Privacy Policy

Who we are

Lineupp is an all-in-one team management app for youth fastpitch softball coaches. It's operated by Digital Gravy (digitalgravy.co). References to "Lineupp", "we", "us", or "our" in this policy refer to that operator.

The marketing site lives at lineupp.app and the product itself lives at dashboard.lineupp.app. Both are covered by this policy.

What information we collect

Information you give us directly

• Marketing-list signup. When you fill in the "request access" form on lineupp.app/request-access, we collect your name and email address.
• Account creation. When you set up a coach account through your invite link, we collect your name, email address, and a password (hashed, never stored in plaintext). You can also add a profile photo and a team name.
• Team and roster data. The data you input as a coach to run your team — players, jersey numbers, birthdates, batting and throwing handedness, depth charts, lineups, schedules, scores, practice plans, snack rotations, parent contact info you choose to add, and messages you send through team chat.
• Guest sign-ups. When a parent fills in a guest sign-up form for their child, we collect the parent's name and email and the player's name, jersey number (optional), birthdate, batting and throwing handedness (optional), and any notes the parent provides. This information is delivered to the team's coach for their review and approval.
• Headshots and other uploaded files. Coaches can upload player headshots or other team-related photos. These are stored in object storage (see "Sub-processors" below) and served via a Lineupp-controlled CDN URL.
• Customer support. If you email us, we'll keep that conversation so we can follow up.

Information we collect automatically

• Server logs. Our servers log basic request metadata (IP address, request path, timestamp, user-agent string, response status). We use this to debug problems, prevent abuse (rate-limiting sign-up flows), and operate the service. We retain server logs for approximately 30 days.
• Cookies and local storage. We use a single authentication cookie (set by our auth library) to keep you signed in. We don't use third-party advertising cookies, and we don't run any third-party analytics or ad-tracking scripts on the marketing site or in the app.

Information about children

Lineupp is a tool for coaches. The personal information of players (many of whom are minors) is entered into Lineupp by their coach, or by their parent through a guest sign-up form. Lineupp does not knowingly create accounts for, or market directly to, children under 13. Players do not log into Lineupp themselves. If you are a parent and you'd like us to remove information about your child, email hello@lineupp.app and we will remove it within 30 days, subject to verifying your relationship to the player and to legitimate retention obligations (e.g. an unresolved billing dispute, which doesn't apply during early access).

How we use your information

We use the information we collect to:

• Provide the Lineupp service — your account, your team, your data.
• Send you transactional emails you've explicitly asked for (signup links, password resets, invite confirmations, guest sign-up notifications).
• Send you product updates and announcements via our marketing email list, only if you opted in (by submitting the request-access form with the consent box checked, or by separately subscribing). Every marketing email includes a one-click unsubscribe link.
• Operate, secure, debug, and improve the service — including rate-limiting endpoints, identifying abuse, and diagnosing errors.
• Respond to support requests.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not rent, share, or trade it with advertisers. We do not use your team data, scoring data, parent communications, or roster information to train any machine-learning model.

Legal basis for processing (GDPR / UK GDPR)

If you're in the EU, UK, or another jurisdiction with similar data protection law, the legal bases we rely on are:

• Performance of a contract — to provide the service you've signed up for (account, team data, transactional email).
• Consent — for marketing emails and any other optional processing. You can withdraw consent at any time.
• Legitimate interests — for narrow operational uses like server logging, abuse prevention, and basic debugging, balanced against your rights and freedoms.
• Legal obligation — when we're required by law.

Sub-processors and service providers

We use a small number of third-party services to run Lineupp. Each processes data on our behalf under their own privacy and data protection terms. The current list:

• Turso — hosted SQLite database. Stores your account, team, roster, schedule, scoring, and chat data. Hosted in the US. Privacy policy.
• Resend — transactional email delivery (signup links, password resets, invite emails, guest sign-up notifications). Privacy policy.
• Bento — email service used both for our marketing email list and for behavioral analytics. We push your name and email to Bento when you create an account, submit a guest sign-up form, or otherwise interact with Lineupp, so we can tag you appropriately (coach, parent, etc.), see lifecycle events on your timeline, and send relevant transactional emails. You only receive marketing emails if you've affirmatively ticked the unchecked-by-default "Send me Lineupp tips" box on a sign-up form. Every sign-up form on lineupp.app and dashboard.lineupp.app includes that opt-in as an unchecked checkbox separate from the required Terms-of-Service agreement, and the box is never pre-ticked. If you don't tick it, your contact is created in Bento in an unsubscribed state — present so we can see who's interacted with the product, but excluded from every marketing broadcast. Privacy policy.
• Cloudflare R2 — object storage for uploaded photos and headshots. Files are served via a Lineupp-controlled CDN subdomain. Privacy policy.
• Hosting providers (Fly.io and/or Vercel). The application servers themselves run on commercial cloud hosts. Network-level metadata (IP addresses, request paths) passes through these providers as part of normal operation. Fly.io privacy · Vercel privacy.

We may add or change sub-processors as the product evolves. Material changes will be reflected on this page (and bumped in the "Last updated" date above).

When we share your information

We share information only in these circumstances:

• With other people on your team. Roster, lineup, schedule, and scoring data is shared with the coaches, assistants, and parents you (or your head coach) invite to your team. That's the entire point of the product.
• With our sub-processors, listed above, to operate the service.
• If we're legally required to — e.g. a valid subpoena, court order, or other lawful process. We will push back on requests we believe are over-broad.
• To protect rights and safety — e.g. to investigate abuse, fraud, or threats to the safety of users or others.
• In a business transfer — if Lineupp is acquired, merged, or sells substantially all its assets, your information may be transferred to the acquirer, subject to this policy or a materially-similar successor policy. We will notify you in advance if this happens.

How long we keep your information

• Account and team data — for as long as your account is active. If you delete your account or ask us to remove your team, we'll delete the associated data within 30 days, except where we have a legitimate need to retain it (e.g. legal hold, unresolved billing dispute).
• Marketing-list email — until you unsubscribe. Unsubscribing removes you from the active list; we may retain a suppression record (just your email) so we don't accidentally email you again.
• Server logs — approximately 30 days.
• Support emails — kept as long as needed to resolve the issue and maintain a reasonable service-history record.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that's inaccurate or incomplete.
• Delete your information.
• Export a portable copy of your information.
• Object to or restrict certain processing.
• Withdraw consent for marketing email at any time.
• Lodge a complaint with a data protection authority (in the EU/UK) or your state attorney general (in the US).

To exercise any of these rights, email hello@lineupp.app. We may need to verify your identity before acting on the request. We'll respond within 30 days.

Inside the app, coaches can export team data as CSV at any time. Coaches can also delete their own account from dashboard.lineupp.app/settings (or by emailing us if a self-service option isn't available for the action you need).

Security

We protect your information with the standard safeguards you'd expect: HTTPS / TLS for all traffic, hashed passwords (using a modern KDF via our authentication library, not stored in plaintext), short-lived signup tokens, per-IP rate limits on sensitive endpoints, and role-based access controls inside the application. Despite reasonable safeguards, no service can guarantee absolute security. If we ever experience a breach that affects your information, we'll notify affected users without undue delay.

International transfers

Lineupp's primary infrastructure is hosted in the United States. If you access the service from outside the US, your information will be transferred to and processed in the US (and potentially other countries where our sub-processors operate). By using Lineupp you acknowledge this transfer.

Changes to this policy

We may update this page from time to time. The "Last updated" date at the top reflects the most recent substantive change. If we make a material change, we'll surface it in-app and / or by email before it takes effect for current users.

Contact

Questions, requests, or concerns about this policy or your data — email hello@lineupp.app. A real human reads everything sent to that address.

See also: Terms of Service.