Privacy Policy

Version 1.0 · Last updated: 30 October 2026

This Privacy Policy explains how BraindAI Pty Ltd (ABN 61 701 238 968) ("we", "us", "our") handles personal information in connection with the ScorePuppy app, website and scoreboard (the "App"). We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

Summary

• ScorePuppy runs sports leagues, amateur or pro: teams, fixtures, scores, tables, player stats, "Are you playing?" and league news.
• Most people never create an account. Players, parents and fans join a league with its code; the App gives the phone a random, anonymous ID. Organisers (and anyone who wants to keep their access on a new phone) can add an email address.
• Leagues aren't public or searchable. Anyone who has a league's code can see it, so only share the code with your league. There is no public profile, no feed, no chat and no messaging between members.
• Children are added by a parent or guardian (or by an organiser who confirms a parent or guardian agreed) and never get their own account. They're shown as first name and surname initial unless their parent or guardian agrees to the full name (see section 6).
• No ads, no advertising or analytics tracking, no selling. The App contains no advertising or analytics tools, and we never sell or rent personal information.
• No marketing emails, and no AI on your data. We don't send promotional emails or texts, and we don't use artificial-intelligence tools to analyse your information or train models on it.

1. Information we hold and how we get it

We collect information from you, and from the league organiser, team staff, or a parent or guardian who adds you to a league. Without your name on a team list, the league can't show your results or stats.

We don't collect dates of birth, phone numbers, contacts, your precise location, or payment card details. Our providers see your IP address, which can show your approximate area. For under-18s we only record that the player is under 18 and, if a phone is connected, that they are 13 or over. League fees are paid outside ScorePuppy, on whatever the organiser links to; we only store the status the organiser or player records.

2. Who can see what

• League members (anyone with the league code) see the league's fixtures, results, table, team lists and stats, with player names shown the way the league chose (full name, first name + initial, or nickname). Under-18s are shown as first name + initial, unless their parent or guardian agrees to the full name.
• Organisers and team staff also see what they need to run the league: answers to "Are you playing?", payment status, staff lists (including staff email addresses), and requests from players to join or to be linked to a player.
• Announcements are seen by the group the organiser sends them to (whole league, players, or one team).
• Activity log: the owner and moderators see who changed what in the league (with the email of the organiser who made the change) for 30 days, so mistakes or misuse can be undone.
• Scoreboard: a league's scoreboard (on a screen or projector, opened with the league's scoreboard code) shows team names, the score, the clock and shirt numbers for goals and penalties — never player names.
• Change of league owner: an owner can hand a league over, and if an owner can't be reached, a moderator can take it over (see the Organiser Terms, section 8). In that case, or on a request we've checked, control of the league and the player information in it passes to the new owner.
• We can access the data to run, secure and support the service. We look at it only when needed for that, and our staff's access is limited.
• The league and us. Each league's organiser decides what information about its players goes into ScorePuppy and how the league uses it; we hold and process it to provide the App for them. Requests about a league's information can go to the organiser or to us.
• When the law requires it. We may disclose information to police, a court or another authority when the law requires or authorises it, to investigate a breach of our terms, or when we reasonably believe it's needed to lessen or prevent a serious threat to someone's life, health or safety (for example, a child at risk).
• If ScorePuppy changes hands. If our business or the App is sold, merged or transferred, the information may move to the new owner, who must keep protecting it under this policy. We'll tell you in the App before that happens.

3. Where your information goes (our service providers)

We use these providers to run the App. They act for us and may only use the information to provide their service. Some are outside Australia (APP 8):

Where information goes overseas, we take reasonable steps for it to be handled consistently with the APPs.

4. Notifications and emails

If you allow notifications, the App stores a push token for your phone and your language. We use it only for things related to leagues you follow:

• league news, and game changes (moved, postponed, cancelled);
• reminders to answer "Are you playing?", and a captain's reminder to answer;
• league fee reminders (also on a teen's connected phone, so they can tell their parent);
• for owners, moderators and team captains/managers: someone asked to join a team, said "That's me", or asked to delete their player profile;
• league handover and takeover notices.

Game and fee reminders can also be scheduled on your phone itself. You can turn notifications off at any time in the App (Settings → Notifications) or in your phone's settings.

Emails go out only for account codes (sign-in, confirming your address, resetting your password), the code to confirm deleting a league, and league ownership notices (handover and takeover). They never contain advertising.

5. How long we keep it

• Your account and what's linked to it are kept until you delete it (Settings → Delete my account or data). Leagues you own are then handed to a moderator, or deleted if there isn't one. If you play in a league, your games and stats stay in its history as "Former player", without your name, nickname or photo. Under-18s you look after are deleted completely.
• A phone without an account: kept until you delete it (Settings → Delete my account or data works for it too). Uninstalling the App alone doesn't delete it from our servers.
• League data is kept while the league exists. Results and stats stay part of the league's history; when a player is removed, their profile (name, photo) is deleted, and past games keep their scores without the name.
• Deleted information stays in the activity log for up to 30 days (so a league can be restored after a mistake or misuse), and is then permanently deleted. This doesn't apply when you delete your account, a parent or guardian removes a child, or a player's own request to delete their profile is accepted: then nothing is kept in the activity log, and earlier entries about that person are deleted straight away.
• Photos and team logos that are removed or replaced are deleted from storage within 30 days.
• How we decide: we keep information only as long as it's needed to run the leagues it belongs to, to resolve disputes or problems, or to meet a legal obligation, and for no longer than the periods above.
• Server logs (technical data) are kept for no more than 90 days.
• Feedback is kept as long as needed to deal with it.
• Under-18s: kept until the parent or guardian removes them, deletes their own account, or the league is deleted. If their team hasn't played for 12 months, their profile is deleted automatically (past games keep their scores, without the name).

6. Children (under 18)

• Children never get their own ScorePuppy account or login. You need to be 18 to create an account, so league owners, moderators, captains and team managers are always adults (for a junior or school league, a parent, coach or teacher).
• An under-18 can only be added by a parent or legal guardian, who confirms consent in the App, and only in leagues whose organiser allows junior players. An organiser adding an under-18 by hand must confirm a parent or guardian agreed.
• We keep the least information needed: first name, surname initial, shirt number, team, stats and attendance answers. No nickname, email, phone or date of birth. The full surname is stored and shown only if the parent or guardian separately agrees, and goes back to the initial when they withdraw it.
• No photos of under-18s: nobody can add one, not even a parent or guardian.
• Under 13: only the parent or guardian uses ScorePuppy for them; a child under 13 can't connect a phone.
• 13 to 17: the parent or guardian can connect the teen's own phone with a one-time code. The teen still has no account, email or password. On that phone they see their games, results and stats, get game, "Are you playing?" and fee reminders, and can answer "Are you playing?" for themselves. Only the parent or guardian manages the profile, consents and payments, and can disconnect the phone at any time.
• The parent or guardian can remove the child's information at any time; deleting the parent's account removes the children they manage, and disconnects their teens' phones.
• There is no chat or messaging in ScorePuppy; organisers can only send one-way announcements.

7. Automatic decisions

Some things happen automatically based on the information we hold:

• a league moves to a moderator if its owner doesn't respond to a takeover request within 30 days;
• paid features start or stop based on your Apple or Google subscription;
• players marked under 18 are shown as first name and surname initial (unless a parent or guardian agrees to the full name), can't have a photo, and can't be linked to an account of their own.

To have one of these reviewed by a person, email hello@scorepuppy.com. We don't make decisions with legal or similarly significant effects about you solely by automated means.

8. Your choices and rights

• See and correct your information in the App, or ask us. Before we act on a request by email, we check it comes from you (for example, by replying from your account's email address, or a code in the App). We answer within 30 days, and if we can't give access or make a change, we tell you why and how to complain.
• Delete your account and its data in the App (Settings → Delete my account or data), or remove a player you look after. You can also ask to delete your own player profile (Settings → My player profile → Leave this team → Ask to delete my profile): your phone is unlinked straight away, and the people running the team decide on deleting the profile and its stats; if they don't, email us. Organisers can remove players from their league. Can't use the App? Email us (see scorepuppy.com/delete-account).
• Withdraw consent you gave (your photo, a child's full surname, the optional feedback email) at any time in the App or by email.
• Notifications can be turned off at any time.
• Complaints: email hello@scorepuppy.com first. We'll acknowledge it promptly and respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to your local data-protection authority.

9. If you are in the EU, UK or Switzerland

ScorePuppy isn't offered in the EU, the UK or Switzerland yet. Before it is, we'll update this policy for those regions (including the representatives the law there requires). If you use ScorePuppy from there in the meantime, you can still use all the rights in section 8, and complain to your local data-protection authority.

10. Security

We protect your information with:

• Encryption in transit (HTTPS/TLS) and at rest: our database provider encrypts stored data and backups.
• Strict database rules on every table: only a league's members can read it, only its organisers can change it, and an under-18's details can only be managed by their parent or guardian. These rules are tested automatically every time we change the App.
• Passwords stored only as secure hashes, and one-time 6-digit codes to confirm your email address or reset your password.
• Least access: only the people who run the service can reach the systems, using their own protected accounts, and only when needed. Keys that unlock the database never go into the App.
• An activity log that lets a league be restored after a mistake or misuse.
• Regular security reviews of the App and the database.

No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify you and the OAIC as the law requires (the Notifiable Data Breaches scheme).

11. Aggregated statistics

We look at counts only (for example how many leagues, teams and games there are) to understand how ScorePuppy is used and to improve it. These numbers don't identify anyone.

Website and cookies. scorepuppy.com and the scoreboard page set no cookies and use no analytics or advertising tools. The scoreboard remembers its code in your browser's own storage on that computer, so it opens straight away next time; Log out on the scoreboard removes it. Its fonts and images come from our own site, so loading a page doesn't contact Google or any other company; the scoreboard only loads the game from our database provider (Supabase).

12. California

We don't sell or share personal information as those terms are defined by California law.

13. Changes

We may update this policy. If the changes are significant, we'll tell you in the App before they apply. Earlier versions are available on request.

14. Contact

Privacy Officer, BraindAI Pty Ltd · hello@scorepuppy.com · in the App: Settings → Send us a message.