RSVP MVP (“RSVP MVP,” “we,” “us”) is a scheduling and attendance tool for youth sports teams. Coaches and team managers post practices and games, and parents and guardians tell the team whether their player will be In, Out or Maybe. RSVP MVP is operated by Do Better Dev. This policy explains what personal information we collect, why, who can see it, and the choices and rights you have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), the California Online Privacy Protection Act (“CalOPPA”), and the EU and UK General Data Protection Regulation (“GDPR”).
RSVP MVP is in early access: a limited pilot with a small number of teams. The short version: we collect only what a team needs to run its schedule, we do not sell or share personal information for advertising, we use no advertising or analytics trackers, and you can ask us to see, fix or delete your information at any time.
1. Who is responsible for your information
Do Better Dev is the business (CCPA) and controller (GDPR) for account information and for operating the service. Schools, clubs and leagues (“organizations”) and their coaches and team managers decide which players, families and events to add to their teams. For that team information we process data on their behalf and under their direction, and we may refer requests about it to the organization. Contact us at john@dobetterdev.net about anything in this policy.
2. Information we collect
Information you or your team give us
| Category | Examples | Source |
|---|---|---|
| Account information | Email address; name (if you sign in with Google, the name on your Google profile) | You, or Google if you choose Google sign-in |
| Parent / guardian contact information | Name, email address, phone number, and your choice whether to share your contact info with the team | A coach or team manager, or you |
| Player information | Player first and last name, jersey number, team(s), and, for teams that use snack duty, dietary restrictions or allergies if a coach enters them | A coach or team manager, from information parents provide |
| Coach and staff information | Name, email address, phone number, role (head coach, coach, manager) | An admin, coach or team manager |
| Attendance responses | Each player’s In / Out / Maybe answer for each event, who answered and when | You or a coach |
| Team and schedule information | Practice and game dates, times, locations, opponents, snack assignments, team notes and links | Coaches and team managers |
Information collected automatically
- Sign-in cookies. We set strictly necessary cookies that keep you signed in. Without them the service cannot work, so they are not optional.
- Browser session storage. When you tap “Remind me later” on a game reminder, your browser remembers that choice until you close it. This stays on your device and is not sent to us.
- Server and security logs. Our hosting and database providers keep standard logs (such as IP address, browser type, time of request and errors) to operate and secure the service.
We do not use advertising cookies, cross-site tracking, analytics trackers or social media pixels, and we do not track you across other websites. Because we do not track you, we respond the same way whether or not your browser sends a “Do Not Track” or Global Privacy Control signal.
Sensitive information
Dietary restrictions or allergies can reveal health information, or sometimes religious beliefs. This field is optional. It is entered by a coach from information the parent provides, and only the player’s coaches, team managers and the organization’s administrators can see it. We use it only to support the team’s activities (for example, snacks and team meals) and never to infer anything about anyone. Please do not enter medical records or other sensitive details in RSVP MVP.
3. How we use information
- To create and secure your account and sign you in.
- To connect you to the right players and teams by matching the email address a coach entered.
- To show schedules, rosters and attendance, collect In / Out / Maybe responses, and show game-week reminders, game-day pop-ups and directions to the field.
- To let coaches and team managers plan for practices and games.
- To maintain, troubleshoot, secure and improve the service, and to prevent abuse.
- To respond to your requests and to comply with legal obligations.
We do not use personal information for advertising, profiling, or automated decisions that have legal or similarly significant effects. We do not currently send marketing or reminder emails. The only emails we send are the sign-in links you request.
Legal bases (GDPR)
- Performance of a contract. Providing the service you or your team signed up to use (accounts, schedules, rosters, RSVPs).
- Legitimate interests. Organizing team activities on behalf of the organization, and keeping the service secure and working. We have balanced these interests against your rights.
- Consent. Sharing your contact information with other families on the team, and any dietary or allergy information you provide to your coach. You can withdraw consent at any time; this does not affect processing that happened before.
- Legal obligation. Where we must keep or disclose information by law.
4. Who can see your information
- Families on the same team can see the schedule, the roster (player names and jersey numbers), parent and guardian names, coaches, team info and links, and attendance counts and responses. Your email and phone number are shown to other families only if you turn on “Share my contact with team.”
- Coaches and team managers of your player’s team can see the full roster, including contact information and dietary restrictions, and can update attendance.
- Organization coaches and managers, and RSVP MVP administrators can see and manage teams in the organizations they are responsible for, to set up and support the service.
- Service providers process data for us under contracts that limit their use of it to providing services to us:
- Supabase: database, authentication and sign-in emails.
- Our web hosting provider: serving the app.
- Google: only if you choose “Sign in with Google.” Google’s privacy policy then applies to that sign-in.
- Legal and safety. We may disclose information if required by law, or to protect the rights, safety or property of users, the public or Do Better Dev.
- Business transfers. If RSVP MVP is involved in a merger, acquisition or sale of assets, information may transfer subject to this policy.
Opening “Directions” sends you to Google Maps, which then handles your request under Google’s own privacy policy. We do not send your information to Google Maps.
We do not sell personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined in the CCPA). This includes information about children and teens. We have not done so in the past 12 months.
5. Children’s privacy
RSVP MVP is used by adults (parents, guardians, coaches and managers). Children do not create accounts, and we do not knowingly collect personal information directly from children under 13. Information about players, who are often minors, is entered by their coaches or parents and is limited to what the team needs. Parents and guardians can review, correct or delete their child’s information at any time by asking the coach or by contacting us at john@dobetterdev.net. If you believe a child has given us information directly, contact us and we will delete it.
6. How long we keep information
- Account information: while your account is active.
- Team, roster, schedule and attendance information: while the organization uses RSVP MVP, so teams can look back at past seasons. Organizations or coaches may delete it sooner.
- Security logs: for the limited period our providers keep them, generally not more than 90 days.
When we delete information it is removed from the live system promptly. Backup copies are overwritten during normal operation, generally within 30 days. If the pilot ends and RSVP MVP is discontinued, we will delete or anonymize the remaining personal information within 90 days, unless the law requires us to keep it.
7. Security
We use encryption in transit (HTTPS) and at rest through our providers. Access rules in the database enforce, on every request, that each person can see only what their role allows. Sign-in uses one-time email links or Google, so we never store passwords. No method of transmission or storage is completely secure, but we work to protect your information. If a breach affects you, we will notify you as the law requires.
8. Your rights and choices
Everyone
Whatever your location, you can ask us to access, correct or delete your personal information or your child’s. You can also turn contact sharing on or off yourself from your team’s Roster page.
California residents
Under the CCPA you have the right to:
- Know and access the categories and specific pieces of personal information we collected about you, the sources, the purposes, and the categories of recipients (summarized in sections 2–4 above).
- Delete personal information we collected from you, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of.
- Limit the use of sensitive personal information. We use it only to provide the service, as the CCPA permits.
- Not be discriminated against for exercising any of these rights.
California “Shine the Light” (Civil Code §1798.83): we do not disclose personal information to third parties for their direct marketing purposes.
EEA, UK and Swiss residents
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
How to make a request
Email john@dobetterdev.net from the address on your account, saying what you would like us to do. We may need to verify your identity, usually by confirming you control that email address, before acting on a request. You may use an authorized agent; we may ask for proof of their authority. We respond within 45 days for CCPA requests and within one month for GDPR requests. If we need more time, as the law allows, we will tell you why. Requests are free.
9. International transfers
RSVP MVP is operated from the United States, and our service providers may process data in the United States and other countries. Where the GDPR applies, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or the EU-U.S. Data Privacy Framework where a provider is certified.
10. Changes to this policy
We will post any changes on this page and update the effective date. If we make a material change, we will tell you in the app before it takes effect.
11. Contact us
Do Better Dev: john@dobetterdev.net. See also our Terms of Service.