Privacy Policy for StrikeCraft — Team Management
StrikeCraft — Team Management (“StrikeCraft,” “we,” “us”) is
operated by Goliath Computers LLC, which is responsible for (the “controller”
of) the personal information described here. This policy applies to the StrikeCraft Team Management
apps for iOS and Android, the StrikeCraft web app at strikecraft.app/app, stream pages
at strikecraft.app/watch, and team calendar feeds at strikecraft.app/cal
(together, the “App”). It explains what we collect, why, who we share it with, how long we
keep it, and the choices you have. Questions:
support@strikecraft.app.
Contents
- Information we collect
- Device permissions
- How we use information
- Who can see your information in the App
- Message safety and moderation
- Service providers
- Purchases and subscriptions
- Children and teens
- Player accounts (ages 13–17)
- How long we keep information
- Security
- Your choices and rights
- California and other U.S. states
- EU/UK users and international transfers
- Changes and contact
1. Information we collect
Information you or your team give us
- Account and sign-in: your name, email address and profile photo, provided by you or by Apple or Google when you sign in. You can also sign in with a one-time email link or code. If you use Sign in with Apple with “Hide My Email,” we receive Apple’s relay address instead of your real one.
- Profile: display name, optional phone number, and your role in each organization and team.
- Team and organization data: rosters, player names and jersey numbers, positions, lineups, game scores and statistics, pitch counts, schedules, events and RSVPs, venues, announcements and team photos.
- Player and guardian information: for player profiles, the managing coach or parent may enter the player’s name and, where provided, a parent or guardian’s name, email address and phone number.
- Age (player accounts only): birth month and year. See Player accounts.
- Messages and attachments: messages, reactions, photos and files you attach, GIFs you choose, and voice notes you record.
- Evaluations and notes: player evaluations and ratings, development notes, practice notes and coach notes entered by authorized team staff.
- Finance and fundraising records: dues, fees, fundraising campaigns and payment records that your organization’s administrators enter to track who has paid. StrikeCraft does not process these payments and does not receive card or bank details for them.
- Volunteer and carpool sign-ups: volunteer slots and duties you sign up for, and carpool offers and passengers for events.
- Live streams and clips: if your organization enables streaming, the video and audio captured by the broadcasting device, and clips made from it.
- Scorecard and lineup-card photos: if you import a paper scorecard, the photo is sent for automated reading (see Anthropic). On Android, lineup-card scanning reads the photo on your device.
- Imported data: rosters, schedules and statistics you import from files, calendar feeds, or (on iOS) Google Sheets you choose to connect with read-only access.
- Rules Assistant questions (iOS): if you use the Rules Assistant and allow cloud answers, the questions you type are sent for an AI answer (see Anthropic). You can choose on-device answers instead.
- Consent records: the version of our Terms and this policy you agreed to, the date, the app version, and whether you confirmed you are 18+ or a 13–17 player.
- Support and feedback: anything you send us through the App, email or our support form.
Information collected automatically
- Device and push information: push notification tokens, device model, operating system and app version, and language.
- Usage analytics: which screens you open and which features you use, linked to your StrikeCraft account ID.
- IP address and approximate location: our servers and providers receive your IP address when the App connects to them. Our analytics provider uses it to estimate your approximate location (such as city, region and country).
- Device location (iOS, optional): if you allow it, the iOS app uses your location while you choose an event location, to center the map and search for nearby places through Apple Maps. We do not store your device location or send it to our servers.
- Diagnostics: crash reports, error logs and performance data, used to find and fix problems.
- Purchase status: whether you have an active subscription, which plan, and when it renews or expires (see Purchases).
- Google Play age signal (Android): when an athlete accepts a player invitation on Android, the app may ask Google Play for an age-range signal. We use it only to block accounts that appear to belong to someone under 13. We do not store the range.
2. Device permissions
The App asks for these permissions only when you use the related feature. You can turn them off in your device settings at any time; only that feature stops working.
- Camera: to take photos, scan scorecards and lineup cards, and broadcast live streams.
- Microphone: to record voice notes and to capture audio for live streams. We record only while you are recording a voice note or broadcasting.
- Photos and files: to attach images or files you choose.
- Calendar: to add team games and events to your device calendar and keep them up to date (iOS), or to import events you choose from your device calendar into a team schedule (Android). We upload only the events you choose to import.
- Location (iOS, while using the app): to center the map and find nearby places when you set an event location. See above.
- Face ID or Touch ID (iOS): to confirm it’s you before sensitive actions such as deleting your account. This check happens on your device; we never receive biometric data.
- Notifications: to send game, event and message alerts.
- Bluetooth: to find and connect an external camera (such as a GoPro) for streaming. On older Android versions the system requires the location permission to scan for Bluetooth devices; we do not use it to determine your location.
3. How we use information
- Provide the App: manage organizations, teams, rosters, lineups, games, statistics, schedules, messaging, streaming, finance tracking, volunteers and carpools.
- Sync your data across your devices and keep a local copy for offline use.
- Send notifications and service emails (invitations, sign-in links, verification codes, reminders and support replies).
- Keep the community safe: apply the age rules for player accounts, check messages for blocked terms, and review reports.
- Process subscriptions and unlock paid features.
- Understand how the App is used, fix crashes and errors, and roll out features safely.
- Respond to support requests, comply with the law, and enforce our Terms.
We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not show ads in the App.
4. Who can see your information in the App
- Organization and team members can see your profile, role and team information according to their role. Coaches and administrators can see more than parents, players and fans.
- Messages can be read by the participants of that conversation. Other organization members, including owners and coaches, cannot read conversations they are not part of. Linked parents and guardians can see which conversations a player under 18 is in, but not the messages. See also Message safety and moderation.
- Statistics, evaluations and notes are visible to authorized team members based on their role.
- Live streams and clips can be watched by whoever the organization shares them with, according to its settings, including people who open a shared stream link.
- Calendar feed links: a team calendar feed link (
strikecraft.app/cal/…), where available, lets anyone who has the link see that team’s schedule (such as event names, descriptions, opponents, times and locations). Share it only with people you trust. The link can be reset in the App, which turns off the old one. - StrikeCraft staff do not browse your content. Authorized staff may access specific data when you ask for help, to investigate a report, to keep people safe, or when the law requires it.
We may also disclose information if required by law or legal process, to protect the safety of any person, or as part of a merger, acquisition or sale of assets (in which case this policy will continue to apply to your information).
5. Message safety and moderation
- Automatic checks: every message is automatically checked against a list of blocked terms. In conversations that include a player account, a message that matches is blocked. In other conversations, a match is flagged on the message.
- Reports: if someone reports a message or a user, StrikeCraft staff may review the reported content and the surrounding conversation to decide what action to take. Reports are not visible to other users or organization administrators, and we never tell the reported person who made the report.
- Blocking: you can block another user so they can no longer message you.
6. Service providers
We share personal information with these providers only so they can run parts of the App for us, under their terms and data-protection commitments:
- Supabase: cloud database, authentication, file storage, realtime sync and server functions. All account and team data is stored here.
- Apple and Google: Sign in with Apple and Google Sign-In (if you choose them); App Store and Google Play purchases and subscription billing; Apple Push Notification service and Firebase Cloud Messaging for delivering notifications; Apple Maps for maps and place search on iOS; Google Sheets import on iOS (read-only, only the files you choose); and, on Android, the Google Play Age Signals check described above.
- OneSignal: push notification delivery. Receives your account ID, push tokens, device type and notification delivery data.
- RevenueCat: subscription management. Receives your account ID and your purchase and subscription status from Apple or Google. Never your payment card details.
- Mux: live streaming and video hosting. Processes streamed and recorded video and audio, and viewing and playback-quality data, which may be linked to your account ID.
- Anthropic: AI processing for features you choose to use: reading scorecard photos you import (the photo may show players’ names); on iOS, answering Rules Assistant questions after you allow it, and helping match and check data you import. Under Anthropic’s commercial terms, these inputs are not used to train its models.
- GIPHY: GIF search. Your search terms pass through our server to GIPHY, and the GIFs you see load from GIPHY’s servers, which receive your IP address.
- Open-Meteo: weather forecasts for games and events. The App sends the venue’s coordinates (not your location) to Open-Meteo, which receives your IP address.
- PostHog: product analytics and feature flags (usage events, device information, IP address and approximate location). Session recording is turned off.
- Sentry: crash and error reporting and performance monitoring (device information, app version and error details, which on Android and the web app may include your account ID). We configure it to leave out names and email addresses.
- SendGrid (Twilio): transactional email, sent from
no-reply@strikecraft.app, such as invitations, sign-in links, verification codes and support replies. SendGrid reports delivery events (such as delivered or bounced) back to us. Not used for marketing. - Google (web app only): when you watch a stream in a browser, the player may load Google’s Cast library so you can cast to a TV.
Some of these providers are located in, or process data in, the United States and other countries.
7. Purchases and subscriptions
Paid plans are bought through Apple’s App Store or Google Play. Apple or Google processes the payment and holds your payment details; we never see your card number. We receive (directly and through RevenueCat) your subscription status, plan, purchase and renewal dates, and a transaction identifier, so we can unlock paid features on your devices. Players never see purchase screens. Manage or cancel a subscription in your Apple Account settings or in Google Play › Subscriptions. See our Terms for billing details.
8. Children and teens
StrikeCraft is designed for adults — coaches, parents and administrators — to manage youth baseball teams. The only accounts open to people under 18 are player accounts for athletes aged 13 or older.
- You must be 18 or older to create an account, except for player accounts (ages 13 and older, by team invitation, with parent or guardian approval for anyone under 18).
- Player profiles for younger players are created and managed by a parent, guardian or authorized coach. Any guardian contact information is provided by that adult. These children do not have their own accounts.
- We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has given us personal information, contact support@strikecraft.app and we will delete it.
9. Player accounts (ages 13–17)
When a team invites an athlete to a player account, we ask the athlete for their birth month and year. We use this only to confirm they are 13 or older and to know when they turn 18. We never collect a full date of birth. If the answer is under 13, we do not create a player account and we do not store the birth month and year. We let the inviting coach know so they can check with the family. Because signing in happens before this question, a sign-in and basic profile (name, email and photo from the sign-in provider) may already exist. If that sign-in is not used for anything else, we delete it and its profile automatically, along with the related records at our service providers, usually within minutes. A sign-in made with Apple can take longer, because we first revoke Apple’s sign-in authorization. If the sign-in is also used for something else, such as a parent’s own account, we keep it. In that case, or if you believe a child’s information is still with us, contact support@strikecraft.app and we will delete it.
For players under 18, a linked parent or guardian must approve the account before it can be used. If no parent or guardian account is linked yet, the account waits until the coach links one. A player who turns 18 while waiting is activated automatically, and we email them to say so. While the player is under 18, parents can see which conversations their child is part of (not the messages), turn messaging off, or remove the player account at any time. Parents can ask us to delete a player account by emailing support@strikecraft.app.
Whether players can use messaging depends on the organization’s setting. It is on by default for high school (including organizations using NFHS rules), American Legion, college, adult and professional leagues, and off for all others. While the player is under 18, a parent can turn it off for their child. Adults can message a player only if they share an active team with that player or are the player’s linked guardian, and profanity and other blocked terms are blocked in conversations with players.
For players under 18, we limit analytics: usage events are tied only to an account identifier and role, with names, contact details and message text removed, and session recording is off. Like all app traffic, these events include the IP address, from which our analytics provider estimates approximate location. We never show purchase screens to players, and we do not use advertising or tracking SDKs.
10. How long we keep information
- Account and profile: while your account is active. When you delete your account it is removed right away, and copies held by our service providers are erased within 30 days.
- Team content (game scores and statistics, streams and clips, team photos, announcements and player development notes): kept for the team. If you delete your account, team content you created stays with the team, shown as “Former member” and no longer linked to you, until the team or organization deletes it.
- Messages and attachments: until the sender deletes them, the sender deletes their account, or the conversation or organization is deleted.
- Live streams: until the organization deletes them. Video for a deleted stream is removed from our video host within about 30 days.
- In-app notifications: 90 days.
- Notification delivery logs, email delivery events, app error logs and AI usage logs (which record the feature used and the amount processed, not the photo): 30 days.
- Crash and error reports: up to 90 days.
- Analytics events: as long as they are useful for understanding how the App is used. Events linked to your account are deleted from our analytics provider when you delete your account.
- Backups: up to 30 days.
- Consent and legal records: as long as needed to show what you agreed to, resolve disputes or meet legal obligations.
A team may keep contact details it entered for you, such as your email on a roster. Ask the team to remove them. See strikecraft.app/delete-account for exactly what account deletion removes.
11. Security
- Data is encrypted in transit (TLS). Access is enforced on the server by row-level security, so you can only read data for the organizations and teams you belong to, according to your role.
- The App keeps a local copy on your device for offline use.
- No system is perfectly secure. If you think your account has been compromised, email support@strikecraft.app.
12. Your choices and rights
- Access and correct: view and edit your profile in the App (Me tab). Team data can be corrected by your team’s coaches or administrators.
- Export: use Export My Data in the App where available, or email us for a copy.
- Delete: in the App, open the Me tab and choose Delete Account, or follow the steps at strikecraft.app/delete-account if you no longer have the App.
- Notifications and permissions: change notification preferences in the App and permissions in your device settings.
- Leave: leave organizations or teams at any time.
13. California and other U.S. state privacy rights
Residents of California and other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana) may have the right to know what personal information we collect and how we use and disclose it; to access, correct and delete it; to get a portable copy; to opt out of the sale or sharing of personal information, targeted advertising and certain profiling; to limit the use of sensitive personal information; and not to be discriminated against for using these rights.
We do not sell or share personal information (as those terms are defined in the California Consumer Privacy Act, as amended by the CPRA), we do not use it for targeted advertising, and we do not knowingly sell or share the personal information of consumers under 16. We use sensitive personal information (account sign-in credentials, message contents, and the birth month and year of player accounts) only to provide the App and keep it safe, so the right to limit does not apply.
In the past 12 months we have collected the categories below, from you, from your organization or team, from your device, and from Apple or Google when you sign in or buy a subscription. We disclose each category only to the service providers listed in section 6 for the purposes in section 3, and keep it as described in section 10.
| Category | Examples | Main purposes |
|---|---|---|
| Identifiers | Name, email, phone, account ID, push token, IP address | Accounts, messaging, notifications, security, analytics |
| Customer records | Guardian contact details, roster contact details | Running teams, invitations |
| Characteristics | Birth month and year (player accounts only) | Age rules and parent approval |
| Commercial information | Subscription plan and status; dues and fundraising records your organization enters | Paid features; organization finance tracking |
| Internet or network activity | Screens and features used, crash and error data, device information | Analytics, diagnostics, feature rollout |
| Approximate geolocation | City, region and country estimated from IP address | Analytics, security |
| Audio, electronic and visual information | Photos, voice notes, live streams and clips, scorecard photos | Features you choose to use |
| Sports and team information | Statistics, lineups, evaluations, development notes, schedules, volunteer and carpool sign-ups | Running teams |
| Sensitive personal information | Sign-in credentials, message contents, a player’s birth month and year | Providing the App and keeping it safe |
How to exercise your rights: email support@strikecraft.app, use Export My Data or Delete Account in the App, or visit strikecraft.app/delete-account. We will verify your request using the email address on your account. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity. If we deny your request, you may appeal by replying to our response, and we will tell you the result of the appeal in writing.
14. EU/UK users and international transfers
StrikeCraft is operated from the United States, and your information is stored and processed in the United States and in other countries where our service providers operate. Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on these legal bases:
- Performance of our contract with you: providing your account and the App’s features, syncing, notifications, service emails, and subscriptions.
- Legitimate interests: keeping the App secure and safe (including message checks and report review), diagnosing crashes, and understanding usage to improve the App. You can object to processing based on legitimate interests.
- Consent: optional device permissions such as camera, microphone, calendar and notifications. You can withdraw consent at any time in your device settings.
- Legal obligation: keeping records the law requires and responding to lawful requests.
When personal data is transferred from the EEA or UK to the United States or other countries, we rely on the safeguards in our service providers’ data-processing terms, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) or the EU–U.S. Data Privacy Framework where a provider is certified. You have the right to access, correct, delete, restrict, object to or port your data, to withdraw consent, and to lodge a complaint with your local data protection authority. Contact support@strikecraft.app.
15. Changes and contact
We may update this policy. The version and date at the top of this page change each time. If we make a material change, we will tell you in the App and may ask you to review and accept the new version. Questions, concerns and data requests: support@strikecraft.app (Goliath Computers LLC).