Privacy Policy
Effective 1 October 2026
Lineup is a team-management app for grassroots football, used by coaches, parents and players. Many of the players are children. This policy says what personal data we collect, why, who we share it with and what your rights are. It is written to be read, not skimmed; if anything is unclear, email us.
1. Who we are
20 Miles Ltd, trading as Lineup, company number 15758027, registered office 34 Tern Avenue, Horsham, West Sussex, RH12 5AT, United Kingdom. We are the data controller for the Lineup app, the web dashboard and this website. We are registered with the Information Commissioner’s Office (ICO), registration number ZB897807. Lineup is run by a single developer; we do not have a data protection officer, and are not required to appoint one. Data protection contact: privacy@lineupapp.net.
2. Who uses Lineup
- Coaches and team admins create a team, add players, schedule fixtures and record what happens in matches.
- Parents and guardians join a team on behalf of their child, answer availability and follow the team.
- Players aged 13 and over can hold their own account. Under-13s appear in Lineup only as player records added by a parent, guardian or club official. Any player can use their team’s Learning quiz through the link their coach shares, without an account (section 4a).
3. What we collect, why, and on what basis
| Data | Why | Lawful basis |
|---|---|---|
| Your name, email address, profile photo, and the sign-in method you chose | To create and run your account | Contract |
| Your teams, roles, availability answers, and messages you send | To run your team: fixtures, lineups, chat, notifications | Contract |
| Player records: name, photo, positions, shirt number, minutes, goals, ratings, development notes | To keep the team’s records, most of which concern children (see section 4) | Legitimate interests of the club and its members in running the team; for children, with the parent’s or club’s confirmation |
| Learning quiz progress: which questions a player answered, whether each answer was right, when, the level reached and their points; and the player’s 4-digit learning code, which we store only in scrambled (hashed) form | Running Learning, the team’s football quiz (see section 4a), and showing progress to the player, their parents and their coaches | Legitimate interests of the club and its members in developing its players; for children, the same parent or club confirmation as their player record |
| Photos and videos uploaded to a team | Sharing match-day media within the team | Legitimate interests |
| Home ground, fixture venues and, if you use the nearby-teams map, your device’s approximate location while the map is open | Showing where matches are and finding teams near you | Contract; consent for device location |
| Subscription status and purchase history | Unlocking Lineup Pro and handling billing questions | Contract |
| Device push token and the platform you use | Sending notifications you have turned on | Contract |
| Usage analytics: which screens are used and where people get stuck | Improving the app | Legitimate interests, under the exemption in PECR (as amended by the Data (Use and Access) Act 2025) for statistics that improve a service: on unless you turn it off in Settings › Privacy. Never collected for under-18s or accounts linked to a parent |
| Crash reports | Fixing faults | Legitimate interests |
| The date you last used the app | Deleting inactive accounts, and welcoming you back | Legitimate interests |
| Security logs (IP address, timestamps) | Protecting accounts and the service | Legitimate interests |
We do not collect your home address, phone number, date of birth or payment card details. Apple and Google handle subscription payments and never pass us your card.
4. Children
You must be 13 or over to hold a Lineup account. We ask your age when you sign up and do not store your date of birth. Under-13s are added to a team as players by a parent, guardian or club official, who confirms they have the right to do so. That confirmation is our record of consent for the child’s data.
A child’s player record can contain their name, photo, positions, shirt number, playing time, goals, ratings and development notes written by their coach. It is visible to the team’s coaches and admins, to the child’s parents or guardians, and to the child if they have an account. It is never public: a team’s public website shows fixtures, results and season numbers, not players.
Accounts held by 13 to 17 year olds are set up for privacy: usage analytics is off and cannot be turned on, and a parent or guardian can always see the chats they are in. Chat between an adult and a child is only possible inside a team, in conversations a parent can observe.
Parents and guardians can see and correct their child’s record in the app, download it (Settings › Download my data), and have it deleted by removing the child from the team, deleting their own account, or emailing us.
4a. Learning (the team football quiz)
Learning is a football quiz a team’s coach can turn on with a Lineup Pro subscription. The coach shares one link with the team’s families. Whoever opens it sees the squad listed by first name and the initial of their surname (no photos and no surnames), taps a player and answers questions on lineupapp.net. No account is needed, so a child can use it without signing up.
The first time a player opens Learning they choose a 4-digit code, and they enter it each time after, so only they can open and add to their own progress. We store the code only in scrambled (hashed) form, where no app or browser can read it; a coach can reset it if it is forgotten.
A player’s answers are saved to their player record: each question they answered, whether it was right, when, their level and their points. Their progress is visible to the player, to their parents or guardians and to the team’s coaches and admins in the app. A squad leaderboard, showing each player’s first name and initial, level and points, is visible to anyone with the team’s link, which the coach shares only with the squad. The quiz questions themselves are the same for everyone and contain no personal data.
Learning shows no advertising and collects no usage analytics. It sets one cookie, described in section 9a. Parents and guardians can see their child’s progress in the app, download it with the rest of their child’s record (Settings › Download my data), and have it deleted by removing the child’s record or by emailing us.
5. Who we share data with
We do not sell personal data and we do not show advertising. We use these providers to run Lineup. Each acts on our instructions under a written contract:
| Provider | What they do for us | Where | Transfer safeguard |
|---|---|---|---|
| Google Firebase (Google Cloud) | Hosting the app’s database, sign-in, file storage, cloud functions, push notifications, crash reports and anonymous usage statistics | EU and US | UK Extension to the EU-US Data Privacy Framework; Google’s data processing terms |
| RevenueCat | Managing subscriptions and entitlements; records purchase events from Apple and Google | US | UK Extension to the EU-US Data Privacy Framework |
| Apple and Google | App distribution, sign-in with Apple or Google, and subscription billing. Each is an independent controller for your app store account | US | Their own privacy policies |
| Resend | Sending our emails to you | US | UK Extension to the EU-US Data Privacy Framework |
| Anthropic | Turning a fixture list you paste into fixtures (see AI features below) | US | UK Extension to the EU-US Data Privacy Framework; not used to train models |
| Google Maps Platform | Finding the address of a venue you type or paste | US | UK Extension to the EU-US Data Privacy Framework |
| Stripe (when team payments launch) | Taking payments from parents to the club. Stripe and the club are controllers for the payment itself | US and EU | Stripe’s data processing terms |
Other people in your team see what you share with the team: your name and photo, your availability, your messages and your uploads. Team admins see the player records of the team’s players. We will also disclose data where the law requires it, to protect someone’s safety, or to a safeguarding authority in response to a report.
6. AI features
When you paste a fixture list, the text is sent to Anthropic’s Claude model to pick out the dates, opponents and venues, and the result is shown to you to check before anything is saved. We remove email addresses and phone numbers from the text before sending it. Anthropic does not use this data to train its models and keeps it only briefly for abuse monitoring. Nothing is generated or saved without you confirming it.
7. Public team websites
A team owner can switch on a public website for their team at a web address they choose. It shows the team’s name and crest, fixtures, results, season numbers and a hero image, plus any text, photos and news the owner adds. It never lists players: there are no squad pages or player profiles. Anything on a public team site is public; the team owner is responsible for what they publish, and can take the site down at any time.
8. Emails and notifications
We send service emails about your account, your teams and your subscription; these are part of the service. We also send occasional emails about what’s new in Lineup and, if you sign up and stop, a reminder of how to get started. Every one of those has an unsubscribe link, and you can turn them off in Settings. Push notifications are controlled in Settings and on your device.
9. Analytics and crash reports
Usage analytics (Google Analytics for Firebase) collects anonymous statistics: which screens are used, which actions are taken and where people get stuck, so we know what to fix. It is not linked to your account, and contains no names, message content or location. We use it only to understand and improve Lineup: not for advertising, and Google does not use it for its own purposes.
It is on by default for adults, under the exemption for statistics that improve a service, and you can turn it off at any time in Settings › Privacy; the choice is saved with your account, so it applies on every device you sign in on. It is never collected for anyone who told us they are under 18, or whose account is linked to a parent or guardian, and for them it cannot be turned on. Crash reports (Firebase Crashlytics) are always sent so faults can be fixed; they contain the device model, operating system version and what the app was doing when it failed.
9a. This website and the dashboard
lineupapp.net sets no advertising or analytics cookies. Signing in to the web dashboard sets a session cookie that keeps you signed in; it is deleted when you sign out. On a team’s Learning link, entering a player’s 4-digit code sets one cookie that keeps that player signed in on that device for up to 30 days; it is removed when someone picks a different player, and it is strictly necessary for Learning to work, so we do not ask for consent for it. Learning keeps nothing else in your browser. Public team websites hosted by Lineup set no cookies. Our hosting provider keeps standard server logs (IP address, page requested, time) for up to 30 days for security. The same accounts, data and rights described in this policy apply on the web as in the app.
10. How long we keep data
| Data | Kept for |
|---|---|
| Your account and profile | While your account exists, then deleted. Accounts with no activity for 24 months are deleted after two email warnings (30 days and 7 days before) |
| Child player records added by a parent | While the parent’s account or the team exists; deleted with either, or on the parent’s request |
| Team data (fixtures, lineups, results, statistics) | While the team exists. The team owner can delete the team at any time |
| Chat messages | While the conversation exists; a message you delete is removed for everyone. Group chats with children in them keep messages for safeguarding purposes for 12 months |
| Photos and videos | While the team exists, or until the uploader or a team admin removes them |
| Learning quiz progress and the player’s learning code | While the player record exists; deleted with it. A coach can reset a player’s code at any time |
| Payment records (once payments launch) | Six years, to meet HMRC and accounting rules |
| Safeguarding reports | Two years from the report |
| Backups | Up to 30 days after deletion from the live database |
11. Security and breaches
Data is stored on Google Cloud with encryption in transit and at rest, access rules on every record, and sign-in through Apple, Google or a one-time email link. Accounts created before September 2026 may still sign in with a password; Firebase Authentication holds it only as a salted hash, never in plain text, and we cannot read it. If a breach puts people at risk we will tell the ICO within 72 hours and tell affected people without undue delay.
12. Your rights
Under UK GDPR you can ask us to:
- tell you what data we hold about you (access), and give you a copy in a usable form (portability): Settings › Download my data does this instantly;
- correct data that is wrong: most of it you can edit in the app;
- delete your data: Settings › Account › Delete account removes your account and everything only you own, and unlinks you from your teams;
- restrict or object to processing based on our legitimate interests;
- turn off usage analytics in Settings › Privacy, and withdraw consent where we rely on it (device location), with no effect on what happened before.
To exercise any right, email privacy@lineupapp.net. We answer within one month. You can complain to the ICO at ico.org.uk or on 0303 123 1113; we would rather hear from you first.
13. Changes to this policy
When we change this policy in a way that matters, we will tell you in the app or by email before it takes effect and show the new effective date at the top.
Contact
20 Miles Ltd, trading as Lineup, 34 Tern Avenue, Horsham, West Sussex, RH12 5AT, United Kingdom. privacy@lineupapp.net