Ballers HQ

Privacy

Privacy policy

This explains what Ballers HQ records, why it is needed, what becomes public, and what happens when you delete your account.

Effective and last updated: September 29, 2026

Who is responsible for your information

Nhyira Mante is the data controller for Ballers HQ. Questions, privacy requests, and complaints can be sent to nhyiramante1@gmail.com. You can also use the contact route on the Support page.

Information the service holds

  • Account identity: your sign-in provider and provider identifier, name, email address, verification status, profile image supplied by Apple or Google, and provider tokens and scopes created during sign-in when supplied.
  • Football profile: your account name, optional football nickname, preferred positions, shirt number, optional social platform and handle, notification preference, profile visibility, player or organiser mode, lineup-view preference, cross-squad rating choice, onboarding progress, founding-badge state, suspension status and reason, rating, and attendance summary.
  • Squads and matches: squad membership and invitations; match venue, time, notes and team settings; RSVPs, lineups, roles, check-ins, attendance, ratings, and vouches.
  • Guest information: a guest name and, when supplied, Snapchat handle, shirt number, and preferred position. A host must approve a public guest before they count as confirmed.
  • Safety information: reports, their category and details, a snapshot of the reported name, blocks, review status, and moderation actions.
  • Feedback: feedback or bug-report text, app version, platform, submission time, and your account when you are signed in.

Location and check-in

Check-in uses coordinates you submit during the check-in window to measure your distance from the match venue. Raw latitude and longitude are used for that request and are not saved in the database. The audit record keeps the rounded distance, reported accuracy, venue radius, check-in time, and whether distance enforcement was bypassed for testing.

When a squad owner or manager adds a pitch, the coordinates they choose using their current location or a dropped pin are saved as the pitch location. Choosing I'm at the pitch now reads the device location once; dropping a pin uses the coordinate selected on the map and does not read the device location. The saved pitch record includes its coordinates and who added it, but the service does not keep a separate device-location reading or a user movement history. The pitch coordinates are needed for directions, nearby-pitch checks, and match check-in. Device location is requested only when you choose check-in or I'm at the pitch now.

Ballers HQ does not request or use background location.

Device and technical information

The service keeps authentication sessions, which may include IP address and user-agent, and standard hosting logs may record request time, route, device/browser information, errors, and network address. If you enable notifications, the service stores the native device push token, platform, app build when supplied, registration time, and last-seen time. The app does not include advertising or behavioral analytics SDKs. Feedback pacing stores a keyed one-way token derived from your account or request address; the feedback record does not retain the raw address.

What is public or shared with other players

Squad search exposes a squad name, handle, and member count. A public match link can be opened without signing in and shows the venue area, kickoff, match status and counts, participant display names, member profile images, positive reliability marks, an optional social platform and handle where that player's visibility permits it, optional guest shirt/position details, and claimed equipment roles. Do not put private or sensitive information in names, social handles, squad names, match notes, or guest details.

Signed-in squad members see the fuller squad roster and match record needed to organise games, including reliability, attendance, positions, ratings, and lineup assignments. They also see the name and profile image of a person with a pending invitation from their squad. Individual ratings remain hidden during the rating window. After reveal, a rated player sees the average and the raters' names only when the minimum number of ratings is met; individual scores are not shown. Blocking hides the people involved from discovery and roster identity where possible; existing match counts and historical records may remain with identity masked.

How information is used

  • Authenticate accounts and keep sessions secure.
  • Organise squads, matches, attendance, lineups, ratings, and reminders.
  • Show truthful turnout and reliability information to the people organising a match.
  • Send match notifications when enabled.
  • Prevent abuse, investigate reports, enforce blocks, and suspend harmful accounts or squads.
  • Review feedback, reproduce reported bugs, and improve the product.
  • Diagnose failures, protect the service, and meet legal obligations.

Ballers HQ does not sell personal information.

Legal bases in the UK and European Union

For people in the UK and European Economic Area, the legal basis depends on the purpose:

  • Contract: information needed to create and secure your account, run squads and matches, record RSVPs and lineups, perform check-in, and provide ratings, attendance, and other features you ask the service to provide.
  • Legitimate interests: information needed to keep the service safe, prevent fraud and misuse, investigate reports, enforce blocks and community standards, diagnose failures, and protect accounts. These uses are limited to what is necessary and balanced against players' rights.
  • Consent: optional match notifications, precise device location when you choose check-in or I'm at the pitch now, and a precise coordinate when you choose Drop a pin. You can turn notifications off in Account and withdraw device permissions in system settings. Withdrawing consent does not affect processing that was lawful before withdrawal. A pitch location already submitted remains part of the squad's venue record unless it is deactivated or removed.
  • Legal obligation: information used when reasonably necessary to comply with applicable law or a valid legal request.

Service providers

Information is processed only as needed to run the service:

  • Apple and Google provide sign-in identity; Apple also delivers iOS notifications through APNs.
  • Vercel hosts the website and API and processes request and deployment logs.
  • Neon hosts the production PostgreSQL database.
  • Upstash QStash schedules callbacks for match reminders and rating reveal jobs using limited match identifiers and timing data.
  • Expo provides mobile build, update, and notification tooling.
  • Apple MapKit provides map search and pin placement when Add a pitch uses Drop a pin.

Expo notification libraries obtain the native device token, but iOS notifications are currently sent directly through Apple rather than through the Expo Push relay.

International transfers

The service is operated from and stores or processes information in the United States. This includes processing by Vercel, Neon, Expo, Apple and Google sign-in, Apple push notification services, Upstash QStash, and Apple MapKit when you use the pin page. The United States may not provide the same data-protection rights as your home country.

Where UK or EU transfer rules require a safeguard, the service relies on the provider's applicable Standard Contractual Clauses and, for UK transfers, the UK Addendum where the provider offers them. Other lawful transfer mechanisms may apply where available. Contact support if you want more information about the safeguard used for a particular provider.

Retention and account deletion

Active account and match information is kept while the account and service operate. There is not currently a fixed automatic deletion schedule for match, safety, or audit records. Moderation reports may be retained to document abuse and enforcement. Product feedback may be retained while it remains useful for support and product history.

You can delete your account inside Profile → Account → Delete account. Deletion immediately removes sign-in connections, sessions, push tokens, profile image, social handle and platform, and memberships, and replaces the email and identifying account/profile names with anonymous placeholders. Pending squad invitations addressed to the account are closed. Invitations the person sent on a squad's behalf remain available to that squad with the sender shown as “Former player.” Historical match, attendance, rating, and event records are retained under “Former player” so other players' completed match history remains accurate. A name snapshot in a retained safety report may also remain. Hosted future matches are transferred to an eligible member or cancelled, and pending organiser offers to the deleted account are cleared.

Choices and safety controls

You can edit profile fields and turn match notifications off in Account. You can report a player from their player card, report a squad from the Squad tab, and block another player. For deletion questions or a privacy concern, use the current contact method on the Support page.

Your UK and EU rights

Depending on the circumstances, UK and EU data-protection law gives you the right to ask for access to your personal information, correct inaccurate information, erase it, restrict how it is used, receive portable information you supplied, or object to processing based on legitimate interests. You can edit many profile fields in Account and use the in-app deletion flow for erasure. For any other request, email the controller at nhyiramante1@gmail.com. Identity may need to be verified before a request is completed, and some rights have legal exceptions, including retaining anonymised match history and safety records.

You may complain to the UK Information Commissioner's Office or, in the EU, the supervisory authority in the country where you live, work, or believe a data-protection issue occurred.

Children and changes

Ballers HQ is intended for student and adult pickup-football groups. You must be at least 16 to use the service in the UK or European Union. Elsewhere, the service is not directed to children under 13, and a higher local minimum age applies where required. If information from a child below the applicable age is believed to have been submitted, contact support. Material policy changes will be posted here with a new effective date.