RecLineup Privacy Policy
Last updated 7 October 2026 ·Longarm Software Inc., Ontario, Canada
RecLineup helps the manager of a recreational sports team organise games: who is playing, who owes what for the season, and who is bringing the bases. This policy describes what the app stores, why, and how to get it removed.
The short version. We store the names and contact details a team manager enters for their roster, and the answers players give about games. We do not sell your information, we do not advertise, and we do not track you across other apps or websites. The one thing we sell is a season pass for a team, paid through Google Play or the App Store depending on your phone: we never see your card, and your team's own money never passes through us. Most people who appear in RecLineup never install it — they are on somebody's team.
Who this is about
Two kinds of people appear in RecLineup, and it matters which you are.
- Managers create an account, sign in, and enter their team.
- Players usually do not have an account at all. A manager adds you to a roster, and you answer through a link in a group chat or a button in Telegram. You can use every player-facing feature without installing anything or creating a password.
If you are a player, the team's manager decided to add you. They are responsible for having a reason to hold your contact details; we hold them on their behalf. Either of us can remove them — see Your choices.
What we store
People on a roster
| Data | Why |
|---|---|
| Name (as the manager types it) | To show who is in, out, and owed a turn bringing the balls |
| Phone number, email address — both optional | Only to send that person messages about their team |
| Role on the team, and whether they are active | Managers, assistants and spares see different things |
Managers
An email address, used as the sign-in identity. Sign-in is a six-digit code emailed to that address — there is no password to lose. Optionally a display name and avatar.
If you choose to sign in with your Google account instead, Google tells us your name, your email address, a link to your Google profile picture, and an ID for your Google account. We use the email address and that ID to sign you in, and the name to fill in your display name, which you can change. We ask Google for nothing else — not your contacts, calendar, files or Gmail — and we do not share what Google gives us with anyone or use it for advertising. It is kept with your account, and you can ask us to delete it along with your account at privacy@reclineup.app. RecLineup’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you sign in with Apple instead, Apple tells us your name, an email address, and an ID for your Apple account. The name comes only the very first time you sign in, and we use it to fill in your display name, which you can change. The email address is either your own or a private @privaterelay.appleid.com address that Apple forwards for you, if that is what you chose — either way we use it and that ID to sign you in, and for nothing else. We ask Apple for nothing more, and we do not share what Apple gives us with anyone or use it for advertising. When you delete your account in the app, we tell Apple to disconnect RecLineup from your Apple ID as part of the deletion; you can also do that yourself at any time, on your iPhone, under Settings → your name → Sign in with Apple.
Team logos
A manager can choose one picture from their phone as their team's logo. That picture is the only one we store. The app shrinks it to a small square on the phone before sending it, so what reaches us is a new copy that carries none of the original photo's details, such as where it was taken. Everyone on the team sees it in the app. It is deleted when the manager removes it, or when the team is deleted.
Season passes
When a manager buys a season pass for a team, the store your phone buys from takes the payment — Google Play on Android, the App Store on iPhone — and we never see the card. We keep the record of it: which team it was for — a pass bought before the team exists, or time kept from a team that stopped playing, is held against your account until you create a team — which RecLineup account bought it, the store's own identifier for the purchase, the price and currency the store reports, how long it covers the team, and whether it was later refunded. It exists so a team stays covered for what it paid for, and so a refunded pass stops counting.
Activity on a team
| Game answers | In, out or maybe, and when |
| Sub requests and claims | Who took an open spot |
| Chore assignments | Who is bringing what |
| Money owed and paid | Amounts, dates, and any note the manager writes |
Messaging
If a team connects Telegram, we store the Telegram account ID and public @handle of each person who taps a button, so the next tap is recognised. We store a record of each message we attempt to send — when, by which route, and whether it worked — so a manager can tell who was actually reached.
Where consent to be messaged is required by law, we record when it was given, how, and the IP address it came from. That record exists to prove the consent, which is the whole point of keeping it.
Links opened without an account
When a player opens a link we sent them, we log that it was opened and a one-way hash of the IP address — sha256(address + secret salt). We keep the hash, never the address. It exists to stop somebody guessing at links in bulk, and it cannot be turned back into an IP.
With that, we note three things about the page load and nothing about the person: whether the page was actually on screen, the kind of browser as one general word (such as “iPhone Safari” or “desktop”), and a random tag that lasts only until the page is closed or reloaded. The tag is not saved on your device and cannot connect one visit to another. We use these to tell a link preview apart from a person, so that our own counts are honest. We never keep your browser’s full identification string.
What we never collect
- Payment details. No card numbers, no bank details, no e-transfers. A season pass is paid to Google Play or to the App Store, whichever your phone uses; the store takes the card itself, and the app never sees it. The ledger is a shared notebook: it records that Dave owes $20, and Dave pays Dave's manager however that team already does it. None of the team's money passes through anything we operate.
- Location. The app does not request or store device location.
- Contacts, your photo library, or your device's address book. The app never looks through your photos. The only picture it receives is one a manager picks as a team logo, described above.
- Advertising or cross-app tracking identifiers. There are no ads in RecLineup and no analytics SDKs that follow you elsewhere.
- The content of your group chat. The Telegram bot runs with privacy mode on, so the only messages it receives are ones starting with
/, ones that @mention it, and replies to its own posts. It cannot read your team's conversation. The commands it does receive are not stored — we keep only the ID of each one, so that a message Telegram sends us twice is not counted twice.
Who else sees it
We do not sell or rent personal information, and we do not share it for advertising. It reaches these companies only because they run parts of the service:
| Who | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, and the server code | Canada (ca-central-1) |
| Cloudflare | Serving the web pages players open | Global edge network |
| Resend | Delivering sign-in code emails — the email address and the code | United States |
| Twilio | Sending and receiving the text messages a player has opted in to — the phone number and the message | United States |
| Telegram | Only for teams that connect it — messages and buttons in your group chat | International |
| Google Play | Distributing the Android app, and taking payment for a season pass. Each purchase carries the buyer's RecLineup account ID and the team's ID — random codes, not names — so the pass reaches the right team | International |
| App Store | Distributing the iPhone app, and taking payment for a season pass. Each purchase carries one random code that ties it to the buyer's RecLineup account and their team — not names — so the pass reaches the right team | International |
| Only for managers who choose to sign in with their Google account — confirming who they are | International | |
| Apple | Only for managers who choose to sign in with Apple — confirming who they are, and disconnecting the app from their Apple ID when they delete their account | International |
| Sentry | Reports when the app crashes or hits an error — what went wrong, and on which phone model and system version — and, for a small sample of sessions, how long screens took to load. Phone numbers are removed before a report leaves the phone, and so is everything the app was sending to our servers. Reports are not tied to your account. | European Union (Germany) |
Team data is stored in Canada. Crash reports are stored by Sentry in Germany. Sentry, Cloudflare, Twilio, Telegram, Google and Apple are outside Canada or operate internationally, so information passing through them may be processed outside Canada and may be accessible to authorities in those countries under their laws.
We will also disclose information if the law requires it, or to protect someone's safety.
Who can see what, inside a team
- Managers see everything about their own team, including money.
- Assistants can run games and call for subs but cannot see the ledger at all. That is enforced by the database, not by hiding a button.
- Players see the schedule and headcount, and their own balance. A link showing somebody their money is single-use and personal — it cannot be minted for anybody else's tab.
- Nobody sees another team's data. Teams are isolated from each other in the database.
How long we keep it
- Team data — roster, games, answers, ledger — for as long as the team exists, because a season's history is the point of it.
- Ledger entries are never edited or deleted. A mistake is voided and re-entered, so the record of what happened survives. This is deliberate: a money log that can be quietly rewritten is not worth keeping.
- Season pass records are kept as the record of a payment, and outlive the team they were bought for: delete the team and the record stays, no longer pointing at it. A refunded pass is marked as refunded rather than deleted. If the account that bought it is deleted, the record no longer says who bought it. The store that took the payment — Google Play or Apple — keeps its own record of it, under its own policy.
- Links sent to players expire, typically within minutes to a few weeks depending on what they are for.
- Telegram delivery records used to avoid double-counting a tap are deleted after seven days.
Your choices
Stop being messaged
Reply STOP to a text message, or tell your manager. An opt-out is permanent for that phone number and survives a manager re-entering it — it is not something that can be undone by retyping the number.
Be removed entirely
Ask the manager of your team; they can remove you from the roster. If you would rather not go through them, or you want confirmation it is done, email us at privacy@reclineup.app and tell us the team and the name or number you appear under.
See what we hold about you
Under Canadian privacy law you can ask what personal information we hold about you, ask us to correct it, and complain about how we handled it. Email privacy@reclineup.app. We will respond within 30 days.
If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
Delete your account
In the app: Settings → Delete account. It deletes your sign-in, and it also deletes any team you are the only manager of — the confirmation names each of those teams before you tap, and it will not delete one it did not name. A team that has another manager carries on without you, with your name taken off what you did on it. It cannot be undone, and we cannot put it back.
Two things survive on purpose. The record that a season pass was bought is kept, because it is the record of a payment, and it stops saying who bought it; a pass no team has used is forfeited and is not refunded. And an opt-out from text messages is kept, because a phone number that asked us to stop must stay stopped.
Delete a whole team
In the app: Settings → Delete this team, in the section headed by the team’s name. It deletes the team and everything on it — its roster, games, answers, duties and ledger — and nothing else: your account and your other teams stay. Only a team’s last manager can delete it, so a team somebody else also manages stays until they are its only manager. The confirmation counts what goes before you tap, and if the team has a season pass with time left it says so; that time is forfeited and is not refunded, unless you first move the pass to another team or keep it for the next team you create. It cannot be undone, and we cannot put it back.
The record that a season pass was bought is kept, because it is the record of a payment, and it stops pointing at the team. If you cannot reach the app, email privacy@reclineup.app from the address you sign in with and we will do it for you.
Security
Traffic is encrypted in transit. Access to a team's data is enforced in the database itself rather than only in the app, so a bug in one screen cannot expose another team's roster. Links sent to players are stored as a hash — the usable value exists only in the message we sent you.
No system is perfect. If you think you have found a problem, please tell us at security@reclineup.app.
Children
RecLineup is not directed at children, and it is built for adults organising adult recreational leagues. A manager may add a minor to a roster — a youth team is a normal thing to run — and if they do, they are responsible for having the right to share that child's details with us. If you believe a child's information is here and should not be, email privacy@reclineup.app and we will remove it.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell managers in the app. Continuing to use RecLineup after a change means you accept the updated policy.
Contact
Longarm Software Inc.
Ontario, Canada
privacy@reclineup.app