Privacy policy

Last updated: 12 September 2026

This policy explains what personal information SquadLog collects, why, and what you can do about it. It is written to meet the Protection of Personal Information Act, 2013 (POPIA).

Who is responsible

SquadLog is operated by Armand Storm, 416 Main Road, Paarl, 7646, South Africa. Contact: hello@squadlog.co.za.

What we collect

From coaches: name, email address, the squads and programs you create, and — on paid plans — billing records. We never receive your card number; Paystack handles card data.

From players: name, email address, and the training information a coach or the player records — sessions logged, sets, attendance, session RPE, height, weight, strengths and weaknesses, injury status and history, one-rep maxes, and fitness test results.

Information about children

Most players on SquadLog are school pupils under 18. POPIA treats their information as requiring extra care, and so do we.

• A player’s information is visible to the coaches of the squads they belong to, and to the player. It is not visible to other players.
• The public training board shows no player names and no personal information of any kind. It shows the session only.
• We do not sell, rent or share player information with anyone, and we do not use it for advertising.
• Schools and coaches are responsible for having the consent they need from parents or guardians before adding a player to a squad. If a parent or guardian asks us to remove a child’s information, contact us and we will act on it.

Why we hold it

To run the service: show a player their training, let a coach see who trained, track testing over a season, and program safely around injuries. Health-related information such as injury status and body measurements is held only for that coaching purpose.

How long we keep it

Training and testing history is kept for as long as the account exists, because its value is the trend over seasons. You can ask us to delete your information at any time — see below.

Who we share it with

Only the service providers we need to run SquadLog: Supabase (database hosting), Vercel (application hosting), Resend (email delivery), Paystack (payments), and Anthropic (AI session generation, where a coach uses that feature). We do not sell personal information.

Your rights under POPIA

You may ask us what information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@squadlog.co.za and we will respond within 30 days. You may also complain to the Information Regulator of South Africa.

Security

Access is controlled per account at the database level. Sign-in is by emailed magic link, so there are no passwords to leak. Data is encrypted in transit.