Privacy Policy

This Privacy Policy describes how Subbit collects, uses, shares, and protects information when you use the Subbit app on iPhone, iPad, and Apple Watch, and when you use our website. It's written to be accurate about what actually happens rather than to be boilerplate. Subbit began as a fully on-device app. It now also offers optional cloud features, and this policy was rewritten on the date above to describe them plainly.

If anything here is unclear, or if you want to exercise any of the rights in Section 13, contact us using the details at the end of this page.

01Who We Are and What This Policy Covers

Subbit is published by Matthew Cox, doing business as Subbit, located in Kansas City, Missouri, United States ("Subbit," "we," "us," or "our"). We are the party responsible for the personal information described in this policy (the "controller," in the language of some privacy laws), except where Section 2 says otherwise.

This policy applies to the Subbit iOS app, its Apple Watch companion and widgets, and the Subbit website. It does not cover third-party websites or services you reach by leaving the app, including the App Store, or the practices of the clubs, leagues, or other coaches you work with.

02Roles: Your Team's Data Is Yours

The information you enter about a team and its players ("Team Content": names, jersey numbers, positions, ratings, photos, formations, rotations, match records) is created and controlled by you, the coach. You decide what to enter, who to share it with, and when to delete it. For Team Content that you choose to back up or share through our cloud features, we act as a service provider (a "processor") that stores and transmits it on your instructions and for no purpose of our own. We do not use Team Content to build profiles, to market to anyone, or for any purpose other than delivering the feature you turned on.

Information about you as an account holder (your name, email address, subscription status, and the technical data in Section 4) is information we control directly.

03What We Collect and When

Subbit works fully offline and entirely on-device by default: no account, no sign-in, and nothing sent to us, for a coach who never uses the three cloud features described in 3b through 3d. Each is opt-in and separately triggered.

3a. Always on-device, no account required

3b. If you sign in and back up a roster

Signing in (Settings › Account) is optional and unlocks nothing else in the app. Its only purpose is to let you back up a team's roster to the cloud and restore it on another device.

What we collect when you sign in. With Sign in with Apple, we receive the name and email address Apple shares with us (if you choose Apple's "Hide My Email," we receive a private relay address instead of your real one). With email sign-in, we receive your email address and a password. Passwords are handled by Google Firebase Authentication as salted hashes; we never see or store your plaintext password. We also receive a unique account identifier generated by Firebase.

What "Back Up Now" sends. That team's full roster (each player's first and last name, jersey number, position, preferred and excluded positions, starter status, absence flag, playing-time target, and every rating including goalkeeper ratings) plus the team's own settings (formation, match length, field size, shift-length settings, and similar). Backups never include player photos or team badge images, which stay device-only. Backups are stored under your account and can be read only by you.

3c. If you invite an assistant coach

Inviting a co-coach requires signing in. It creates a shared team record that every coach on that team (anyone you invite, and anyone they invite) can read, and it turns on automatic sync: once a team has more than one coach, the record is kept up to date without any further action from you. That shared record contains:

• Coaching staff: each coach's name and email address, role (head coach, assistant, or manager), optional profile photo, years coaching, and licenses, if they choose to add them; and, for the head coach, whether they hold an active Premium subscription (used only to decide whether "game is live" notifications are sent to the team).
• Player roster: each player's first and last name, jersey number, and position. Ratings and photos are not included.
• Full match history: for every saved game, the opponent, score, and the complete substitution and stat timeline: every player's name, each time they came on or off, and every goal, assist, and card.
• Saved game plans: any named rotation plans, including which players are paired in each planned substitution.
• Push notification token: a device token that lets us send a "game is live" notification to the team's coaches (Section 4).

Invite codes. An invite code is a short, single-use code that links to your team and stops working after 7 days. It is not tied to a specific person: anyone who has the code can use it to join that team as a coach and see everything above. Share it only with someone you intend to give that access, and remove any coach who should no longer have it from the team's coaching staff screen.

3d. If you share a live match

Live sharing generates a 6-character code from the in-match menu so a coach on the sideline can share it verbally with no one needing to sign in. This is deliberately Subbit's most open feature, and it has a corresponding trade-off you should understand: anyone who has the code can view the live match data below for as long as sharing stays on, whether or not they're one of your invited coaches, and no account is required on either side.

While a live match is shared, we transmit: the team name and color, the match clock and half, the current formation, and for every on-field and bench player their first name (not last name), jersey number, position, live position on the pitch, minutes played, and goal, assist, and card counts. If a player has a photo on your device, a reduced-size copy of that photo is uploaded so it can be displayed to viewers. Viewers who are also signed-in coaches on the team can send you a stat suggestion (for example, "goal, #9"), which is stored briefly until you accept or dismiss it.

All live-match data, including uploaded photos, is deleted from our systems automatically when you stop sharing. If sharing is never stopped (for example, the app is closed mid-match), the code stops working on its own after 6 hours and the match can no longer be viewed with it.

04Information Collected Automatically

Subbit contains no analytics or advertising software. A small amount of technical information is still generated as a by-product of the platforms the app runs on:

• Firebase app instance identifiers and security tokens. The Google Firebase software that powers our cloud features initializes when the app launches and, as part of Google's App Check security service, exchanges a device-integrity token with Google to confirm requests come from a genuine copy of Subbit. This happens for every user, including coaches who never use a cloud feature, and involves Google receiving your device's IP address and an app instance identifier. No Team Content is included.
• Push notification token. If you allow notifications (which Subbit requests so it can play on-device substitution alerts), iOS registers your device with Apple's push service and Google's Firebase Cloud Messaging, producing a device token. We store that token only if you are a coach on a team with multiple coaches, so a "game is live" notification can reach you.
• Server logs. Like any internet service, Google's servers record standard connection data (IP address, timestamps, request type) when the app communicates with them. We do not use these logs to identify or profile you.
• App Store purchase data. See Section 5.

05Premium Subscriptions

Subbit offers an optional auto-renewing Premium subscription (monthly or annual), purchased through Apple's in-app purchase system. Apple processes the payment; we never receive your card number, billing address, or other payment details. From Apple we receive a signed transaction record that tells us which product you bought and whether it is currently active, which we use to unlock Premium features on your device. If you are the head coach of a team with assistant coaches, your Premium status (active or not) is stored in that team's shared record so the "game is live" notification feature knows whether to run. You can manage or cancel a subscription any time in your Apple ID settings; Apple's own privacy policy governs its handling of your purchase.

06Permissions and On-Device Processing

Permission	Why Subbit asks
Photo Library	Only when you choose to add a player headshot, import a roster from a photo, or (for the built-in demo team only) assign faces from a team photo. Subbit accesses only the photo you pick, never your whole library.
Notifications	To play on-device substitution alerts, and, for coaches on multi-coach teams, to deliver "game is live" notifications. See Section 4 for the push-token consequence of granting this.

Subbit does not request access to your location, contacts, microphone, camera, health data, or motion data.

On-device image processing. Two features use Apple's on-device Vision framework, and both run entirely on your device with nothing sent to us: (1) importing a roster by photographing a printed roster sheet uses on-device text recognition to read names and numbers; (2) the demo team's photo-assignment feature uses on-device face detection to find and crop headshots from a group photo. Face detection locates where faces are; it does not identify anyone, and Subbit does not create, store, or transmit facial geometry, face templates, or any other biometric identifier.

07Tracking, Advertising, and Analytics

Subbit contains no advertising SDKs, no analytics services, and no tracking technologies. It does not use the Advertising Identifier (IDFA), does not track you across other companies' apps or websites, and does not build advertising or marketing profiles. There is therefore nothing to ask your permission for under Apple's App Tracking Transparency framework and no cross-app tracking to opt out of. Our website uses no cookies other than any strictly necessary ones set by our hosting provider.

08How We Share Information

We do not sell personal information and we do not share it for targeted advertising. We share information only in these circumstances:

• Service providers. Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, App Check, and Cloud Functions) hosts and transmits the data described in Sections 3b through 3d and Section 4, under Google's Cloud Data Processing Terms. Apple Inc. provides Sign in with Apple, push notification delivery, and in-app purchases. Our website host serves this site. These providers may process data only to provide their services to us.
• Other coaches you choose to share with. Coaches you invite to a team (and coaches they invite) can see the shared team record in Section 3c. Anyone holding a live share code can see the live match data in Section 3d. These recipients are independent of us; we are not responsible for what they do with information you choose to share with them.
• Legal requirements and safety. We may disclose information if required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of a player, a user, the public, or Subbit.
• Business transfers. If Subbit is acquired, merged, or its assets are sold, information may be transferred to the successor, who will be bound by this policy unless and until you are notified otherwise.

09Retention and Deletion

Deleting your cloud data. Deleting a team from your device, removing an assistant coach, or deleting the app does not by itself delete that team's backup or shared record from our cloud storage; those are separate copies. To remove them, use Settings › Account › Delete Cloud Data in the app. That permanently deletes all of your roster backups and the full shared record (roster, match history, game plans) of every team you are head coach of; assistant coaches on those teams lose access. Everything on your device is untouched and your account stays signed in.

Deleting your account. Use Settings › Account › Delete Account in the app. For your security we may ask you to sign in again first. This permanently deletes your account, your roster backups, your coaching-staff details and profile photo on every team, the full shared record of every team you are head coach of, and removes you from any team you joined as an assistant. Teams you joined as an assistant continue to exist for their head coach. If you can no longer sign in to the app, email us from the account's email address with the subject "Delete my account" and we will do it for you and confirm within 30 days.

10Security

We protect information with measures appropriate to its sensitivity: data on your device is stored in the app's private container using iOS data protection; data in transit to Google Firebase is encrypted with TLS; access to cloud data is enforced server-side by security rules so that roster backups are readable only by their owner and shared team records only by that team's coaches; and Google's App Check is used to reject requests that don't come from a genuine copy of the app. Live share codes are unauthenticated by design (Section 3d); treat a code like a key while sharing is on. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as applicable law requires.

11Apple Watch, Widgets, and Live Activities

Subbit's Apple Watch app and its Lock Screen / Dynamic Island Live Activity display match status (clock, upcoming subs) computed on your iPhone and delivered directly to your own paired devices using Apple's on-device frameworks (WatchConnectivity, ActivityKit, WidgetKit). None of this data passes through us; it's a direct hop between hardware you own.

The phone app and its widget also share one small on-device signal (whether the match clock was just started or paused) through Apple's App Group mechanism so the widget stays in sync; no roster or player data is stored there.

Because a Live Activity is designed by Apple to be visible on your Lock Screen, a player's name and upcoming substitution time may be visible there, and on your Apple Watch face, before the device is unlocked, the same way a delivery-tracking or sports-score Live Activity works. If you'd rather that not be visible on a locked screen, dismiss the Live Activity by touching and holding it and choosing to end it.

12Children's Privacy

Subbit is a tool for adult coaches. You must be at least 18 years old to create an account or use the cloud features, and children do not use or sign into Subbit directly. A team roster, however, will routinely include the names and, if you add them, photos of youth players, entered by their coach.

Subbit does not knowingly collect personal information from children under 13 (or the higher age of digital consent in your jurisdiction). We do not direct any part of Subbit to children, and we do not collect information from children online. Information about youth players is provided to us, if at all, by their adult coach when that coach chooses to use a cloud feature in Section 3, and it is used only to deliver that feature to that coach and the coaches they authorize.

What this means for you as a coach. Because you decide whether youth players' information leaves your device, you are responsible for having the authority and any consent your club, league, school, or applicable law requires before backing up, sharing, or live-streaming a youth roster. Live match sharing (Section 3d) deserves particular care: it shows first names, positions, and photos to anyone holding the code, without sign-in. Consider sharing live only with people you know, and stopping the share when the match ends. If you believe a child's information has been provided to us without appropriate authority, contact us and we will delete it.

13Your Rights and Choices

13a. Controls available to everyone

• Edit or delete a player any time from the Roster screen; it's removed from your device immediately. If that team was backed up or shared, request cloud deletion per Section 9.
• Stop a live share from the in-match menu; its data is deleted immediately.
• Remove an assistant coach from the team's coaching-staff screen to end their access.
• Revoke Photo Library or Notification access in iOS Settings › Privacy & Security.
• Delete your cloud data or your account in Settings › Account (Section 9).

13b. Rights under the GDPR, UK GDPR, and similar laws

If you are in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with comparable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, to receive it in a portable format, and to withdraw consent at any time without affecting prior processing. Our legal bases are: your consent, for each optional cloud feature (which you give by turning it on and can withdraw by turning it off and requesting deletion); performance of our contract with you, for providing the app and Premium subscriptions; and our legitimate interests in keeping the service secure and functioning, for the technical data in Section 4. You may lodge a complaint with your local supervisory authority.

13c. Rights of California residents

If you are a California resident, the California Consumer Privacy Act as amended (CCPA/CPRA) may give you the right to know what personal information we collect, use, and disclose (the categories are: identifiers such as name, email, and account and device identifiers; audio/visual information such as player photos; commercial information such as subscription status; internet activity such as IP address and connection logs; and user-generated content such as Team Content), to delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months, so there is no "sale" or "sharing" to opt out of; we honor Global Privacy Control signals as an expression of that preference in any event. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit. You may exercise your rights, or designate an authorized agent to do so, by contacting us as described below. We will verify requests by matching them to the email on your account, and respond within 45 days. If we deny a request you may appeal by replying to our decision.

13d. Residents of other U.S. states

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port personal information and to opt out of targeted advertising, sales, and profiling. We engage in none of the latter three. Exercise these rights the same way; if we decline a request, you may appeal by replying to our decision, and we'll respond to the appeal within the time your state's law requires.

13e. How to exercise any right

Email us at the address below. To protect your data, we will act only on requests we can tie to the email address on your account, or, for coaches with no account, to information sufficient to identify the specific data at issue. We do not charge for requests unless they are manifestly unfounded or excessive.

14International Transfers

Subbit is operated from the United States, and the cloud services in Section 3 are provided by Google on infrastructure that may be located in the United States or other countries. If you use Subbit from outside the United States, your information will be transferred to and processed in the United States. Where required, transfers from the EEA, UK, or Switzerland rely on Google's Cloud Data Processing Terms, which incorporate the European Commission's Standard Contractual Clauses and the UK Addendum.

15Changes to This Policy

This page was substantially rewritten on the effective date above to describe the optional account, assistant-coach, and live-sharing features added to Subbit; the earlier version, written for a fully offline app, no longer described what Subbit does. If our practices change again, we'll update this page and its effective date before the change takes effect, and for material changes we'll also notify you in the app. Continued use of the cloud features after a change means you accept the updated policy for those features; you can always stop using them and request deletion instead.