Simple Privacy Policy
Last updated: 8 September 2026 · Version 2026-09-08
This Privacy Policy explains, in simple terms, how Regulars may collect, use, and protect information when people use the app and website.
1. Who this policy applies to
This policy (version 2026-09-08) applies to people who visit the Regulars website, create an account, join a club, manage matches, respond to RSVPs, or otherwise interact with the Regulars service.
2. About Regulars & data controller
Regulars is a members and RSVP app for amateur sports clubs. It helps managers and players organise squads, matches, and attendance.
For now, the data controller is Felipe Machado Soares (msoaresfelipe@gmail.com). Company name, registration number, and registered address will be added when a legal entity is in place.
3. Information Regulars may collect
Regulars may collect the following types of information:
- Account details, such as name, email address, password, and login information.
- Profile details, such as nickname, birthday, nationality, city, country, WhatsApp, avatar, club role, attendance history, or related sports participation details entered by users.
- Content submitted in the app, such as match details, RSVP responses, player lists, notes, or Away periods.
- Payment and billing details if a paid plan or club payments feature is used in the future (for example plan status, or records a club chooses to keep).
- Legal acceptance records (Terms and Privacy version accepted, timestamp, and method).
- Technical data, such as IP address, browser type, device type, operating system, and basic usage logs from our hosting providers.
- Communication data, such as emails or support requests sent to Regulars.
4. How information may be used
Regulars may use information to:
- create and manage user accounts;
- run club features such as members, RSVPs, and match organisation;
- provide login, security, and fraud prevention functions;
- record and demonstrate acceptance of Terms and Privacy Policy;
- improve app performance and fix bugs;
- respond to support requests;
- send service-related messages, such as account, match, or club notifications; and
- comply with legal obligations.
5. Legal basis
If Regulars is used by people in the European Union, European Economic Area, or United Kingdom, personal data may be processed on one or more of these legal bases:
- performance of a contract, when the information is needed to provide the service;
- legitimate interests, such as securing and improving the app; and
- consent, where consent is required (for example accepting these policies at signup, or for optional communications or non-essential tracking if added later).
6. Sharing of information & processors
Regulars does not sell personal information.
Regulars shares information with service providers who process data on our behalf to operate the product:
- Supabase: authentication, database, and file storage (project hosted in the EU).
- Vercel: website and application hosting / edge delivery. Vercel Analytics may collect anonymous page-view data to understand how the website is used. It is not used for advertising.
- Google: optional Google sign-in (OAuth). Google receives what you authorise during that login flow.
- Apple: optional Sign in with Apple. Apple receives what you authorise during that login flow. If you hide your email, Apple may give Regulars a private relay address instead.
Regulars may also share information with legal or regulatory authorities where required by law. Clubmates and managers in clubs you join can see profile and attendance details you share within that club, according to in-app privacy settings.
Email and push notification providers are not used yet. This section will be updated when they are added.
7. Data retention
Regulars may keep personal information for as long as reasonably necessary to operate the service, maintain security, resolve disputes, and comply with legal obligations.
Account and club data are generally kept while an account is active, and may be removed or anonymised after a deletion request or long-term inactivity, subject to any legal need to retain limited records (for example acceptance logs needed to show what you agreed to).
8. Security
Regulars aims to use reasonable technical and organisational measures to protect personal information.
No system can be guaranteed to be completely secure. Access controls, secure passwords, limited internal access, and reputable service providers are baseline measures used to protect data.
9. International transfers
Primary app data is hosted with Supabase in the EU. Some providers (for example Vercel, Google, or Apple) may process data in other countries.
Where applicable, Regulars relies on reasonable safeguards required by law for those transfers (such as standard contractual clauses offered by those providers). Details will be refined as the legal entity and vendor stack mature.
10. Children
Regulars is not directed at children under 16. You must be at least 16 to create an account. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has an account, contact us and we will take appropriate steps.
11. User rights
Depending on where a user lives, they may have rights to:
- access their personal information;
- correct inaccurate information;
- request deletion;
- object to certain processing;
- request restriction of processing;
- data portability; and
- withdraw consent where processing is based on consent.
Requests can be sent to msoaresfelipe@gmail.com. In-app profile editing covers many corrections; a fuller self-serve export/delete flow may follow.
12. Cookies and tracking
The website or app may use essential cookies or similar technologies for login, security, and performance.
Regulars uses Vercel Analytics for anonymous page views. It does not currently use advertising or marketing tracking. If those tools are added, this policy and any cookie notice will be updated to explain them and to obtain consent where required.
13. AI features
Regulars may use AI to help with features such as recurring match drafts, balanced teams, reminder copy, and Board+ quick-share message drafts.
AI or automation outputs are assistance tools only. Users should review them before relying on them for team management decisions. If personal data is sent to an AI provider, that provider will be named here.
14. Changes to this policy
This Privacy Policy may be updated from time to time.
When that happens, the version and date at the top of the policy will change. For material changes, we may ask you to accept the new version before continuing to use Regulars.
15. Contact
For privacy questions or requests, contact:
Felipe Machado Soares
Email: msoaresfelipe@gmail.com