Privacy Policy

This policy (version 2026-09-23) applies to people who visit the Regs website, use the Regs iOS or Android app, create an account, join a group, manage activities, respond to RSVPs, or otherwise interact with the Regs service.

Regs is a members and RSVP app for amateur sports groups. It helps managers and players organise squads, activities, and attendance. Regulars in the product means members who get first seats, not the company name.

The data controller is Felipe Machado Soares ([email protected]).

Regs may collect the following types of information:

• Account details, such as name, email address, password, and login information.
• Profile details, such as nickname, birthday, nationality, city, country, phone number, avatar, group role, attendance history, or related sports participation details entered by users.
• Photos you or your group upload, such as profile pictures, group pictures, and event photos.
• Content submitted in the app, such as activity details, RSVP responses, player lists, notes, Away periods, and group payment records (amounts, due dates, payment references, and whether someone marked a fee as paid). A group may also store its IBAN and bank display name so players can transfer a fee themselves. Regs does not store player card numbers and does not pull money from a player's bank.
• Legal acceptance records (Terms and Privacy version accepted, timestamp, and method).
• Technical data, such as IP address, browser type, device type, operating system, a native-app cookie used to skip the marketing homepage, and basic usage logs from our hosting providers.
• Communication data, such as emails or support requests sent to Regs.

Regs may use information to:

• create and manage user accounts;
• run group features such as members, RSVPs, activity organisation, and group ledgers;
• show weather for an activity city;
• suggest addresses when you type a venue;
• provide login, security, and fraud prevention functions;
• record and demonstrate acceptance of Terms and Privacy Policy;
• improve app performance and fix bugs;
• respond to support requests;
• send service-related messages, such as account, activity, or group notifications; and
• comply with legal obligations.

If Regs is used by people in the European Union, European Economic Area, or United Kingdom, personal data may be processed on one or more of these legal bases:

• performance of a contract, when the information is needed to provide the service;
• legitimate interests, such as securing and improving the app; and
• consent, where consent is required (for example accepting these policies at signup).

Regs does not sell personal information.

Regs shares information with service providers who process data on our behalf to operate the product:

• Supabase: authentication, database, and file storage (project hosted in the EU).
• Vercel: website and application hosting / edge delivery. Vercel Analytics may collect anonymous page-view data to understand how the website is used. It is not used for advertising.
• Firebase / Google Analytics: product analytics (page views and a small set of in-app events such as sign-up, first group created, and first RSVP). Advertising cookies and ad personalization are not enabled. It is not used to track you across other companies' apps or websites for ads.
• Google: optional Google sign-in (OAuth), and optional Google Places address autocomplete when a Maps key is configured. Google receives what you authorise during login, and venue text you type into address fields when Places is on.
• Apple: optional Sign in with Apple. Apple receives what you authorise during that login flow. If you hide your email, Apple may give Regs a private relay address instead.
• Open-Meteo: activity-city weather. We send a city and country name to look up a forecast.
• Vercel AI Gateway / OpenAI: optional Board+ message drafts. We send the text you type for a draft. We do not use those drafts for advertising. You should review the result before sending it.

Regs may also share information with legal or regulatory authorities where required by law. Groupmates and managers in groups you join can see profile and attendance details you share within that group, according to in-app privacy settings.

Firebase Cloud Messaging sends push reminders to the Regs phone app when you turn them on. We store a device token for that phone so the reminder can reach it. When activity reminder emails are on, Resend sends them to the address on your account.

Regs may keep personal information for as long as reasonably necessary to operate the service, maintain security, resolve disputes, and comply with legal obligations.

When you delete your account, the live app removes your profile, login, memberships, RSVPs, and profile photo. You cannot sign in after that. Groups you were in keep their activities, IBAN, and ledger, with your name taken off. If you are the only person in a group, that group is deleted with your account.

We keep a private copy of your account details (name, email, phone, birthday, city, country, and which groups you were in) for 90 days, then delete that copy on the next cleanup. Hosting backups can take a short time longer to drop the old data. Product analytics events already sent are not tied to your name.

Regs aims to use reasonable technical and organisational measures to protect personal information.

No system can be guaranteed to be completely secure. Access controls, secure passwords, limited internal access, and reputable service providers are baseline measures used to protect data.

Primary app data is hosted with Supabase in the EU. Some providers (for example Vercel, Google, Apple, Open-Meteo, or OpenAI) may process data in other countries.

Where applicable, Regs relies on safeguards required by law for those transfers (such as standard contractual clauses offered by those providers).

Regs is not directed at children under 16. You must be at least 16 to create an account. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has an account, contact us and we will take appropriate steps.

Depending on where a user lives, they may have rights to:

• access their personal information;
• correct inaccurate information;
• request deletion;
• object to certain processing;
• request restriction of processing;
• data portability; and
• withdraw consent where processing is based on consent.

You can edit your profile in the app. You can delete your account in Settings → Delete account. If you are the only Manager and other people are still in the group, add a co-manager first. If you are the only person in the group, you can delete, and that group is deleted too. A private copy of your account details is kept for 90 days, then deleted. Other requests can be sent to [email protected].

The website or app may use essential cookies or similar technologies for login, security, and performance, including a native-app cookie so the phone app can skip the marketing homepage.

Regs uses Vercel Analytics for anonymous page views (no analytics cookie). Firebase Analytics (Google Analytics 4) can record product usage events, and it stays off until you allow it. You can turn it off again in Settings → Preferences. Advertising storage and ad personalization stay denied. Regs does not use an advertising identifier. If advertising tools are added, this policy will be updated.

Board and Manager can ask Regs to draft a group-chat message. That uses Vercel AI Gateway with an OpenAI model. Only the prompt you type is sent. Outputs are drafts. Review them before you share.

Other product ideas (for example team splits) may use similar tools later. If they do, this section will name the provider.

This Privacy Policy may be updated from time to time.

When that happens, the version and date at the top of the policy will change. For material changes, we may ask you to accept the new version before continuing to use Regs.

For privacy questions or requests, contact:

Felipe Machado Soares
Email: [email protected]