Privacy policy

Last updated 15 August 2026.

Coach Bob Sports is a private app for one coach's teams. It stores as little as it can, uses none of it for advertising or analytics, and shares none of it with anyone who is not needed to deliver the app.

Who is responsible

Coach Bob Sports is run by one coach, independently. It is not affiliated with, endorsed by, or operated on behalf of any school or school district. Questions about this policy go to privacy@coachbobsports.com.

What is stored, and why

Your email address

This is how you sign in. There is no password: you ask for a six-digit code and it is emailed to you. The code itself is never stored — only a one-way hash of it, which is discarded once used or expired.

Your display name

Shown beside anything you are listed on within your teams.

Which teams you belong to

Membership decides what you can see. Everything in the app is checked against it on the server, not in the app.

Roster entries

A player's name, grade, jersey number, an optional photo, and whatever per-sport details the coach chooses to record. Roster entries are created by the coach, not by players. They are visible only to people on that team.

Posts, events and their attachments

News the coach publishes, the schedule, and any images or files attached to them. Photos and files are stored privately and served through links that expire; there is no public address for any of them.

Your signed-in devices

A label such as "iPhone" or "Chrome on Windows", when the session was created and last used, and a one-way hash of the network address it was used from. The hash is used to notice a session being used from somewhere unexpected. The address itself is not kept.

Notification tokens and preferences

If you allow notifications, the identifier your phone's operating system gives the app, so a push can reach it, plus which categories you have switched on for each team.

An administrative log

Actions taken by an administrator — publishing, deleting, changing roles — with who did it and when. It exists so that a coach who makes a mistake, or an account that is misused, can be traced. Only the head administrator can read it.

What is not stored

• No passwords — there are none to store.
• No advertising or analytics identifiers, and no tracking.
• No location. The app never asks for it.
• No contacts, no microphone, no camera roll beyond a photo you deliberately pick to upload.
• No raw network addresses — only a one-way hash, as described above.

Who else sees it

Only the services needed to run the app, and only for that purpose. None of them are paid for access to your data, and none of them are permitted to use it for their own ends.

• Cloudflare — hosting, the database, file storage, and the check that tells a person from a bot on the sign-in form.
• Brevo — delivers the sign-in code email. It receives your email address in order to send it.
• Apple and Google — deliver push notifications to iPhones and Android phones respectively. They receive the notification and the device token, not your account.

Nothing is sold. Nothing is shared with a school, a league, or anyone else, except where the law requires it.

How long it is kept

• Seasons are kept indefinitely. A past season is archived rather than deleted, so a player can still look back at it.
• A deleted account is deactivated immediately and removed permanently after 30 days. It cannot be recovered after that.
• A deleted photo is removed from storage when the roster entry it belongs to is deleted.
• Sign-in codes expire after ten minutes and are unusable once used.

Players under 18

The app is used by high school players, aged roughly 14 to 18, and by their guardians. It is not directed at children under 13 and is not available to them.

Photographs of players are uploaded only by the coach, and only where the player's family has given permission. If you want a photograph of your player removed, email privacy@coachbobsports.com and it will be deleted.

A guardian may ask for their player's information — including the roster entry — to be corrected or removed, on the same terms as their own.

How it is protected

• Everything travels over HTTPS. There is no unencrypted path.
• Sign-in codes, invitation links and calendar links are stored only as one-way hashes, so a copy of the database does not yield a working one.
• Every request is authorised on the server against your actual membership. Hiding a button in the app is never what keeps you out of something.
• Signing out clears the copy of your team's data held on that device.

Your choices

• See what is held about you — email privacy@coachbobsports.com.
• Correct it — your display name is editable in the app; ask the coach for anything on a roster entry, or email the address above.
• Delete it — in the app under Settings, or by email.
• Turn off notifications — per team and per category, in the app under Settings. Cancellations and sign-in alerts are always sent, because both are about safety.
• Sign a device out — every signed-in device is listed in the app and can be revoked individually.

Changes

If this policy changes, the date at the top changes with it. A change that materially affects what is collected will be announced in the app before it takes effect.