Privacy Policy

The Service is used by parents/guardians, players, coaches, and club administrators. Accounts are held by adults (parents/guardians and staff). Information about players — who may be minors — is entered by their parent/guardian or by club staff. See “Children’s information” below.

Information you provide

• Account & contact information: name, email address, phone number, and (if you sign in with Google) your Google account email and name.
• Player/registration information: player names, dates of birth, ages, gender, skill level, team/program assignments, guardians, and any emergency or medical notes you choose to enter.
• Payments: program fees and payment method details are collected and processed by our payment processor (Stripe). We do not store full card numbers; we retain limited records such as amounts, dates, status, and receipt identifiers.
• Communications: messages, notes, RSVPs, form submissions, and support requests you send through the Service.
• Marketing/lead information: if you contact us or submit an inquiry form, we store the details you provide so we can follow up.

Information collected automatically

• Device & usage data: app version, device type/OS, IP address, screens viewed, and diagnostic/error data, used to operate, secure, and improve the Service.
• Push notification tokens: a device token so we can send you notifications (you can disable notifications in your device settings).
• Cookies/similar technologies: session cookies to keep you signed in.

• Provide and operate the Service (registrations, scheduling, attendance, payments, messaging, notifications).
• Process payments and send receipts.
• Send transactional messages (confirmations, reminders, schedule changes) by email, SMS, and push, and — where you have opted in — club announcements.
• Provide customer support and respond to inquiries.
• Maintain security, prevent fraud and abuse, and debug problems.
• Comply with legal obligations.

Our legal basis under PIPEDA is your consent (which you may withdraw) and our legitimate interest in operating the club, except where the law requires otherwise.

We do not sell your personal information. We share it only as needed to run the Service, with:

Service providers (“sub-processors”) who process data on our behalf under contract:

• Stripe — payment processing
• Twilio — SMS messages
• Resend — transactional and marketing email
• Google Firebase (FCM) / Google — push notification delivery and Google Sign-In
• Vercel — application hosting
• Neon — database hosting
• Sentry — error monitoring
• Segment — product analytics

• Optional integrations you enable: if your club connects a third-party CRM or social tool (e.g. GoHighLevel, Buffer), relevant data is shared with that provider under its own terms.
• Legal/safety: when required by law, to enforce our terms, or to protect the rights, safety, and property of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

Some of our service providers are located in the United States or other countries. Where personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions. We use reputable providers with appropriate safeguards.

Payments are processed by Stripe. Your card details are transmitted directly to Stripe and handled under Stripe’s Privacy Policy (stripe.com/privacy). We receive confirmation and limited transaction metadata, not full card numbers.

The Service is intended for use by adults (parents/guardians and club staff). Players may be minors, but children do not create their own accounts. Player information is entered by a parent/guardian or authorized club staff, who are responsible for its accuracy and for having authority to provide it. We use children’s information only to deliver club programs and related communications. A parent/guardian may review, update, or request deletion of their child’s information by contacting us at admin@nucleussportsacademy.com.

• Email: every marketing email includes an unsubscribe link. Transactional messages (e.g. receipts, schedule changes) are necessary to the Service.
• SMS: reply STOP to opt out of text messages; message/data rates may apply.
• Push: disable notifications anytime in your device settings.

We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter as required for legal, accounting, tax, or dispute-resolution purposes. You may request deletion as described below.

We use industry-standard measures including encryption in transit (HTTPS), access controls, and per-club data isolation. No method of transmission or storage is 100% secure, but we work to protect your information.

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal information.
• Withdraw consent to non-essential processing (this may limit the Service).
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these, contact us at admin@nucleussportsacademy.com. We will respond within the timeframe required by law.

The Service may link to third-party websites or services we do not control. Their privacy practices are governed by their own policies.

We may update this policy from time to time. Material changes will be posted here with a new effective date and, where appropriate, notice in the app.

Nucleus Sports Academy Inc.
Attn: Privacy
158 Felan Avenue, Oakville, ON, Canada L6K 2X5
Email: admin@nucleussportsacademy.com or admin@pdmbasketball.com