Privacy Policy

RinkSheet is a mobile application that helps parents track their child's hockey statistics, practices, and wellness. This policy explains what data we collect, how we use it, and your rights as a user.

We built RinkSheet with privacy as a core principle — no advertising, no third-party data brokers, no selling your information.

RinkSheet is operated by Pronetico (Brian Lee). If you have questions about this policy, contact us at privacy@rinksheet.app.

Account Data

• Email address (required to create an account)
• Password (stored as a hashed credential — we never see your plain-text password)
• If you sign in with Apple or Google: your name and email address as provided by that service. Apple lets you hide your real email and share a private relay address instead — RinkSheet fully supports this. We receive no other data from Apple or Google, and we never post or act on your behalf.

Player & Stats Data

• Player profile information you enter: name, position, jersey number, birthdate (optional), height/weight (optional)
• Game data you log: dates, opponents, scores, stat events (goals, assists, shots, etc.)
• Practice logs: dates, duration, type, notes
• Wellness entries: sleep hours, mood ratings, energy levels, soreness notes

This data is entered entirely by you. We do not collect it automatically or infer it from device sensors.

Technical Data

• Crash reports and error logs via Sentry (see Section 6)
• App version and device OS version (included in crash reports only)

Data We Do NOT Collect

• Location data
• Device contacts
• Camera or photo library (unless you explicitly upload a player avatar)
• Advertising identifiers
• Browsing history or activity outside RinkSheet

RinkSheet is designed for use by parents to track information about their child athletes. We do not knowingly create accounts for or collect personal information directly from children under 13.

• The account holder is always the parent or guardian — not the child
• Player profiles contain athletic statistics, not personal communications or social data
• We do not display advertising to any users, including those who may be minors
• Player data is private to the account holder and is never shared publicly

If you believe a child under 13 has created an account without parental consent, contact us at privacy@rinksheet.app and we will delete the account promptly.

We use the data you provide to:

• Power the app's core features (stat tracking, trends, insights)
• Sync your data across devices via our cloud backend (Supabase)
• Send password reset emails when requested
• Diagnose and fix crashes and bugs (via anonymized crash reports)

We do not use your data for:

• Advertising or marketing to third parties
• Building advertising profiles
• Training AI or machine learning models
• Any purpose other than providing the RinkSheet service to you

Your data is stored in two places:

1. On your device — in a local SQLite database. This enables offline use and fast performance.
2. In the cloud — in our Supabase-hosted PostgreSQL database on AWS infrastructure in the United States.

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to your data is protected by Row Level Security (RLS) policies — our server enforces that you can only read and write your own data, even at the database level.

We use Sentry (sentry.io) for crash reporting. When the app crashes or encounters an error, a report is automatically sent that includes:

• The error message and stack trace
• App version and device OS version
• A random anonymous session ID (not linked to your account)

What Sentry does NOT receive:

• Your email address
• Player names or stat data
• Any personally identifiable information

We have configured Sentry to strip all user identity fields before transmission. Sentry's privacy policy is available at sentry.io/privacy.

We do not sell, rent, or share your personal data with third parties, except:

• Supabase — our database and authentication provider. They process data on our behalf under their Data Processing Agreement.
• Sentry — our crash reporting provider. Receives anonymized technical data only (see Section 6).
• Legal requirements — if required by law, court order, or to protect the safety of our users.

Both Supabase and Sentry are SOC 2 certified.

Access and Portability

You can export all your game and season data at any time from the app (More → Export Stats). This produces a CSV file you can open in any spreadsheet application.

Correction

You can edit any data you've entered directly in the app.

Deletion

You can delete your account and all associated data from Settings → Delete Account & All Data. This permanently removes your profile and all player, game, practice, and wellness data. Deletion is irreversible.

Alternatively, email privacy@rinksheet.app and we will delete your account within 30 days.

Data Requests

To request a copy of all data we hold about you, email privacy@rinksheet.app. We will respond within 30 days.

• Active account data is retained as long as your account exists
• Deleted accounts are purged from our systems within 30 days of deletion
• Crash reports in Sentry are retained for 90 days

If we make material changes to this policy, we will notify you via an in-app notice before the changes take effect. The "Last Updated" date at the top of this document reflects the most recent revision.

Continued use of RinkSheet after changes take effect constitutes acceptance of the updated policy.

Questions, concerns, or data requests:

Email: privacy@rinksheet.app
Website: rinksheet.app/privacy

Pronetico
Brian Lee