Legal
Privacy Policy
Last updated September 28, 2026 · Applies to the Official mobile app and officialapp.net
This policy explains what Official collects, why, who else touches it, and what you can do about it. We have tried to write it in plain language and to be specific rather than reassuring — where something is kept, we say how long; where a third party sees your data, we name them.
1. Who we are
OFFICIAL is operated by Official. LLC, an Idaho limited liability company, located at 784 S. Clearwater Loop, Ste B, Post Falls, ID 83854, USA.
For any privacy question, or to exercise the rights described in §11, contact cherry@officialapp.net. We respond within 30 days.
2. What OFFICIAL does
OFFICIAL is a marketplace for sports officiating. Coaches and league administrators post games; officials find, claim, and work them. We provide the platform — we are not a party to the arrangement between a coach and an official, and we do not employ officials.
Using OFFICIAL requires an account. You must be 13 or older.
3. Information we collect
What we do NOT collect
- No analytics or tracking SDKs. OFFICIAL contains no Google Analytics, no Plausible, no Mixpanel, no Amplitude, no Segment, no advertising SDK, and no crash-reporting SDK. We do not build a behavioural profile of you and we do not track you across other apps or sites. Nothing about a crash is collected in the background. If the app hits an error it shows you a screen with a Send this report button; tapping it — and only tapping it — sends us the error message, the technical stack trace, and your device type. It contains nothing about your games and nothing you have typed. It arrives as a support ticket, in the same place a message you send us through Help & Support arrives, and is kept and deleted on the same terms (§10).
- No advertising, and no cross-site or cross-app tracking. We do not serve ads and we do not participate in ad networks.
- No card numbers or bank details. Payments are handled entirely by Apple and Google (see §8). We never receive or store your payment card information.
- No contact list, address book, calendar, microphone, or health data.
- No continuous or background location. See §5.
- We do not sell or share your personal information, in the ordinary sense or as those terms are defined under California law.
Account and profile
- Email address and password. Handled by our authentication provider (Supabase). Passwords are salted and hashed — we never see or store your password in readable form.
- Name and initials, and an optional profile photo you upload.
- Phone number — optional. You can add one at sign-up or later from your profile, and remove it at any time. It exists for one purpose: so a coach and the officials working the same game can reach each other about that game. See §9 for exactly who can see it and for how long. We text you once, to confirm the number is yours — a six-digit code, sent through Twilio (§8). That is the only message we will ever send you: we do not use your number to sign you in, we do not send marketing texts, and we never sell or share it. Until a number has been confirmed this way it does not work — nobody is shown it — because otherwise anyone could enter anyone else’s number and we would be the ones handing it out.
- Role: whether you act as an official, a coach, a league administrator, or more than one.
- Home base: the ZIP code you provide, its city, and the latitude/longitude we derive from it. Officials also set a travel radius.
- Sports you work, your primary sport, and your certifications — including any certification document you upload as proof.
- Display preferences: theme and accent colour.
Activity on the platform
- Games you post or claim, positions and applications, teams, leagues and league memberships, dispatch requests and invitations.
- Ratings and written reviews you give and receive. OFFICIAL is two-sided: officials rate coaches and coaches rate officials.
- Earnings and payout records for games worked.
- Favourites, in-app notifications, and which announcements you have dismissed.
Support
When you use the support form we receive your message, subject, category, and the email address on your account.
Security
We record a failed-login counter per account, used solely to lock an account after repeated failures. It holds a count and timestamps — no IP addresses and no device fingerprints.
4. How we use information
We use your information to:
- Run the marketplace — match officials to nearby games, show distances, staff crews, track applications, and record earnings.
- Establish trust between strangers — ratings, review counts, certifications, and on-time history are what let a coach hand a game to an official they have never met.
- Manage Pro subscriptions and entitlements.
- Notify you about games, crew changes, applications, and account activity.
- Keep the platform safe — content filtering, image moderation, account lockout, suspension, and enforcement of our Terms.
- Respond to support requests.
- Comply with legal obligations.
We do not use your data for advertising, and we do not sell it.
5. Device permissions
The app asks for these only when a feature needs them. Each is optional; declining limits the related feature but not the app.
| Permission | Why | When |
|---|---|---|
| Location | To sort and filter games by real distance from you | Only while you are using the app, at the moment you use a distance feature. Never in the background. |
| Camera / Photo library | To take or choose a profile photo or an event cover image, and to attach certification proof | Only when you tap to add a photo or document |
| Notifications | To alert you about games, crew changes, and applications | Only if you allow it |
Your home ZIP is optional. You can change or clear your home base at any time in your profile.
6. Automated moderation
Two automated checks run on content you submit, both intended to keep the platform usable:
- Text filtering. Profanity in support tickets and other free-text fields is automatically censored before storage.
- Image moderation. Every image you upload — your profile photo, and the cover picture on an event you post — is sent to Sightengine, a third-party image classification service, and checked for nudity, offensive, and graphic content before it is stored. Images scoring above our threshold are rejected and never stored.
These checks are automated and can be wrong. If a photo is rejected and you believe that is a mistake, contact us at cherry@officialapp.net and a person will review it.
7. Cookies and similar technologies
The OFFICIAL mobile app does not use cookies. Your login session is stored locally on your device — in the app’s own secure preference storage on iOS and Android, and in browser localStorage on the web. It exists to keep you signed in. It is not an advertising or tracking identifier, and it is not shared with anyone.
Because we run no analytics and no advertising, there are no third-party tracking cookies to consent to or opt out of.
8. Third-party processors
These providers process data on our behalf under contract. We do not sell data to any of them.
| Provider | What it does | What it receives | Privacy policy |
|---|---|---|---|
| Supabase | Hosting, database, authentication, file storage | All account, profile, and activity data | Link |
| Google Maps Platform | Geocoding ZIPs and venue addresses; map display | Addresses and ZIP codes being looked up | Link |
| RevenueCat | Subscription and entitlement management | Purchase events, an app user ID, subscription status | Link |
| Apple App Store | Payment processing for iOS purchases | Payment details — we never see them | Link |
| Google Play | Payment processing for Android purchases | Payment details — we never see them | Link |
| Sightengine | Automated image moderation — profile photos and event covers (§6) | The image being checked | Link |
| Resend | Sending support notification email | Your support message and email address | Link |
| Twilio | Sending the one-time code that confirms your phone number (§3) | The phone number being confirmed | Link |
| Shopify | Branded gear storefront and checkout | Only what you enter at checkout — that transaction is with Shopify and us, on Shopify’s systems | Link |
| Apple APNs / Google FCM | Delivering push notifications | A device push token, if you enable notifications | Apple / Google policies above |
Merchandise checkout happens outside the app, on Shopify. Payment and shipping details you enter there are handled under Shopify’s terms.
9. What other users can see
OFFICIAL is a marketplace, so some of your profile is visible to other users by design:
- Officials are visible to coaches browsing for crew: name, photo, city, approximate distance, sports, certifications, rating and review count, and games worked.
- Coaches are visible to officials considering a game: name, photo, organisation, rating, and review count.
- Reviews you write are visible to the person you wrote them about and factored into their public rating.
- Your email address is never shown to other users.
- Exact coordinates are never shown. Other users see a city and a rounded distance.
- Your phone number, if you added one, is shown to one specific group at one specific time: the coach who posted a game and the officials confirmed on that same game, once the booking is confirmed, and until 24 hours after the game finishes. It then stops being visible to them. It is not in any directory, search result, or profile page, and no other user can reach it at any other time. If you would rather not share one, leave it blank or clear it — everything else in the app works the same.
- If you are under 18, read that last point with a parent or guardian. The people a phone number reaches on a confirmed game are adults you have not met. It is optional, nothing on OFFICIAL requires it, and leaving it blank costs you nothing.
10. Data retention
| Category | How long |
|---|---|
| Account, profile, and activity data | Until you delete your account |
| Certification documents | Until you remove the certification or delete your account |
| Profile photos | Until replaced or you delete your account; the previous photo is deleted on replacement |
| Support tickets | Until you delete your account |
| Failed-login counters | Cleared on successful login; deleted with your account |
| Notifications | Automatically expire after 3 days; deleted with your account |
When you delete your account
You can delete your account yourself, in the app, at Profile → Help & support → Delete account permanently. You do not need to email us. Deletion removes:
your name, photo, city, ZIP, coordinates, certifications and their uploaded documents, sports, teams, favourites, notifications, support tickets, subscription records, login records, and every rating and review you wrote or received — and your login is permanently deleted so you cannot sign in again.
One thing survives, and we want to be precise about it. Your profile row is kept as an anonymous tombstone reading “Deleted account,” carrying none of your personal data. This is because other people’s records legitimately reference it — a coach’s record of a game you worked, a payout on their books. Deleting the row outright would corrupt their history. The tombstone holds no name, photo, location, contact detail, or rating.
Before your account is removed, games you had claimed are released back to their coaches and games you had posted are cancelled, so other users are not left stranded.
11. Your rights
Wherever you live, you can access, correct, export, or delete your data. Most of it is directly editable in the app, and account deletion is self-service (§10). For anything else, email cherry@officialapp.net and we will respond within 30 days. We will not charge you or degrade your service for exercising these rights.
EEA and UK (GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the marketplace, your account, and Pro subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Safety, moderation, fraud prevention, service integrity | Legitimate interests (Art. 6(1)(f)) |
| Device location, camera, and notifications | Consent (Art. 6(1)(a)) — withdrawable in OS settings at any time |
| Legal and tax obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent — device location, camera and notifications — and the user is below the digital-consent age in their country (Article 8 sets it between 13 and 16, and member states choose within that range), that consent must be given or authorised by a parent or guardian. Each of those permissions is asked for by the operating system, is optional, and can be withdrawn in OS settings at any time.
You may lodge a complaint with your local supervisory authority.
California (CCPA / CPRA)
You have the right to know, delete, correct, and opt out of sale or sharing.
OFFICIAL does not sell or share personal information, and has not in the preceding 12 months. There is therefore no “Do Not Sell or Share My Personal Information” mechanism to offer — there is nothing to opt out of.
Consumers under 16. CPRA requires opt-in consent before selling or sharing the personal information of a consumer under 16. We do not sell or share anyone’s personal information, at any age, so that consent is never sought and there is nothing it could apply to. We do not knowingly collect personal information from anyone under 13.
Categories collected: identifiers (name, email, account ID); commercial information (subscription and payout records); geolocation (ZIP, derived coordinates, optional device location); professional information (certifications, sports, games worked); visual information (profile photo, certification documents); and internet activity limited to in-app actions. Each is collected for the purposes in §4 and disclosed only to the processors in §8.
12. International transfers
Your data is processed in the United States (Supabase West US — Oregon) and by the providers in §8, which operate in the United States and elsewhere. Where data leaves the EEA or UK, transfers rely on Standard Contractual Clauses or another approved mechanism under our agreements with those providers.
13. Children
OFFICIAL is for users 13 and older.
Under 13. OFFICIAL is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe someone under 13 has created an account, contact cherry@officialapp.net and we will delete the account and its data.
13 to 17. You may hold an account. We collect exactly what we collect from an adult — the account, profile and activity data in §3 — and nothing in addition: no behavioural profiling, no advertising, no data sale or sharing, at any age. The optional permissions in §5 stay optional.
What a parent or guardian should know. OFFICIAL is a marketplace, not a closed youth app. It puts a user in contact with adults they have not met — coaches, assignors and other officials — to agree and work games, and it is those users, not OFFICIAL, who arrange and pay for the work (see our Terms). If you are under 18 we ask you to set your account up with a parent or guardian, and to read §9, What other users can see, together. The phone number described there is optional; nothing on OFFICIAL requires one.
A parent or guardian can exercise every right in §11 on behalf of a user under 18 — including seeing what we hold and having the account deleted — by writing to cherry@officialapp.net.
Note that games on OFFICIAL frequently involve youth sports. We collect data about officials and coaches — never about the student athletes who play in those games.
14. Security
- All traffic is encrypted in transit (TLS). Data at rest is encrypted by our hosting provider.
- Passwords are salted and hashed; we cannot read them.
- Accounts lock after repeated failed logins, and email verification is required.
- Row-level security means the database itself enforces who can read and write each record — not merely the app.
- Certification documents are stored in a private bucket, reachable only by you and us.
- Content moderation runs before an image is stored, not after.
- We enforce a Content Security Policy on our web surfaces.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data we will notify you and the relevant authorities as required by law — within 72 hours where GDPR applies.
15. Changes
We may update this policy. Material changes will be posted with a new “Last updated” date and surfaced in the app. Where the law requires it, we will ask for your consent again.
16. Contact
cherry@officialapp.net — or the support form in the app under Help & Support. We respond within 30 days.