Privacy policy

This app is operated by YoungCow Media LLC for AYSO Region 820 (Menifee, California) — built and run by a league volunteer as a contribution to the region. It exists to give registered soccer families their schedules, rosters, and league communications, and it is used only for that purpose.

Registration and consent happen elsewhere

Families register with AYSO through AYSO’s national registration system (Sports Connect). That system — not this app — collects payment and obtains the parental consent that lets a child take part. This app is a companion tool: it receives a family’s roster from that system and adds the season’s schedules, communications, and safety records. Questions about registration, payment, or consent go to AYSO Region 820 or to AYSO’s own registration system.

Accounts are for adults only

Only parents, guardians, coaches, and league administrators create accounts. Children do not have logins and cannot sign in. Player information is entered by the league from its own registration records, not collected from children.

Children’s privacy

We collect nothing directly from children. Children have no logins and cannot sign in. There is no part of this app a child signs up for, and we ask a child for nothing — no email, no photo, no location, no device identifier.

A player’s record reaches us a different way. AYSO Region 820 enters it from its own registration records in AYSO’s national system (Sports Connect), where a parent or guardian registered the child and gave the consent that lets them take part. That consent is given to the region, before this app is involved, and it is the consent this app relies on.

The federal Children’s Online Privacy Protection Act (COPPA) governs collecting personal information online from children under 13. We describe how this works rather than claim a certification: nobody has audited or certified this app, and we are not going to imply otherwise. If you believe a child has somehow given information directly to us, write to the address at the end of this page and we will delete it.

What we store

About adults: email address, and optionally name and phone number. Email is used to sign in and to send account and league notifications.

About players: first and last name, birthdate, division, team assignment, jersey number, and the household they belong to. This comes from AYSO Region 820’s registration records.

Activity: messages you send in team chat and direct messages, photos or video shared with a team, and whether you marked a player as attending an event. So that minors stay safe, messages and media can be reported, and AYSO Region 820 can review what is reported.

Safety records: if a coach or league official files an incident report, it contains the details AYSO's national form requires, including injury information and, for a minor, guardian contact details. These are visible only to the Regional Commissioner and Safety Director.

Access and error records: when a league administrator looks at player or family information, and when a household approves, renews or removes someone’s access, we keep a dated record of who did what. These are safeguarding records and are not deleted. When a screen in the app fails, we also keep a short-lived record of which account, which screen and what error, so the problem can be fixed; those records are kept only briefly.

Who can see a player’s information

Access is restricted at the database level, not merely hidden in the app. A player’s information is visible only to: adults in that player’s own household, the coaches of that player’s team, and AYSO Region 820 administrators. Coaches are background-checked volunteers; a team manager who only helps with logistics (snacks, scheduling) is treated as a parent and is not given access to other families’ information.

There is no directory, search, or roster browsing that would let one family look up another family’s child.

Even the people who build and maintain the app cannot browse your child’s information. Access is tied to a specific, accountable role — a background-checked coach on the team, or a Region 820 administrator — not to whoever operates the software. The database refuses everyone else, developers included.

A family controls who joins it

A family decides who may see its own players, and only an approved email address can join a household. Approval comes from two places: the league’s roster import approves the parent and guardian addresses it holds for each registered child, and an adult already in the household can approve a further address — a spouse, a grandparent. A person signs in with an approved email and joins with one tap; an unapproved email is turned away. A household can remove someone’s access at any time, which also ends their ability to rejoin — until an adult in the household approves that address again, or the region’s next roster import lists it again. An approval that came from the roster import lasts for the season it was imported for: once a new season begins, an address the new roster does not list can no longer join with one tap — signing in still works, and an adult already in the household can approve that address again. This is how a family keeps access with a spouse or grandparent while keeping it from anyone they choose not to add.

What we do not do

We do not sell personal information. We do not share it with advertisers or sponsors. We do not use it for advertising or build advertising profiles. We do not track users across other apps or websites.

California privacy law

What we do with personal information is described above, and it does not depend on which statute applies: we do not sell it, we do not share it for cross-context behavioural advertising, we do not use it for advertising at all, and we do not build profiles. You can see and correct your own details in the app, you can delete your account there, and the records that survive a deletion are listed below rather than buried.

Whether California’s Consumer Privacy Act applies to a company this size turns on thresholds about the company rather than on what the app does, and that question is with our reviewer. We are not going to assert an answer to it here while it is open. If it applies, the rights it gives you are the ones this page already describes, and we will name them explicitly.

Service providers

We use Supabase for database hosting and authentication, Vercel for web hosting, an email delivery provider to send sign-in codes and notifications, and a push notification provider to deliver alerts to your phone or browser. These providers process data on our behalf under their own security commitments.

Push notifications are delivered through that provider, so we keep their contents brief. A push about a warning from an administrator, or about a concern you have raised with the league, is sent only as a prompt to open the app: it does not name what it is about, so it will not appear on your lock screen where someone else could read it. The details are kept in the app.

A warning from an administrator is also emailed to you, and that email does include the reason you were given. We send it so that you find out even if you do not open the app. Like our other email, it is delivered through the email provider described above.

Deleting your account

You can delete your account from within the app. This makes your account unreachable by anyone using the app: your login is disabled and your personal profile — your name, email, and phone — is removed.

A few records are kept even after you delete, because AYSO policy or the safety of children requires it. We would rather tell you exactly what those are than imply everything disappears:

Incident reports. If an incident report (injury, illness, or a similar safety record) was filed involving you or your child, AYSO requires the region to retain it for at least 15 years. It is kept even after your account is deleted, and is visible only to AYSO Region 820’s Regional Commissioner and Safety Director.

Messages you sent. Team chat and direct messages you wrote, and any safety reports about them, are kept as part of the league’s safeguarding records. Once your account is deleted they no longer carry your name — they show as “Former member” — but the messages themselves remain.

A record that the account was deleted. We keep a dated, administrator-only log entry noting that the account was deleted, including the email address it used. This is a safeguarding and accountability record — how the league can later answer who had access and when — so that one internal log is not erased.

A record of the terms you agreed to. When you accept our terms of service and this privacy policy, we keep a dated record of which version you agreed to, the email address your account used, and the browser and device type you were using at the time. It cannot be edited or deleted afterwards — that is what makes it a reliable record — so it remains after the account is deleted. It is visible only to you and to AYSO Region 820’s Regional Commissioner.

Your children’s records belong to AYSO Region 820’s registration system (Sports Connect), not to this app. If you want a child’s information removed, ask AYSO Region 820. The region first confirms there is no outstanding safety or eligibility reason to keep it, and once the region approves, it can be removed. We act on the region’s decision rather than deleting a child’s record on our own.

Contact

Questions about this policy or your data: [email protected].

Legal notices — and copyright complaints about a photo or a message posted in the app — go to:

YoungCow Media LLC
30060 Typhoon Ct
Menifee, CA 92584
[email protected]

We have not designated a copyright agent with the U.S. Copyright Office; whether we should is an open question for our reviewer. A complaint sent to the address above is acted on either way.

These practices are part of our Terms of Service.