Interim beta — pending legal review. This copy is a plain-English placeholder so you know roughly what you're agreeing to. Final, lawyer-reviewed terms will replace this before Klubby leaves beta, and we'll email you if anything meaningful changes.

Privacy Policy

This explains what Klubby does with your personal data. It's deliberately short and written in plain English — a lawyer-reviewed version lands before we leave beta.

What we collect

The email address you sign in with, any details you enter about your club (name, logo, committee members, module data), and a small amount of technical data (IP address, browser type) needed to run the service securely. We don't use tracking cookies for advertising.

Why we have it

We use your data only to run Klubby for your club: to sign you in, show you the right information, send transactional emails (invites, trial expiry), and keep the service working and secure. We don't sell your data and we don't use it to train AI models.

Who else sees it

We use a small number of trusted processors to operate the service:

Supabase — database and authentication (EU region).
Vercel — hosting.
Resend — transactional email.
Sentry — error monitoring (personal data stripped before sending).
Upstash — rate limiting.
Anthropic — AI text and document processing. When you use the assistant features (sorting transactions, reading a receipt image, reading a bank statement PDF), the relevant content is sent to Anthropic's API to be processed and a result returned. Anthropic does not use API data to train its models and retains content for at most 30 days for safety review only.

Each of these has their own privacy terms. We don't share your data with anyone else.

How long we keep it

Your data stays in Klubby until you or another admin at your club deletes your club, at which point it's removed permanently within 30 days. Technical logs (error reports, infrastructure metrics) are kept by our infrastructure providers (Sentry, Vercel, Supabase) under their own retention policies; see their terms for specifics.

Financial data and HMRC retention

UK clubs are required by HMRC to keep transaction records for six years from the end of the financial year in which they were recorded. Klubby stores your transaction records, receipts, and related financial data for as long as your club account is active. We recommend you export your year-end accounts (Settings → Reports → AGM pack) at the end of every financial year and keep a copy outside Klubby. If your club deletes its Klubby account, the underlying records are removed within 30 days alongside everything else; you remain responsible for retaining the exported records for the statutory six-year period.

Federation linking

If your club is part of a federation or league that uses Klubby, you can link to them — either when you create your club (via the federation picker in the sign-up form) or later in Settings → Federation.

When a link exists, the federation can see: your club's name, the list of Klubby modules you have switched on, and the timestamp of when the link was created. That is all. They cannot see anything inside those modules — your transactions, member records, meeting minutes, uploaded files, or any other data your club holds in Klubby stays private to your club.

To end the data-sharing relationship, go to Settings → Federation and remove the link. This deletes the federation link record immediately and the federation can no longer see your club in their dashboard.

Your rights under UK GDPR

You can ask us for a copy of your data, ask us to correct or delete it, ask us to stop using it, or ask us to hand it over in a portable format. Email the Klubby team and we'll action the request within 30 days. You can also complain to the ICO (ico.org.uk) if you think we've got something wrong.

Questions

Contact the Klubby team directly for anything else.