Privacy & Security FAQ
Jr Saints app and scjrsaints.com
Your family trusts us with information about your kids, so here are straight answers about where it lives, who can see it, and how it is protected. If something here doesn’t answer your question, email apps@scjrsaints.com.
Where is our information stored?
Registration details, rosters, chat messages and your sign-in are stored in a managed database run by Supabase. It is not kept on anyone’s personal computer, and it is not in a spreadsheet that gets emailed around. Supabase encrypts stored data, and everything travels between your phone and our systems over encrypted (HTTPS) connections.
The website itself is hosted by Cloudflare, which also helps shield it from attacks and bad traffic.
Who runs the technology behind the app?
| Company | What it does for us |
|---|---|
| Cloudflare | Hosts the website and helps protect it from attacks |
| Supabase | Database, sign-in and private file storage |
| Square | Takes card payments for registration |
| OneSignal | Sends push notifications |
| Resend | Sends emails, like sign-in codes and registration confirmations |
These companies process information only to provide those services to the league. We don’t sell your information or use it for advertising.
Is my payment information safe?
Card payments are handled by Square. Your card number goes to Square, not to us. The league never sees or stores your full card number. We keep only the payment record (what was paid and when) so we can match it to your registration.
How do I sign in? Why no password?
You enter the email you used to register and we email you a one-time code. Only registered parents, the family members they add at registration (grandparents, a sitter, anyone they choose), and approved coaches and league volunteers can get a code. You only see the players registered under your email. There is no password to forget, reuse or have stolen. In the app you can also turn on Face ID (or your fingerprint) so only you can open it on your phone.
Tip: use an email account that only you can open, and keep your phone locked with a passcode.
Who can see what?
| Information | Who can see it |
|---|---|
| Team Chat board posts | The families and coaches of that team, and league administrators |
| League chat | Families and coaches in the league |
| Private messages | Only the two people in that conversation. If someone reports a message, the administrators who review reports can see that message. |
| Rosters (names, birth dates, contact details) | League administrators and that team’s coaches |
| Registration details, medical notes and allergies | League administrators only |
| Birth certificates | League administrators only. They are kept in private storage, not on any public page. |
| Your Saint photo | You (it is stored privately under your account) |
| Game day pics | Public on the website, but only after an administrator approves them |
League administrators are a small group of volunteers who run the league. They use the same sign-in as everyone else.
What happens if something goes wrong?
If we ever learn that your information was exposed, we will tell the affected families promptly, explain what happened, and tell you what we are doing about it. Questions or concerns can be sent to us by email at any time.
Are my kids’ photos public?
Your own Saint photo in My Saint is private to your account. Game day pics are different: they are meant to be shared with the community, so an approved pic appears publicly on the website. Only post pics you are comfortable sharing. If you want a photo removed, email us and we will take it down promptly.
Do children have accounts?
No. Accounts are for parents, guardians and coaches. Information about players is entered by a parent or guardian, or by the league.
Can I delete my information?
Yes. Parents can delete their chat account and its data at any time in the app, with no waiting period. See how to delete your account. To correct or remove your player’s registration record, email apps@scjrsaints.com.
What if someone is being inappropriate in chat?
Use the Report link under any message. League administrators review reports promptly. You can also block a person so you no longer see their messages.
Can you promise it can’t be hacked?
No honest organization can promise that, and we won’t. What we can say is that we use established providers, limit access by role and by team, use one-time email codes instead of passwords, and keep card data with Square. If we ever learn that your information was exposed, we will tell the affected families.