Privacy Policy
This explains what Klubby does with your personal data. It's deliberately short and written in plain English — a lawyer-reviewed version lands before we leave beta.
What we collect
The email address you sign in with, any details you enter about your club (name, logo, committee members, module data), and a small amount of technical data (IP address, browser type) needed to run the service securely. We don't use tracking cookies for advertising.
Why we have it
We use your data only to run Klubby for your club: to sign you in, show you the right information, send transactional emails (invites, trial expiry), and keep the service working and secure. We don't sell your data and we don't use it to train AI models.
Who else sees it
We use a small number of trusted processors to operate the service:
- Supabase — database and authentication (EU region).
- Vercel — hosting.
- Resend — transactional email.
- Sentry — error monitoring (personal data stripped before sending).
- Upstash — rate limiting.
Each of these has their own privacy terms. We don't share your data with anyone else.
How long we keep it
Your data stays in Klubby until you or another admin at your club deletes your club, at which point it's removed permanently within 30 days. Technical logs are kept for 90 days.
Your rights under UK GDPR
You can ask us for a copy of your data, ask us to correct or delete it, ask us to stop using it, or ask us to hand it over in a portable format. Email the Klubby team and we'll action the request within 30 days. You can also complain to the ICO (ico.org.uk) if you think we've got something wrong.
Questions
Contact the Klubby team directly for anything else.