Privacy Policy

Last updated: 1 November 2026

Draft: this document is awaiting legal review and the operator details below are not final.

This policy explains what personal data Social League collects, why, who sees it, and the choices and rights you have.

1. Who we are

Social League is a service for organising sports sessions, scoring matches, running leagues and tracking results. The controller of your personal data is Social League.

Questions or requests about your data: charlescairney@yahoo.co.uk.

2. What we collect and why

We only collect what the features need. Some of it you give us, some is created as you play.

Data	What it includes	Why we use it
Account	Your name, email address and profile picture. Passwords are handled by our sign-in provider and are never stored by us.	To create and run your account and show who you are to other players.
Profile details (optional)	Date of birth, gender, nationality, languages, experience level and what you mainly want to use the app for. Date of birth and gender are visible only to you; nationality and languages can appear on your public profile.	To personalise onboarding and recommendations. You can leave these blank or clear them at any time.
Find-me settings	Whether you can be found by name, by exact email, through a shared league, or by an optional area (a city or area you type in).	To let you control how other people can find you and send a friend request.
Sports activity	Sports you follow, sessions and matches you join or score, scores, match events, rankings and ratings, statistics, teams and seasons.	To run sessions and leagues, calculate results, Elo ratings and leaderboards.
Leagues and events	League memberships and roles, invitations, invite codes you use, event sign-ups and replies, announcements.	To run leagues and events and let organisers manage them.
Friends	Friend requests you send or receive and your accepted friends.	To connect you with people you play with.
Chat	Messages you post in league chat and when you posted them. If a message is blocked or flagged by our chat rules, we keep the text and the rule it matched.	To provide league chat and keep it safe.
Safety	People you block, reports you file (and the details you write), reports about you, and league bans or moderation actions.	To protect people and enforce our rules.
Places	Places you save or add to a league: name, address, map position and who may see it. Place search is powered by a third-party place provider; we send it only the search text.	To plan where games happen.
Your device location (only if you allow it)	If you use "near me" when looking for sessions, your device location is rounded to about 100 metres and sent with the search so we can measure distance. It is not added to your profile.	To find sessions near you.
Notifications	In-app notifications, your push preferences and, on the mobile app, a device token with the platform, an installation ID and when it was last seen.	To tell you about reminders, replies, friend requests and chat.
Images	Profile pictures and league logos or banners you upload.	To show them in the app. Uploaded images are stored with our storage provider.
Product events	A record that an action happened (for example a session was created or a match completed), with the account, league, sport and time.	To give league organisers reporting and to improve the service.
Technical data	IP address, browser or device type and request details in server logs.	To keep the service secure, fix faults and prevent abuse.

We do not ask for payment details, precise location history, contacts or your phone number. We do not sell your data and we do not show advertising.

3. Our lawful bases

Under UK GDPR we rely on:

Contract: to provide your account, sessions, leagues, results and chat.
Legitimate interests: to keep the service secure, prevent abuse, moderate content, produce league reporting and improve the product, where this does not override your rights.
Consent: for optional analytics, for device location when you allow it, and for the optional profile details you choose to add. You can withdraw consent at any time.
Legal obligation: where the law requires us to keep or share information, for example to respond to a lawful request or to report illegal content.

4. Who can see your information

Other people see only what the feature needs. Finding you in search shows a limited card (your name and picture) with an option to send a friend request; it does not open your full profile.

Players in the same session or league can see your name, picture, results and chat messages, as the league's privacy setting allows.
League organisers and admins can see members, roles and activity in their league and can remove or ban members.
Friends can see your profile information that you share with friends.
People you block cannot see or contact you through the app.
Public leagues and sessions are visible to other signed-in people according to their visibility settings.
Our team can access data when needed to run the service, investigate reports and fix problems.

5. Companies that help us run Social League

We use service providers who process data on our instructions:

Supabase: sign-in, our database and image storage.
Vercel: hosting the website and, if you accept analytics, measuring how it is used.
Our API hosting provider: runs the server that processes requests.
Google and Apple: if you choose to sign in with them, they tell us your name and email.
A place-search provider: turns place searches into addresses and map positions.
Mobile notification services (Apple and Google): deliver push notifications to your device.

We may also share data where the law requires, to protect people from harm, or if the business is transferred. We do not sell personal data.

6. Transfers outside the UK

Some providers process data outside the UK, including in the United States and the EU. Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Addendum or Standard Contractual Clauses, or the UK–US data bridge, to protect your data to UK standards.

7. How long we keep it

We keep personal data only as long as we need it for the reasons above.

Your account and profile: until you delete your account.
Sessions and league events: they are archived automatically a set time after they finish.
Notifications: kept in your inbox until you clear them or delete your account.
Safety records (reports, blocks, moderation actions): kept for as long as needed to protect people and handle disputes.
Server logs: kept for a short period for security and fault finding.

Deleted data can remain in backups until they expire, and is not used for anything else in the meantime.

8. Your rights

You have the right to:

Access and download your data. In the app, use the data export in your account settings.
Correct anything that is wrong, by editing your profile.
Delete your account and its data from your account settings.
Restrict or object to some uses, and withdraw consent at any time.
Move your data to another service (the export is a machine-readable file).
Complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first: charlescairney@yahoo.co.uk.

We respond to requests within one month.

9. Age

Social League is for people aged 16 and over. We do not knowingly collect personal data from anyone younger. If you believe a child has an account, tell us at charlescairney@yahoo.co.uk and we will remove it.

10. Cookies and similar technologies

Name or type	Purpose	When it is used
Sign-in session	Keeps you signed in. Strictly necessary.	Always, once you sign in.
Theme and appearance	Remembers light or dark mode and your colour palette on this device.	Always. Stored on your device only.
Cookie choice	Remembers whether you accepted or declined analytics.	Always. Stored on your device only.
Analytics	Counts visits and how features are used, for example whether finding a session led to joining one. We never include your location in these events.	Only after you accept in the cookie banner.
Offline files	The app keeps its public images and icons on your device so the offline page can show. Signed-in pages are never saved, and this is cleared when you sign out.	Always.

You can change your analytics choice by clearing this site's data in your browser, after which the banner appears again.

11. Automated decisions

We calculate ratings and rankings from match results, and we order sessions you may like by distance, sport and who is going. Chat messages are checked against rules (for example banned words and message rate) and may be blocked or flagged automatically. None of this has legal or similarly significant effects, and you can ask us to review a decision at charlescairney@yahoo.co.uk.

12. Keeping data safe

We protect data with encrypted connections, access limited to the person who owns it (or who is allowed to see it), and database-level safeguards. No system is perfectly secure; if there is a breach that puts you at risk we will tell you and the regulator as the law requires.

13. Changes to this policy

We will update this page when our practices change and show the date at the top. For significant changes we will tell you in the app or by email before they take effect.