Who we are

Loosie operates loosie.io. For the data you give us about your own account, we are the data controller. For the squad and club information you put into the app, your club is the controller and we process it on your instructions (more on that below).

Reach us at hello@loosie.io.

What we collect

Your account. Name, email address and sign-in credentials, handled for us by Clerk. We never see your password.
Your club. Everything you enter: club name, badge, colours, squads and player names, fixtures, results, selections, plays and lineout calls, sponsors, fundraisers and ledger entries.
Files you upload. Badges, sponsor logos and player photographs.
Payments. If your club takes donations or runs a fundraiser through Loosie, Stripe handles the payment. Card numbers never reach us; we keep a record of the transaction so the ledger balances.
Basic technical data. Log and diagnostic information from hosting: IP address, browser and pages requested, plus simple usage counts so we know which parts of the app are actually used.

Player data, and juniors especially

When you type a squad in, you are handling other people's personal data: names, sometimes photographs, sometimes those of children. Your club decides what goes in and needs a lawful basis and, for juniors, the appropriate consents. We hold it for you and do nothing else with it.

We do not sell club or player data, we do not share it with advertisers, and we do not use it to train anything.

Why we use it

To run the app and produce the graphics, tables and ledgers you asked for. That is the contract we have with you.
To keep the service secure, prevent abuse and fix what breaks. That is our legitimate interest in a service that works.
To reply when you contact us.
To send an occasional email about the product itself. No marketing lists sold, and every one has an unsubscribe.

Who else touches it

A short list, and it stays short. Each is bound to process data only on our instructions:

Clerk: accounts and sign-in.
Supabase: the database and file storage where your club's data lives.
Stripe: payments, where your club takes them.
Vercel: hosting and delivery of the site itself.

Some of these operate outside the UK and the EEA. Where data is transferred, it is covered by the standard contractual clauses or an equivalent safeguard.

How long we keep it

Your club's data stays while the club account is open. Delete something in the app and it goes; ask us to close the account and we remove it within 30 days, apart from anything we are legally required to retain. Payment records, mainly, which tax rules make us keep for six years.

Cookies

Only what the app needs: a session cookie so you stay signed in, and local storage for preferences like your club's colours. No advertising cookies, no third-party trackers, and so no cookie wall to click through.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, have it corrected, have it deleted, restrict or object to how it is used, or take it elsewhere in a portable format. Email hello@loosie.io and we will action it within a month.

If you think we have handled your data badly, please tell us first, but you are entitled to complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this notice changes in a way that matters, the date at the top changes and we say so in the app rather than hoping you re-read the page.

What we hold, and why.