Privacy Policy

Effective August 1, 2026

Sideout is a volleyball community app operated by Malcolm King ("Sideout", "we", "us"). This policy explains what information we collect, why we collect it, who we share it with, and what happens to it when you delete your account.

If anything here is unclear, email support@sideoutvb.app.

What we collect

Information you give us

Account details — your email address and password. Passwords are hashed by our authentication provider; we never see or store them in readable form.
Profile details — your name, username, profile photo, home city, playing positions, skill level, preferred format, dominant hand, and (optionally) height and vertical jump.
Content you create — messages in direct, team, and event chats; event listings you host; ratings and comments you leave; reports you submit; and any feedback you send us.
Waiver agreements — if a host requires a waiver, we record that you accepted it, which version you accepted, and when.

Information created by using the app

Participation records — events you sign up for, roster slots you claim, check-ins, attendance and no-show records, reliability, match results and scores.
Payment records — the amount, currency, status, and Stripe reference for each payment, refund, and host payout.
In-app items — Digs, purchased cosmetics, and player stats.
Technical details — a push notification token so we can notify you, and your app version, platform, and operating system version, which are attached to feedback and error reports so we can reproduce problems.

What we do not collect

We do not track your device location. Sideout does not request or use GPS, background location, or precise device location at any point. The only location information we hold is the city you enter on your profile and the venue address a host types when creating an event.

We do not store card numbers, bank account numbers, or government identification. Those go directly to Stripe (see below).

How we use it

To run the service — showing events, managing rosters, delivering messages, recording check-ins and scores.
To take payments, issue refunds, and pay hosts.
To show relevant events near your city, and to help hosts and captains decide who joins their team.
To keep the community safe — reviewing reports, acting on blocks, and maintaining attendance and reliability records.
To send you notifications about events you're involved in, and to respond when you contact us.
To meet legal and accounting obligations.

We do not sell your personal information, and we do not show advertising.

Who we share it with

Who	What they receive	Why
Stripe	Payment details you enter, and — if you host paid events — your identity and bank details, entered directly on Stripe's own pages	To process payments and pay hosts. Stripe is the payment processor; Sideout never receives your card or bank numbers.
Supabase	The data described above	Database and authentication hosting.
Expo	Your push token and notification contents	To deliver push notifications.
Place search provider	The text you type when searching for a venue or city	To turn what you type into a real place. Sent through our server, not from your device.

We may also disclose information if we are legally required to, or where it is necessary to investigate a safety issue or to establish or defend a legal claim.

What other people can see

Some of what you enter is visible to other users. In particular:

Your name, username, photo, city, positions, skill level, reliability, and ratings are visible to other players — for example in a player pool, on a roster, or on the recruit board.
Messages are visible to the other members of that conversation.
If you host an event, your name is shown on the listing.

Event locations

An event's exact address is only shown to people who hold a spot in it, and to the host. Everyone browsing sees the date, an approximate area, and a general time — not the precise venue. This is deliberate: people meet strangers at these events, and the precise where and when shouldn't be public.

This reduces risk; it does not eliminate it. Anyone who signs up can see the address, and we can't control what they do with it.

How long we keep it, and what happens when you delete your account

You can delete your account at any time from Profile → Settings → Delete account. It does not require contacting us.

Deleting your account removes your profile and your social presence, but it does not erase records that other people or the law depend on. Specifically:

We delete	We keep, with your name removed
Your profile, photo, and username Your login Your messages and friend connections Saved event templates Digs, purchased items, and stats	Payment and refund records — required for tax and accounting, and because a card dispute can arrive months after a payment Waivers you accepted — they are the record that you agreed to them Check-ins, ratings, and match results — other players' attendance records and scores depend on them, and removing yours would change theirs

On the records we keep, your name, email, photo, and city are removed. You appear as "Deleted user". Your login is neutralised, so you can no longer sign in — and the email address becomes free to register again.

Where we keep records for legal or accounting reasons, we keep them for as long as the relevant law requires, and no longer.

Your rights

You can view and change most of your information directly in the app, and you can delete your account yourself at any time.

Depending on where you live, you may also have the right to request a copy of your information, ask us to correct it, ask us to delete it, or object to certain uses. If you are in California, this includes rights under the CCPA/CPRA — including the right to know what we collect and to request deletion. We do not sell or share personal information for cross-context behavioural advertising. If you are in the UK or EU, our legal bases for processing are performing our contract with you, complying with legal obligations, and our legitimate interest in keeping the community safe.

To exercise any of these, email support@sideoutvb.app. We will not treat you differently for asking.

Security

Data is encrypted in transit. Access to the database is restricted per-user at the database level, so one user cannot read another's private data. Payment card data is handled entirely by Stripe, a PCI-compliant processor, and never reaches our systems.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you as required by law.

Children

Sideout is intended for people aged 18 and over. We do not knowingly collect information from children under 18. If you believe a child has created an account, email support@sideoutvb.app and we will remove it.

Changes to this policy

If we change this policy in a way that materially affects you, we will let you know in the app or by email before the change takes effect. The date at the top always reflects the current version.

Contact

Malcolm King
support@sideoutvb.app