relationship, membership, attendance, fee, and order information supplied by an authorized adult or organization.
- Content and communications: posts, comments, reactions, messages, channels, uploaded images, GIF searches or selections, reports, and support communications. Private-message content is stored in encrypted form where implemented, but recipients can still access it.
- Payments and commerce: transaction identifiers, amounts, currency, status, refunds, subscriptions, payout or connected-account identifiers, billing country or postal information, and order and shipping information. Payment-card details are generally collected directly by Stripe or the applicable app store.
- Device and network data: device and app identifiers, operating system, app version, IP address, approximate location derived from IP, language, timestamps, diagnostics, crash and performance data, and push token.
- Permission-based data: precise or approximate location, calendar access, camera, and photo library content only when you grant the relevant permission and use the feature.
- Website data: pages viewed, referring page, campaign parameters, browser characteristics, consent choices, and local-storage or cookie identifiers.
3. Sources
We receive information directly from you; from parents, guardians, organization administrators, and other users who interact with you; automatically from devices and browsers; from identity providers such as Auth0, Apple, or Google; and from payment, subscription, mapping, commerce, and support providers when needed to complete a requested service.
4. Purposes and legal bases
Where we rely on legitimate interests, we balance those interests against the rights and reasonable expectations of affected people. You may object as described below. You may withdraw consent without affecting processing that was lawful before withdrawal.
- Provide accounts, authentication, profiles, groups, events, communication, registrations, payments, subscriptions, commerce, and support.
- Perform our contract with you and take steps you request before entering a contract.
- Support organizations under their instructions and applicable data-processing terms.
- Protect users, prevent fraud and abuse, investigate reports, secure the Services, and enforce rules based on legitimate interests and legal obligations.
- Send transactional messages, staff invitations, push notifications, and limited setup assistance related to a recent organizer action; send marketing only after an affirmative choice, with an opt-out.
- Improve reliability and product experience through proportionate diagnostics and analytics based on consent where required, or legitimate interests where law permits.
- Comply with tax, accounting, payment, consumer-protection, safeguarding, law-enforcement, and legal-claims obligations.
- Process permission-based information or optional sensitive data with consent or another lawful basis specifically identified at collection.
6. Other users and public areas
Your profile, posts, groups, events, attendance, or activity may be visible to others according to the feature, organization role, and privacy settings. Private organization areas and messages are intended only for authorized recipients, but recipients may copy or disclose what they receive. Do not post information you are not authorized to share. Public content can be indexed or reshared outside Sportual; deleting it from Sportual may not remove independent copies.
7. Children and dependent profiles
Sportual accounts are not intended to be operated directly by children under 13. We do, however, process information about dependents when an authorized adult or organization manages participation. That information is used for membership, scheduling, attendance, communications, fees, safeguarding, and optional store orders as configured by the adult or organization.
The adult submitting dependent data confirms their authority and should involve the child in an age-appropriate way. Organizations must provide any notices and obtain any permissions required for their activities. A guardian may request access, correction, or deletion through the organization or Sportual. We may retain limited participation, payment, safeguarding, or dispute records where law permits or requires.
If we learn that a child directly created an account without the legally required authorization, we will restrict the account and take reasonable steps to delete or obtain valid authorization for the data. Contact support@sportualapp.com with the subject “Child Privacy.”
8. Device permissions and communications
Location, notifications, calendar, camera, and photo-library access are controlled through device settings. Disabling a permission stops new access but may not delete information previously supplied. Push notifications can be changed in Sportual or device settings. Marketing email may be unsubscribed using the message link; service and legal messages may still be sent.
10. Retention and deletion
We keep information only for as long as reasonably necessary for the purposes described, considering account status, organization instructions, safety, legal claims, backup cycles, and tax, payment, and accounting rules. The exact period varies by record.
After an account-deletion request is verified, we remove or de-identify active profile and public content where reasonably possible. We may retain transaction and tax records, consent and policy-acceptance evidence, fraud and security logs, moderation and safeguarding records, legal correspondence, records controlled by an organization, content involving other users, and temporarily isolated backups. Retained information is restricted to the applicable purpose and deleted or anonymized when that purpose expires.
An organization may need to preserve attendance, membership, dependent, payment, or safeguarding records under its own retention obligations. Requests concerning those records should also be sent to that organization.
11. Security
We use organizational and technical safeguards designed for the nature of the information, including access controls, transport encryption, encryption for selected stored fields, monitoring, and provider security controls. No system is completely secure. Notify support@sportualapp.com promptly if you believe an account or personal data has been compromised.
12. International transfers
Sportual is based in the United States and uses providers that process information in the United States and other countries. Those countries may have different privacy laws. Where a restricted international transfer requires safeguards, we use an available lawful mechanism appropriate to the transfer, such as an adequacy decision or approved contractual clauses, and assess supplementary safeguards where required. We do not rely on continued use of the Services as consent to an otherwise unlawful transfer.
13. Your choices and privacy rights
Submit a request to support@sportualapp.com or use the deletion page. State your country or state and the account email. We will verify identity and authority proportionately. Authorized agents may submit requests where recognized by law. We will not discriminate against you for exercising privacy rights. You may complain to your local data-protection or consumer-protection authority.
- Access and receive information about processing.
- Correct inaccurate information.
- Delete information, subject to lawful exceptions.
- Receive portable information where applicable.
- Object to or restrict certain processing.
- Withdraw consent for future processing.
- Opt out of marketing, optional analytics, and any sale, sharing, or targeted advertising if such processing applies.
- Appeal a denied privacy request where applicable.
14. EEA, UK, and Polish users
Depending on the processing, our legal bases are contract, legitimate interests, legal obligation, vital interests, or consent. EEA and UK users may contact their supervisory authority and may exercise the rights described above. Polish users may contact the President of the Personal Data Protection Office (UODO). Send questions for Sportual’s privacy contact to support@sportualapp.com. Organization customers may have their own data-protection officer or privacy contact.
15. United States state notices
Residents of states with applicable comprehensive privacy laws may have rights to know, access, correct, delete, obtain a copy, opt out of certain sales, sharing, targeted advertising, or profiling, limit certain sensitive-data uses, and appeal. These rights apply only where the relevant law covers Sportual and the processing.
In the preceding 12 months, the categories collected and disclosed for business purposes are those described in Sections 2 and 5. We do not sell personal data for money and do not knowingly sell or share personal data of people under 16. Browser Global Privacy Control signals will be treated as an opt-out where legally required and relevant to configured processing.
16. Changes to this Notice
We may update this Notice as the product, providers, or law changes. The page will show the new date. We will provide additional notice before a material new use when required and obtain consent where the new use requires it.
17. Contact and related documents
Sublime Software LLC, doing business as Sportual, Gilbert, Arizona 85298, United States. Email: support@sportualapp.com. Include “Privacy Request” in the subject line.