Privacy Policy

Last Updated: July 20, 2026

This policy explains what personal data ClubMeister collects, why we process it, the third-party providers (sub-processors) we rely on to run the service, and the rights you have under the EU General Data Protection Regulation (GDPR) and comparable laws such as the UK GDPR. We collect only what we need to run a team-management app — no advertising, no selling of your data, ever.

1. Who We Are (Data Controller)

ClubMeister is a team- and club-management app operated by Jasper Boskma ("ClubMeister", "we", "us"). For any privacy matter — including exercising your rights below — you are the data subject and we are the controller of your personal data.

• Controller: Jasper Boskma (ClubMeister)
• Email: privacy@clubmeister.app
• Postal address: available on request via the email above.

Where your club or team is the entity that decides how your data is used within the app (for example, which members to invite, which events to create, or whether to enable payments), that club acts as a controller in its own right and ClubMeister acts as its processor. This policy covers ClubMeister's own processing.

2. Information We Collect

We collect the following categories of personal data:

Account & profile data

• First and last name
• Email address
• Password (stored only as a secure hash) or, if you sign in with Google or Apple, the identifier those providers return
• Phone number (optional — used for SMS event notifications)
• Profile photo (optional)
• Date of birth (optional)
• Any custom profile fields your club marks as required (e.g. jersey number, position)

Team & activity data

• Team and club membership, roles, and permissions
• Events, calendar entries, line-ups, and event notes
• Event attendance and RSVP responses
• Posts, polls, and chat messages you send (team chat, direct messages, and role chats), including any images, files, or GIFs you attach

Payment data (only if your club enables payments)

• Transaction records, amounts, and payment status
• For club payouts, the banking/identity details required to set up a payout account

Card and bank details are collected and processed directly by our payment provider, Stripe (see the sub-processor table). ClubMeister never stores your full card number.

Technical & usage data

• App version, device/platform type, and language
• Push-notification token (so we can deliver notifications to your device)
• Pseudonymous product-analytics events (which screens and features are used) — see Section 5
• Coarse country/region, derived from your device timezone and language rather than from your IP address
• Approximate location and search text when you look up a venue for an event

3. Legal Bases for Processing (GDPR Art. 6)

We rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to create and run your account, deliver core features (teams, events, chat, RSVPs), and provide payment functionality you use.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, prevent abuse, and improve it through privacy-preserving, aggregate analytics. You can object to processing based on legitimate interests (see Section 9).
• Consent (Art. 6(1)(a)) — for optional features you explicitly opt into, such as SMS notifications (you opt in by replying YES) and push notifications (you allow them at the device level). You can withdraw consent at any time without affecting prior processing.
• Legal obligation (Art. 6(1)(c)) — where we must retain certain records (e.g. transaction records for tax/accounting purposes).

4. How We Use Your Data

• To create and manage your ClubMeister account and profile.
• To operate teams, events, calendars, RSVPs, line-ups, posts, and polls.
• To enable communication through team chat, direct messages, and role chats.
• To send you notifications you have enabled (push and/or SMS) about events and team activity.
• To process payments and club subscriptions where your club uses them.
• To maintain security, prevent fraud and abuse, and troubleshoot problems.
• To understand, in aggregate, how the app is used so we can improve it.
• To notify you about material changes to the service or this policy.

We do not use your data for advertising, we do not sell it, and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Analytics

We use Mixpanel to understand how ClubMeister is used, configured for EU data residency (data is sent to Mixpanel's EU endpoint). In the app, analytics events are tied to a pseudonymous identifier and record which features are used, not the content of your messages or personal details. Our marketing website uses Mixpanel in a cookieless mode: no cookies, no persistent identifiers, IP-based geolocation disabled, and the browser's "Do Not Track" signal is respected. We do not build advertising profiles.

6. Sub-Processors and Third-Party Services

To run ClubMeister we share the minimum necessary personal data with the vetted service providers ("sub-processors") listed below. Each processes data only on our instructions and under a data-processing agreement. Some are located outside the EU/EEA — see Section 7 on international transfers.

We keep this list current. If we add or replace a sub-processor, we will update this page and, where required, notify you.

7. International Data Transfers

ClubMeister's primary database is hosted in the United States (AWS, region us-west-1), and several of the sub-processors above are located outside the EU/EEA. Where personal data of EU/EEA (or UK) users is transferred to a country without an EU adequacy decision, we rely on appropriate safeguards under GDPR Chapter V — principally the European Commission's Standard Contractual Clauses (SCCs), and, where a provider is certified, the EU-US Data Privacy Framework. You may request a copy of the relevant safeguards via privacy@clubmeister.app.

8. Data Storage and Security

Your data is stored and managed using Supabase, hosted on Amazon Web Services in the United States. We apply technical and organisational measures to protect your personal information, including encryption in transit (HTTPS/TLS), hashed passwords, row-level access controls in the database so members can only see data they are entitled to, and restricted administrative access. No method of transmission or storage is completely secure, but we work to protect your data and to keep these measures under review.

9. Your Rights

Under the GDPR (and equivalent laws) you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict processing in certain circumstances.
• Object to processing based on our legitimate interests.
• Data portability — receive your data in a structured, machine-readable format and have it transferred where technically feasible.
• Withdraw consent at any time for processing based on consent (e.g. SMS or push notifications), without affecting the lawfulness of processing before withdrawal.

You can exercise many of these directly in the app (editing or removing your data, deleting content, or deleting your account). For any request, contact privacy@clubmeister.app; we will respond within the time limits set by law (generally one month). You also have the right to lodge a complaint with a data-protection supervisory authority in your country of residence or work.

10. Data Retention and Deletion

We keep personal data only for as long as needed for the purposes described in this policy. In particular:

• Attendee data linked to an event (such as first and last name) is deleted from the server when the event is removed.
• Content you create (messages, posts, profile fields) can be deleted by you in the app at any time.
• When you delete your account, we delete or anonymise your personal data, except where we must retain limited records to meet a legal obligation (for example, payment/transaction records for tax and accounting).
• Analytics data is pseudonymous and retained in aggregate.

11. Children's Privacy

ClubMeister is used by sports clubs and teams, which may include minors. Where a member is under the age required for consent in their country, an account should be set up and managed with the involvement of a parent, guardian, or the club administrator responsible for that member. We do not knowingly collect data from children beyond what a club needs to manage participation. If you believe a child's data has been provided without proper authorisation, contact us and we will address it.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will post the updated policy on this page and revise the "Last Updated" date above. For material changes we will provide a more prominent notice where appropriate.

13. Contact Us

If you have any questions about this privacy policy or our data practices, or to exercise your rights, please contact us at:

privacy@clubmeister.app