In short
- We collect what is needed to run a club app: your account, profile, the players you look after, and what you tell your club (for example, whether you can attend).
- Your club decides what it records about you. We store and process that for the club, and you can ask either of us about it.
- We do not sell personal information, and v1 of the app has no advertising or third-party analytics tracking.
- We use a small number of providers (hosting, email, push notifications). Some are outside Australia.
- You can ask to see, correct or delete your information, including by deleting your account.
- Contact us at support@eleven2go.com, or the OAIC if you are not happy with our response.
1. Who we are
Eleven2Go ("Eleven2Go", "we", "us" or "our") is an Australian-based provider of a club management app for iOS, Android and the web. This Privacy Policy explains how we collect, hold, use and disclose personal information through the app, this website and related services (the "Service"), and your choices.
We play two roles. For information we collect for our own purposes, such as account security and support, we are the entity responsible for it. For information that a club or other organisation (an "Organisation") puts into the Service about its members, players, guardians and staff, the Organisation decides why and how it is used and we handle it on its behalf, as its service provider. An Organisation's own privacy practices are set out by that Organisation.
2. Australian privacy law
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy is our APP 1 privacy policy. If you are in another country, see section 13.
3. What we collect
The information we collect depends on how you use the Service and which features your Organisation uses. It may include:
| Category | Examples |
|---|---|
| Account | Login email address, a secure representation of your password (held by our sign-in provider, never in readable form), verification and reset codes, sign-in activity. |
| Profile | Name, preferred name, contact email and phone number, profile photo, language and display preferences. |
| Player information | Name, date of birth, contact details, team and group membership, season and role, and other details an Organisation chooses to record. |
| Guardian links | Which guardian accounts can act for which player, and the relationship and permissions that apply. |
| Participation | Event details, your responses to events (for example attending or not), attendance, and messages or notes recorded by you or by an Organisation's staff. |
| Photos and images | Images you or an Organisation upload, such as profile photos. |
| Notifications | Notifications sent to you, your notification settings, email addresses we send to, and device or push tokens. |
| Device and usage | IP address, device type, app version, operating system, language, and technical logs and error records needed to run and secure the Service. |
| Support | Emails and other messages you send us, and what we need to resolve the issue. |
We do not knowingly collect sensitive information (as defined in the Privacy Act, for example health information) unless a feature of the Service is designed for it and the Organisation has obtained the required consents. Organisations must not record sensitive information about a person unless it is necessary and they have the required consent. Some features may in future let an Organisation record health or medical details, and where they do, access is restricted to specifically authorised staff.
4. How we collect it
- From you. When you create an account, complete a profile, respond to an event or contact us.
- From Organisations. An Organisation's staff may add people, invite you, create players, link guardians, record notes and upload images. Information about a player often comes to us from the player's Organisation or guardian, not from the player.
- From guardians. A guardian may provide information about a player, and confirms they are authorised to do so.
- Automatically. Our systems and your device provide technical information when you use the Service.
- From service providers that help us run it, such as our sign-in provider.
If you give us information about another person, please make sure you are allowed to, and that they know.
5. Children and young people
Players are often under 18. The Service is designed so that a guardian can manage a player's information and act for them. Organisations are responsible for deciding who may use the Service for a player and for obtaining consent for their players. We collect only the information about a young person that is needed for the club activities the Service supports, and information about a young person is visible only to that person, their linked guardians and the authorised staff of their Organisation, in line with the Organisation's permissions. Profile photos and other images are stored on public image hosting, which means that anyone with an image's exact address may be able to view it (see our Terms).
A guardian can ask us to show, correct or delete information about a player in their care. If you believe we hold information about a young person without proper authority, contact us and we will look into it.
6. Why we use it
We use personal information to:
- provide, operate and secure the Service, including signing you in, showing teams, schedules and events, recording responses and delivering notifications;
- let Organisations manage their members, players, guardians and staff;
- send you service messages by push, email and in the app (see section 14 for marketing);
- provide customer support and respond to you;
- keep the Service safe, detect and prevent fraud, abuse and security incidents, and enforce our Terms;
- maintain, test and improve the Service, including by using de-identified or aggregated information;
- comply with our legal obligations and establish, exercise or defend legal claims; and
- provide features that use AI or automated processing (see section 10).
We use and disclose personal information for the main purpose for which we collected it, for related purposes that you would reasonably expect, where you have consented, and where the law requires or permits.
Where privacy laws require a legal basis (see section 13), we rely on: performing our agreement with you, legitimate interests in running, securing and improving the Service (balanced against your rights), complying with law, and, where needed, your consent, which you can withdraw at any time.
7. Who we share it with
- Organisations and their authorised staff. Information about you or a player is available to the Organisations you or the player are linked to, according to the permissions each Organisation has set. Information is kept separate for each Organisation; an Organisation cannot see information you gave to a different Organisation.
- Guardians. Guardians linked to a player can see and manage that player's information.
- Other members. What other members of your team or Organisation can see (for example, a name or profile photo) is decided by the Organisation's settings.
- Service providers. Companies that help us run the Service and that handle personal information only for that purpose, such as cloud hosting, sign-in and database services (Amazon Web Services), email delivery (SMTP2GO), push notification delivery (Expo) and, in future, other tools we use to operate and support the Service.
- Our professional advisers such as lawyers, accountants and insurers.
- Authorities and others where required or permitted by law, for example to comply with a court order, to protect safety, or to prevent fraud or serious wrongdoing.
- Business transfers. If Eleven2Go is involved in a merger, acquisition, financing or sale of assets, information may be transferred to the other party, subject to this policy.
- Anyone you ask us to.
We do not sell personal information. We do not use it for third-party advertising.
8. Overseas disclosure
The Service is hosted on Amazon Web Services. Our primary hosting is currently in the Asia-Pacific region (Singapore), so personal information is stored and processed outside Australia. Our email delivery provider, our push notification provider (Expo) and other providers may also process information in other countries, including the United States and other locations where they or their sub-processors operate. Notifications sent to your device also pass through Apple and Google.
Where we disclose personal information overseas, we take reasonable steps in line with APP 8 to ensure the recipient handles it in a way that is consistent with the APPs, for example through contracts and by choosing reputable providers. By using the Service, you acknowledge that in some cases the overseas recipient may not be subject to laws that are the same as the Privacy Act, and, to the extent the law allows, that APP 8.1 may not apply to these disclosures. Our hosting location may change, and we will update this policy where the change is material.
9. Cookies and local storage
The Service does not use advertising or third-party analytics cookies or trackers. The web app and this website store a small amount of information in your browser or device, such as your theme preference (light or dark) and information needed to keep you signed in. This is stored on your device, and you can clear it through your browser or device settings. If we add cookies or similar technology for other purposes, we will update this policy.
10. AI features and automated processing
Eleven2Go may offer features that use AI or automated tools to suggest, draft, summarise, translate or organise content. If you use such a feature, we may process the content you or your Organisation choose to use with it, including personal information in that content, using our service providers. We do not use personal information in customer content to train general-purpose AI models, and do not permit our AI providers to, unless you or the Organisation have given consent. AI output can be wrong and should be reviewed before use. We do not use automated processing to make decisions with legal or similarly significant effects on you. Automated processes are used for things like scheduling reminders and sending notifications.
11. How long we keep it
We keep personal information for as long as needed for the purposes in this policy, including while your account is active and while an Organisation needs it to run its activities. When you delete your account, we remove or de-identify your personal information, except that we may keep what we need to meet legal obligations, resolve disputes, enforce our agreements, maintain security and audit records, and what an Organisation holds as its own records of its members and activities. Information may remain in backups for a limited period before it is overwritten. When information is no longer needed, we take reasonable steps to destroy or de-identify it.
12. Security
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted connections, access controls based on permissions, separation of each Organisation's data, logging of sensitive actions, limiting staff access to what is necessary, and careful selection of providers. No system is completely secure. Please use a strong password, keep it private and tell us if you suspect your account has been compromised.
Notifiable data breaches. If we have reasonable grounds to believe there has been an eligible data breach (one likely to result in serious harm), we will assess it and, as required by the Notifiable Data Breaches scheme under the Privacy Act, notify affected individuals and the Office of the Australian Information Commissioner (OAIC). Where we hold information on behalf of an Organisation, we will tell that Organisation so that it can meet its own obligations.
13. Your rights and international users
Access and correction. You can ask us for access to the personal information we hold about you and ask us to correct it. You can update much of it in the app. For information an Organisation holds about you or a player, we may refer you to the Organisation, which decides how to respond, and we will help it where we can.
Deletion. You can delete your account from inside the app. See Delete your account for what is removed and what an Organisation may keep.
How to ask. Email us at support@eleven2go.com from the address on your account. We may need to verify your identity, or a guardian's authority, before we act. We will respond within a reasonable time, usually within 30 days. We may refuse a request where the law allows, and will tell you why.
Users outside Australia. If you are in the European Economic Area, the United Kingdom or another place with data protection laws, you may have additional rights, such as to object to or restrict certain processing, to data portability, and to withdraw consent, and to complain to your local authority. We will honour those rights as the law requires. Our handling of your information is governed by this policy and, where it applies, by the relevant law. The Service is aimed at Australian clubs, and we transfer information to Australia and other countries as described in section 8.
14. Marketing
We may send you information about Eleven2Go, where the law allows. You can opt out at any time using the unsubscribe link in a message or by contacting us. Opting out of marketing does not stop service messages (such as security, account and club notifications). Messages from your Organisation are sent by the Organisation, and you can manage notifications in the app and in your device settings.
15. Complaints
If you think we have breached the APPs or this policy, please email us at support@eleven2go.com with details. We will acknowledge your complaint promptly, investigate and reply within a reasonable time. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or by calling 1300 363 992.
16. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for a material change, give reasonable notice, such as a message in the app or by email.
17. Contact us
For privacy questions or requests, email support@eleven2go.com. Please include the name of your club and the email address on your account.