Privacy policy

Who is responsible for your information

The All Rounder is operated by Cricket All Rounder (Pty) Ltd (registration number 2026/621889/07) (“we”), the responsible party for the personal information described here under the Protection of Personal Information Act, 2013 (POPIA). Our address is 8 End Street, Cape Town, Western Cape, 7441.

Our Information Officer is Stefan Roodt, registered with the Information Regulator (registration number 2026-067178). Questions, requests and complaints go to info@theallrounderza.co.za.

What we collect

Account details. Your name, email address, the roles you use the app in (parent, player, coach or organisation), and, if you add them, a photo, where you coach and a short bio. If you sign in with Google, we receive your name and email address from Google.

Player profiles. A player's name, date of birth, school, club, province, the sports they play and their details in each (a batting style or a hockey position, say), and a profile photo.

Videos and documents. Clips of a player playing or introducing themselves, and documents such as scorecards, certificates and testing results. Photos, videos and voice notes have their location taken out before they reach us (see below).

Sporting record. Matches, innings and spells logged against a player in each sport, and any notes attached.

Coaching content. Written reports, ratings and voice notes a coach records about a player.

Bookings. Sessions booked with a coach: the name, email and phone number given when booking, who the session is for, and any note. Packs of sessions a coach sends, and who they were sent to.

Payments. Card payments are handled by our third party payment provider; we never see or store card numbers. For a subscription we keep the card's brand, last four digits and expiry, and a reference that lets the provider charge it again when the subscription renews. For a coach who is paid through the app, the bank account number goes to the provider and is not stored by us; we keep only the bank's name and the last four digits. We keep a record of every payment, refund, subscription and invoice.

Organisations. An organisation's name, type, location, contact details and the sports it offers, the coaches and players on its lists and teams, and what it posts to its followers. An organisation may mark a player or clip to show interest, and keep a private rating. We record when an approved organisation opens a player's profile.

Using the app. Notifications we send you, the organisations you follow, devices you have allowed push notifications on, content you report, and feedback you send us.

What you have to give us

To open an account we need your name and email address. A player profile needs only the player's name and their sport; their date of birth, school, club, photo and the rest are up to you, and you can leave them out or remove them later. A booking needs a name and a way for the coach to reach you. Everything else, from clips and documents to a coach's bio, is optional.

Health information

We don't ask for health information, and we would rather not hold it. Fitness testing results, such as a sprint time, are part of a player's sporting record, but please don't upload medical records, injury or doctor's reports, or anything else about a player's health. If we find one, we remove it.

Children's information

Most players on The All Rounder are children, and POPIA treats a child's personal information as a special category. We process it with the consent of the child's parent or guardian.

Accounts are for adults. A player under 18 doesn't have an account of their own: a parent or guardian runs their profile from a Family account. If we learn that someone under 18 has opened an account, we close it.

Whoever creates a player profile confirms that they are the player's parent or guardian, or that they have the guardian's permission, including permission to upload photos and video. When a profile is created, we record who gave that confirmation and when. Whoever uploads a clip confirms that everyone clearly in it is happy to be in it, which for a child means their parent or guardian.

A parent or guardian may withdraw consent at any time. Whoever created the profile can delete the player from the player's edit page, and so can the family once they have taken over a profile a club or coach registered; any parent or guardian can write to info@theallrounderza.co.za. Either way the profile, its record and its media are removed.

When a player turns 18, their family can hand the profile over: from Sharing on their account page they send the player a one-time link, which the player opens with their own Player account. Their record, clips and reports stay with them, and the family still sees the profile. Once they have it, they can ask us to remove a parent's or guardian's access, and we will.

Why we process it

To keep a player's sporting record; to let the coaches and family linked to a player follow their progress; to let schools, academies, clubs and franchises find players and follow their development; to arrange and take payment for coaching sessions; to run subscriptions and issue invoices; and to keep the service safe. We do not sell personal information, and we do not use it for advertising.

Emails and notifications

We don't send marketing emails. We email you only about your account, your bookings and sessions, invoices and payments, and your subscription. News from organisations you follow arrives as a notification in the app (and on your phone, if you have allowed notifications), never by email. We never give your email address to anyone to market to you.

Who can see a player

Their family and coaches. The player's parents and guardians linked to the profile, the player themselves if they have an account, and the coaches they are linked to see the whole profile. The family can remove a coach at any time. The player's share code then changes, so the old one links nobody, and the coach no longer sees the player through any organisation or fellow coach either.

Organisations. Approved organisations (schools, academies, clubs and franchises) can find players and see their name, age, school, club, province and photo, and their clips and stats too, unless the family's trial has ended without a subscription. They read coach reports only when the family allows it, under “Let approved organisations read coach reports”, or when one of their own coaches wrote them. Only families create player profiles. A player an organisation registered before that is found by other organisations only once a family has the profile. Organisations can only look at the players they find; they cannot change a player's record. An organisation that registered a player itself can correct or remove that record only until the player's family takes the profile over, and that stays so even if the family later leaves; from then on it can only look, the coaching links it made for the player end, and the player's code changes so only the family can pass it on. Every organisation is checked by us before it can see any player, through any of its coaches or teams as much as through its own search, and only we can hand an organisation to another account. A coach becomes part of an organisation only by joining it with its code or accepting its invitation. A family can switch this off for a player under “Let organisations find this player” on the player's profile. That also takes the player off the lists and teams of every organisation none of their coaches has joined; an organisation can go on holding them only while one of the player's coaches is part of it and linked to the player. Whatever the switch says, the player's coaches still see them, as do the owner and coaches of any approved organisation one of those coaches has joined (never a coach the family has removed), and an approved organisation that registered the player itself.

Interest from organisations. When an organisation marks a player or a clip to show interest, the player and their family see which organisation it was. That is its purpose. When an approved organisation opens a player's profile, we record which organisation, the day and how many visits, and show that to the player's family and the player only; never to a coach or to another organisation. We keep it for twelve months. A visit by an organisation that already has the player on its own lists or teams, or that registered the player, is not recorded. An organisation's private rating is never shown to the player.

Public pages. Pages anyone can reach show only coaches, organisations and their published session times. No child's name, photo, date of birth or footage appears on a page a signed-out visitor can reach. Links to a booking, a pack of sessions or an invoice are private to whoever holds the link.

These rules are enforced in the database itself, not only in the app. Clips are served through short-lived links, but we cannot stop someone who is allowed to watch a clip from recording their screen. Our terms forbid anyone from saving or sharing footage outside the app.

Photos, videos and voice notes

Location. Phones often record where a photo or video was taken inside the file itself. Before a photo, video or voice note is uploaded, we take that location out on your own device, so it never reaches us. A file we can't check is not uploaded. Files uploaded before we started doing this are cleaned the same way.

No face recognition. We don't run face recognition or any other automated analysis on photos, videos or voice notes. They are stored and shown to the people allowed to see them, and nothing else is done with them. If that ever changes, we will update this policy first and say who does the work.

Removing a clip. The player's family (a parent or guardian linked to the profile, or the player on their own account) can delete any clip on the player's profile, whoever uploaded it. Whoever uploaded a clip can delete it too.

Your player in someone else’s clip. If your player appears in a clip on another player's profile and you don't want them to, write to info@theallrounderza.co.za, or use Report under the clip if you can see it. We look at every report within 24 hours. We take the clip down if it breaks our terms, or if you are the parent or guardian of someone clearly in it and ask us to.

Who we share it with

Only the service providers that run the app for us, each bound to protect it and to use it only for that purpose:

• Supabase, which hosts our database and media storage in London, United Kingdom
• Vercel, which serves the app and counts page visits
• Our third party payment provider, which processes card payments and pays coaches
• Our email delivery provider, which sends account, booking and billing emails
• Google, if you choose to sign in with Google
• The push notification service of your browser or phone, if you turn notifications on

We also pass on what a booking needs: a coach sees the name and contact details given when booking with them. We disclose information to the authorities only when the law requires it.

Where it is stored

Some of these providers are outside South Africa, so personal information leaves the country. The United Kingdom has data protection law comparable to POPIA, and our providers are bound by contractual terms requiring a similar level of protection, as section 72 of POPIA requires.

How long we keep it

A player's profile, record, reports and media are kept while the profile exists. Delete the player and they are removed with it.

Close your account and we remove your personal details. Records you created about other people, such as a player's innings or a coaching report, stay with that player, because they are that player's record and not yours.

When something is deleted, whether a clip, a photo, a voice note, a player or an account, it leaves the app straight away and its files leave our storage within a day. Our database is backed up daily and each backup is kept for 7 days, so deleted details are gone from the backups within 7 days too.

Payment records, invoices and the details on them are the exception: tax law requires us to keep them for five years, so they are kept for that long even after an account is closed, and used for nothing else.

Cookies and storage on your device

We use a cookie to keep you signed in, and your browser's storage to remember a few things on your device, such as where the back button should take you and innings logged while you were offline. We do not use advertising or tracking cookies.

We count visits to our pages with Vercel Web Analytics, which sets no cookies and does not identify you. Addresses are counted without player names, the codes in booking, pack and invoice links, or anything after the question mark except a tag saying where a visit came from.

Your rights

You may ask what we hold about you, have it corrected, or have it deleted, and object to how we use it. You can download a copy of your data and close your account from your account page at any time, or write to info@theallrounderza.co.za and we will do it for you.

If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

Security

Media is held in private storage and served through short-lived links signed for the person requesting them, so a clip's link is useless on its own. Access rules are enforced by the database. No system is perfect, and if a breach affects your information we will tell you and the Information Regulator as POPIA requires.

Changes

If we change this policy we will update the date above, and tell you in the app when the change is significant.