Privacy policy
Last updated September 12, 2026
Grassroot Coach is a tool for running a grassroots youth soccer team — squad management, scheduling, attendance, and match-day rotation. This page describes what we actually store and why, in plain language. It isn't a substitute for legal advice — if you run a club and need a formal policy for your own members, please have it reviewed.
What we store
Account info (name, email, password — stored as a one-way hash, never in plain text) for coaches, parents, and admins who sign up. Player records (name, date of birth, position, jersey number) entered by a coach. Attendance responses, including an optional reason if someone can't make it. Match and training data — line-ups, substitutions, scores, and per-player stats. Growth reports a coach writes about a player's development. Any files a coach uploads to share with the team.
Why we store it
Every piece of data above exists to run the feature it's part of — a rotation schedule needs to know who's available, an attendance reason lets a coach plan around it, a growth report is the record itself. We don't sell data, run ads, or share it with anyone outside your own club/team.
Who can see it
Only people you invite to your team, scoped to their role — coaches and club admins see everything relevant to running the team, parents and players see their own linked player's information. This is enforced at the database level, not just in the app's screens.
Your rights
You can download a copy of your own personal data, or permanently delete your account, at any time from the Account page. Deleting your account removes everything tied only to you; anything you wrote for the team (a growth report, an uploaded file) stays in place for the team's record, credited to "Former member" instead of your name.
How long we keep it
For as long as your account exists, or until you ask us to remove something specific. There's no automatic expiry today — if you'd like older data removed, use the account deletion above, or get in touch.
Cookies
We use two cookies, both strictly necessary for the app to function: one to keep you signed in, and one to remember your language preference. Neither is used for tracking or advertising, so no cookie-consent banner is shown.
Push notifications
If you turn on notifications — for example, a nudge that tonight's match reminder still needs sending — your browser or device is issued a push token by Google's Firebase Cloud Messaging service, used only to deliver that nudge. This never happens without your explicit permission: your browser or device asks you directly, and nothing is generated until you allow it. The token itself is an opaque string tied to your device or browser, not personal information on its own, but we link it to your account while notifications stay enabled so we know where to send it; for users in the EU, this is handled by Google Ireland Limited. We remove the token — from our own database and from Firebase itself — the moment you sign out or delete your account, and never keep it longer than that. We also never put match details, opponent names, or locations in the notification text itself, only a generic nudge; the actual reminder message loads inside the app, over your normal signed-in connection, once you open it.
Questions
If you have questions about your data, or want something removed that the Account page doesn't cover, contact your club's admin or reach us directly.