1. The short version

We collect what we need to run the service and pay people correctly. We don't sell your data. We don't tell your school, team or federation what you've earned — you export that yourself if you need to.

2. What we collect

2.1 You give us

• Account details — name, handle, email, sport, team or school, photo
• Verification materials, where you submit them
• Content you post, and messages you send
• Payout details, which are collected and held by Stripe rather than by us

2.2 We record automatically

• Transactions — amounts, timing, and which athlete they relate to
• Usage — pages viewed, features used, approximate location from IP
• Device and browser information, and crash diagnostics
• Link clicks, so athletes can see whether their link is working

2.3 We never hold

Full card numbers. Those go from your device to Stripe directly.

3. Why we use it

• To run the service and move money correctly
• To verify identity and prevent impersonation and fraud
• To show athletes how their page is performing
• To send transactional messages, and notifications you've opted into
• To meet tax, accounting and legal obligations

Counsel to map each purpose to a lawful basis if operating in the UK or EU.

4. Who we share it with

• Stripe — payments, payouts and identity verification
• Amazon Web Services — hosting, media storage and live video
• Analytics, email and customer support providers, under contract
• Law enforcement or regulators where legally required

We do not sell personal information, and we do not share it with schools, leagues or governing bodies unless you ask us to or the law requires it.

5. Public information

Your athlete page, your handle, your posts and the supporter wall are public. A fan's name appears on the supporter wall only if they choose to show it — anonymous is a single toggle at checkout.

6. Keeping it

Account and content data is kept while your account is open. Transaction records are kept for as long as tax and accounting law requires, typically seven years, even after an account closes. Counsel to confirm retention periods per jurisdiction.

7. Your rights

You can access, correct, export or delete your data. Some records — completed transactions in particular — must be kept for legal reasons even after deletion of the account. Residents of certain states and countries have additional rights. Counsel to draft the CCPA/CPRA and UK/EU GDPR sections, including the “do not sell or share” disclosure.

8. Children

The service is not directed at children under 13 and we do not knowingly collect their data. Counsel to address COPPA and the treatment of minor athletes if high school is brought into scope.

9. Security

Encryption in transit and at rest, access controls on production data, and audit logging on anything that touches money. Report anything you find to trust@tiptheplay.com.

10. Changes and contact

We'll notify material changes by email and in the app. Questions: privacy@tiptheplay.com