Privacy Policy

We collect information in three ways.

Information you provide

• Account information — name, email, phone number, role (director, coach, manager, parent, athlete), and the organization you are affiliated with.
• Player profiles — name, date of birth, age group, jersey number, position, photo, parent or guardian contact, emergency contact, and any health information (such as allergies or conditions) a parent or director chooses to enter.
• Communications — messages, attachments, and reactions you send through Cheers (our messaging feature) or our support channels.
• Payment information — processed by our payment provider (Stripe). We receive only the card brand, last four digits, and billing ZIP.
• Inquiries — when you contact us or join the waitlist, we collect the name, email, organization, and message you provide.

Information collected automatically

• Device and usage data — IP address, browser type, operating system, pages visited, time on site, referring URL, and similar information.
• Cookies and similar technologies — see Section 9 below.
• Diagnostic data — error reports and performance metrics used to improve reliability (collected via Sentry).
• Product analytics — aggregated page views and feature usage (collected via Vercel Analytics).

Information from third parties

• Tournament data — when you import a tournament via a URL or flyer, we process the public information posted by the tournament organizer.
• Service providers — vendors share status and event data with us so we can deliver the Service to you.

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate you and protect your account.
• Send transactional communications such as event reminders, RSVPs, payment confirmations, and security alerts.
• Send marketing communications about Konvoy (you can opt out at any time).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use your information for cross-context behavioral advertising.

We share information only with:

• Other users of your organization — your director sees the rosters and finances they administer, your coach sees the players on their team, and parents and athletes see only their own data and the team's shared schedule.
• Service providers — vendors who help us operate the Service (hosting via Vercel, database via Supabase, error tracking via Sentry, email via Resend, payment processing via Stripe). They are contractually limited to using your data to provide their services to us.
• Legal compliance — if we are required by law, court order, or to protect Konvoy, our users, or the public.
• Business transfers — if Konvoy is acquired, merged, or sold, your information may transfer subject to this policy.

We never share player information with advertisers, data brokers, or third-party analytics companies.

Konvoy is built for youth sports and many athletes in the Service are under the age of 13. We comply with the U.S. Children's Online Privacy Protection Act (“COPPA”) and the FTC's implementing rule.

• A child's information is added to the Service only by a parent, legal guardian, or an organization administrator authorized by a parent or guardian.
• A parent or guardian is the only person who can give consent for a child under 13 to receive direct communications, sign in, or use Konvoy independently.
• Parents can review, correct, or delete their child's information at any time by contacting us at privacy@gokonvoy.com.
• We collect only the information reasonably necessary to provide the Service.
• We do not condition a child's use of the Service on collecting more information than is necessary.
• We do not knowingly send marketing material to children.

If you believe we have collected a child's information without proper consent, contact privacy@gokonvoy.com and we will delete it promptly.

You can:

• Access the information we hold about you.
• Correct information that is inaccurate.
• Delete your account by contacting privacy@gokonvoy.com. Some information may be retained as required by law or for legitimate business needs (see Section 11).
• Opt out of marketing emails by clicking “unsubscribe” in any marketing email we send.
• Adjust cookie preferences through your browser settings.

We will respond to verifiable requests within 30 days.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• Right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete your personal information, subject to exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Right to limit the use of sensitive personal information.
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, contact privacy@gokonvoy.com. We will verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf.

Residents of Colorado, Connecticut, Utah, Virginia, and other states with comprehensive consumer privacy laws have rights similar to those described in Section 6. To exercise them, contact privacy@gokonvoy.com.

Konvoy is operated in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country of residence.

We use cookies and similar technologies to:

• Keep you signed in to your account.
• Remember your preferences (such as your theme or default role view).
• Measure how the Service is used so we can improve it.
• Detect security threats and prevent abuse.

You can disable cookies in your browser settings. Parts of the Service may not work properly without them. We respect Global Privacy Control (GPC) signals where applicable.

We use industry-standard safeguards including encryption in transit (TLS), encrypted storage at rest, role-based access controls, vulnerability scanning, and incident response procedures. No system is perfectly secure; if a breach affects your information, we will notify you and the appropriate authorities as required by law.

We retain your information for as long as your account is active or as needed to provide the Service. After you delete your account, we may retain limited information to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Retained data is securely deleted at the end of the legally required period.

The Service integrates with third-party services for hosting, payment, analytics, and communication (see Section 3). These services have their own privacy policies, which we encourage you to read. Tournament import processes information publicly posted by tournament organizers; we are not responsible for the privacy practices of those organizers.

We may update this Privacy Policy from time to time. When we do, we will update the “Effective Date” at the top of this page and, for material changes, notify you by email or in-app message. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions, to exercise your rights, or to report a concern:

Konvoy Sports
Email: privacy@gokonvoy.com