Draft for review. This hasn't been reviewed by a lawyer and isn't in effect yet. Items in [brackets] are still to be filled in.
Privacy policy
Effective [date]. This covers the hosted LawFive service at app.lawfive.app and api.lawfive.app, and the LawFive apps when they're connected to it. In short: it's your record of your matches. There are no ads and no analytics, and your data isn't sold.
Who runs it
LawFive is run by [publisher's legal name and address] ("we"). Questions go to privacy@lawfive.app.
If you use your own server
LawFive is open source, and the apps can connect to a server that someone else runs. If yours does, this policy doesn't apply to it: whoever runs that server decides what happens to your data, and we never receive it. Ask them for their policy.
What we keep
- Your account: name, email address and a hashed password, and your settings such as units and currency.
- Your matches: teams, kickoff times, venues, competitions, templates, the score, goals and cards with player numbers, notes, tags and fees.
- Other people's details that you enter: names, email addresses and phone numbers of referees you work with, and team names. Only add what you have a right to keep.
- Location: the GPS track your watch records during a match, the pitch corners you mark, kickoff direction, and the places you save for venues.
- Heart rate: the readings your watch records during a match, the maximum heart rate you set, and the figures worked out from them. In some places this counts as health data; we only keep it because you chose to record it, and you can turn track recording off on the watch or delete a track at any time.
- Photos you add to matches, venues and referees. The apps make them smaller before uploading, which removes where they were taken and the camera's details.
- Devices: each signed-in browser, phone and watch, with its name, type or model, software version and when it was last active, which you can see and sign out in Settings.
- How a recording went: with each match from a watch, its battery level at kickoffs and period ends, app and watch software versions, restarts and GPS quality. We use this only to trace problems.
- Server logs and limits: your IP address, used briefly to limit repeated attempts such as wrong passwords, and in server logs kept for [period].
Why, and on what basis
- To provide the service you asked for: keeping your record and syncing it across your devices (performing our contract with you).
- To keep it secure and working, such as limiting attempts and tracing faults (our legitimate interests).
- To record heart rate and location, which you choose to do (your consent, which you can withdraw by turning recording off or deleting the data).
- To send email about your account: invitations, approvals and password resets. We don't send marketing without asking.
Who else sees it
We don't sell your data or share it for advertising. These services help run LawFive:
- [Hosting provider], where the server and database run, and Cloudflare, which sits in front of the service and this site.
- [Email provider], which delivers account email.
- Open-Meteo, for weather. The server asks for a rough place, a square about 5 km across around your venue, not who you are.
- OpenStreetMap's Nominatim, for address search. The server sends what you type, not who you are.
- Map providers: OpenFreeMap, and a satellite imagery provider where it's turned on. Your browser or phone asks them directly for map pictures, so they see your IP address and the area you're viewing. The iPhone and Apple Watch apps use Apple's maps instead.
- Garmin: if you use a Garmin watch, its sync passes through Garmin Connect on your phone, and the activity it records is yours in Garmin Connect, under Garmin's own privacy policy. Apple and Google likewise run the devices and stores you get the apps from. On Android, scanning a QR code uses Google's code scanner.
Your data stays private unless you share it: a share link shows a reduced copy of one match to anyone who has the link, until you turn it off. Webhooks and API keys send your data where you tell them to. We may disclose data when the law requires it.
How long we keep it
Until you delete it or your account. Sign-in sessions end after 90 days without use, invitations after 14 days, and password reset links after an hour. Deleting your account removes everything in it straight away, and copies in backups go within [period]. See how to delete your account.
Your rights
You can see and correct your data in the apps, download all of it with Download everything (Settings → Account on the website), and delete it. Depending on where you live, including under GDPR, UK GDPR and California law, you may also have the right to object to or restrict how we use it, to withdraw consent, to know what we keep, and to complain to your data protection authority. We don't sell or "share" personal information as California law defines it. To ask for anything here, write to privacy@lawfive.app.
Young referees
LawFive isn't aimed at children. You must be at least 13 to have an account, or older if your country's law says so (16 in parts of Europe), and anyone under 18 should have a parent's or guardian's permission. If we learn that someone under the minimum age has an account, we'll delete it. If you referee youth matches, please record players by shirt number rather than name. [Minimum age to be confirmed in legal review, and kept the same in all three stores.]
Security and where data lives
Data travels over HTTPS, passwords are hashed, and sessions on phones and watches are kept in the system's protected storage. No service is perfectly secure; if something goes wrong that affects you, we'll tell you as the law requires. Data is kept in [country or region], so if you're elsewhere it's transferred there, under [safeguards].
Changes
If this policy changes in a way that matters, we'll say so in the apps or by email before it takes effect.