Privacy Policy for The Water Polo App

Introduction

Welcome to The Water Polo App, provided by Activebeans (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, and protect your information when you use The Water Polo App (iOS), the Activebeans website (www.activebeans.com), and any related services operated by Activebeans (collectively, the “Services”).

1. Information We Collect

1.1. Personal Information

When you register or use The Water Polo App, we may collect personal information such as:

• Email address (account identifier)
• Profile information (name and country)
• Optional profile information (profile picture, description, birthdate, gender, dominant hand, height, weight, wingspan, positions, favorite cap)
• Organizations, teams, and accounts you follow
• Accounts that follow you
• Team and game roster memberships
• Game statistics

1.2. Usage Data

We may collect information about how you use the Services, including:

• Device information (device model, operating system version, unique device identifiers)
• Log data (e.g., signup, signin, signout, access times, screens viewed)
• Usage analytics (app sessions, feature interactions) collected via Google Analytics
• Crash reports (device state, error logs) collected via Google Crashlytics
• For our website: standard web server logs

Usage analytics are not collected from Minor Athlete accounts (see Section 9).

2. Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on one or more of the following legal bases:

Contractual performance (Art. 6(1)(b)). We process personal data that is necessary to provide The Water Polo App's core functionality under our Terms of Service. This includes creating and maintaining your account, recording game statistics and scores, managing team rosters and memberships, delivering push notifications for game updates, and enabling search so coaches and administrators can find athletes for roster management.

Legitimate interests (Art. 6(1)(f)). We process personal data where we have a legitimate business interest that is not overridden by your rights and freedoms. This includes improving app performance and reliability, analyzing aggregated usage patterns to develop new features, and maintaining the security and integrity of the app. Because The Water Polo App is a sports scoring and statistics tool — not an advertising-driven platform — our legitimate interests are limited to operating and improving the service itself.

Consent (Art. 6(1)(a)). We rely on consent where required by law. This includes verifiable parental consent for processing personal data of children under 13 (as required by COPPA and described in Section 9), optional profile information you choose to provide (such as profile photo, birthdate, or physical attributes), and any future processing activities for which we specifically request your consent. You may withdraw consent at any time, and withdrawal will not affect the lawfulness of processing carried out before withdrawal.

Legal obligation (Art. 6(1)(c)). We process personal data where necessary to comply with applicable legal obligations, including COPPA record-keeping requirements (retention of parental consent records), responding to lawful requests from authorities, and fulfilling data subject rights requests under GDPR and other applicable privacy laws.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide app functionality
• To provide, operate, and maintain the Services
• To improve, personalize, and expand the Services
• To understand and analyze how the Services are used
• To develop new features and functionality
• To send service-related communications (see Section 12)

4. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information in the following situations:

• With service providers who perform services on our behalf (see table below)
• With your consent or at your direction
• For legal reasons (e.g., to comply with legal obligations, respond to legal requests, and protect our rights)

Third-Party Service Providers

The following third-party service providers process personal data on our behalf:

For details on which providers process children's data, see Section 9.5.

5. Data Visibility

The Water Polo App displays certain information to other users as part of its core functionality. Understanding what is visible helps you make informed choices about the information you provide.

• Visible to all app users: Game scores and statistics when associated with a team roster; team rosters and schedules
• Visible when searched: Name, profile photo, team memberships, biographical details (age bracket, height, weight, etc.)
• Visible only to the account holder: Email address, biographical details (birthdate)

For Minor Athlete accounts, parents control their child's participation through Family settings and the consent process described in Section 9.

6. Security of Your Information

We maintain a written information security program designed to protect the confidentiality, security, and integrity of personal information, including personal information collected from children. Our program includes:

• A designated security coordinator responsible for the program
• Annual risk assessments to identify threats and evaluate the adequacy of our security safeguards
• Access controls limiting data access to authorized personnel
• Encryption of data in transit (TLS/SSL) and at rest
• Written assurances from third-party service providers that they maintain appropriate security measures for children's data

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect personal information, we cannot guarantee its absolute security.

For more information about our security practices, contact us at privacy@activebeans.com.

7. Your Choices

You have the right to:

• Access and update your personal information
• Request the deletion of your personal information
• Object to or restrict our processing of your personal information

To exercise these rights, please contact us at privacy@activebeans.com. We will respond to your request within 30 days.

If you are located in the European Economic Area, see Section 10 for additional rights under the GDPR.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. If you delete your account, your personal information is permanently deleted, except that anonymized game statistics and scores may be retained (they will no longer be associated with any identifiable account). We may also retain certain information as required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

For data retention practices specific to children's accounts, see Section 9.6.

9. Children's Privacy & COPPA Compliance

For purposes of this section, a “child” or “Minor Athlete” is a user under the age of 13 as determined by Apple's DeclaredAgeRange API. The Children's Online Privacy Protection Act (COPPA) applies to the online collection of personal information from children under 13.

We are committed to complying with the Children's Online Privacy Protection Act of 1998 (“COPPA”), which requires us to inform parents and legal guardians about our information collection and use practices regarding children under 13.

9.1. Age Verification

When a user creates an account, we verify their age using Apple's DeclaredAgeRange API, an operating-system-level age verification tied to the user's Apple ID. Users identified as under 13 (a “Minor Athlete”) cannot use the app independently and are directed to obtain parental approval.

9.2. Parental Consent Process

When a Minor Athlete creates an account, their email address is collected by Firebase Authentication solely to create the account and enable the parental linking process described below. Until a parent provides verifiable parental consent, the email address is the only personal information stored for the child, and it is not used for any other purpose. If parental consent is never granted, no additional personal information is collected. The email address remains in Firebase Authentication until the account is deleted.

Other than the email address required for account creation, we do not collect personal information from Minor Athletes unless a parent or legal guardian has provided verifiable parental consent through the following process:

1. Parent creates their own account — The parent signs up and verifies their email address.
2. Parent is verified as an adult — Apple's DeclaredAgeRange API confirms the parent is 18 or older, tied to their Apple ID.
3. Parent links the child's account — The parent navigates to Family settings and enters the child's unique linking code.
4. Parent reviews COPPA information notice — An in-app information screen explaining what data is collected, how it is used, the parent's rights, and a link to this policy.
5. Parent provides explicit consent — The parent affirmatively taps “Consent” to authorize their child's account. Consent date and Privacy Policy date are captured.

Each child requires a separate consent action — the parent must review the COPPA information and Privacy Policy, and explicitly consent for each child they link.

9.3. Information Collected from Minor Athletes

With parental consent, we collect the following information from Minor Athletes:

• Profile information (name and country)
• Optional profile information (profile picture, description, birthdate, gender, dominant hand, height, weight, wingspan, positions, favorite cap)
• Organizations, teams, and accounts they follow
• Accounts that follow them
• Team and game roster memberships
• Game statistics

9.4. How We Use Minor Athlete Information

Information collected from Minor Athletes is used solely to provide the following app functionality:

• Follow organizations, teams, and other accounts
• Be followed by other accounts, such as coaches, teammates, and parents
• Be found via search by coaches and team administrators (for linking to team and game rosters)
• Be found via search by other accounts (to be followed by those accounts)
• View game schedules, results, and statistics (including their individual statistics)

The Water Polo App is not a social media platform. There is no messaging between accounts, no posting of messages, images, or videos.

We do not use Minor Athlete data for advertising, marketing, or monetary compensation purposes. We do not use Minor Athlete data for developing or training artificial intelligence technology.

9.5. Third-Party Service Providers

To operate The Water Polo App, we use the following third-party service providers that may process Minor Athlete data:

We do not share Minor Athlete data with third parties for advertising, marketing, or monetary compensation purposes.

All third-party service providers are contractually required to maintain the confidentiality, security, and integrity of children's personal information and to use it only for the purposes specified above.

9.6. Data Retention

We retain Minor Athlete personal information only for as long as reasonably necessary to fulfill the purposes described in this policy. Our retention practices are as follows:

Upon consent revocation: If a parent revokes consent, the child's account is immediately suspended and the child is removed from search. The child will not be able to use the app until the parent re-grants consent. However, if the child was previously added to team rosters, new games using those rosters may still associate the child's account with game statistics. To fully prevent this and ensure all personal information is removed, the child should delete their account (see Section 9.10). The parent may also re-grant consent at any time to restore the child's account.

Upon account deletion: When a child deletes their account, all personal information is permanently deleted. References to the user, such as game statistics, will remain but will no longer be associated with any identifiable account. Consent records are preserved in the parent's account for legal compliance purposes. A parent cannot delete their own account while any child is linked with active consent — the parent must first revoke consent and unlink the child.

9.7. Persistent Identifiers

When a Minor Athlete creates an account, a unique account identifier is assigned by our authentication provider (Firebase Authentication). This identifier is used solely to associate the child's profile, game statistics, and team memberships within the app. It is not used for advertising or behavioral tracking purposes.

Device tokens are collected for the purpose of delivering push notifications (e.g., game updates). These tokens are not used for tracking or advertising.

9.8. Parental Rights

As a parent or legal guardian of a Minor Athlete, you have the right to:

• Review all data collected about your child — contact us at privacy@activebeans.com and we will provide a summary of all personal information held for your child's account
• Update or correct your child's personal information — profile information can only be edited from the child's signed-in account, so the parent should assist their child in making any corrections. Alternatively, contact us at privacy@activebeans.com and we will make the corrections on your behalf
• Delete your child's account and all associated data — account deletion can only be initiated from the child's signed-in account. The parent should assist their child in deleting their account. Alternatively, contact us at privacy@activebeans.com and we will delete the account on your behalf
• Revoke consent and restrict your child's account at any time via Family settings in the app. Revoking consent immediately suspends the child's account and stops all further collection of personal information. However, if the child was previously added to team rosters while consent was active, new games using those rosters may still associate the child's account with game statistics. To prevent this, the child's account must be deleted (see Section 9.10)
• Refuse further collection — revoking consent (above) stops all active collection. To also prevent passive association through existing team rosters and delete all previously collected information, the child's account should be deleted. You may delete the account from within the app or contact us at privacy@activebeans.com

To exercise any of these rights, you may use the Family settings within the app, or contact us directly at privacy@activebeans.com.

9.9. Aging Out

A Minor Athlete may initiate age re-verification from within the app at any time. If Apple's DeclaredAgeRange confirms they are 13 or older, their account is promoted to an independent account. The child's game history, statistics, and relationships are preserved. The parent may then revoke consent and delink the child's account from their Family Group.

9.10. Account Deletion

A Minor Athlete may delete their own account at any time from within the app. Account deletion permanently removes all personal information and anonymizes any associated data (such as game roster entries). A parent may also request deletion of their child's account by contacting us at privacy@activebeans.com.

A parent cannot delete their own account while any child is linked with active consent. The parent must first revoke consent and unlink the child to ensure consent records are preserved.

9.11. Reporting Concerns

If you believe we have collected personal information from a child under 13 without parental consent, or if you have any concerns regarding children's privacy, please contact us immediately at privacy@activebeans.com. We will investigate and delete any such information as quickly as possible.

10. Your Rights Under EU/EEA Data Protection Law (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Right of access (Art. 15). You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with information about how it is processed.
• Right to rectification (Art. 16). You may request correction of inaccurate personal data or completion of incomplete data we hold about you.
• Right to erasure (Art. 17). You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, you withdraw consent, you object to processing and there are no overriding legitimate grounds, or the data has been unlawfully processed.
• Right to restriction of processing (Art. 18). You may request that we restrict processing of your personal data while we verify its accuracy, resolve an objection you have raised, or where processing is unlawful but you prefer restriction over erasure.
• Right to data portability (Art. 20). Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21). You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent (Art. 7(3)). Where we rely on consent as the legal basis, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement. A list of supervisory authorities is available at the European Data Protection Board website.

How to exercise your rights. To submit a request, email privacy@activebeans.com. We will respond to your request within one month of receipt, as required by Article 12(3) GDPR. If we need to extend this period due to the complexity or number of requests, we will notify you within the initial one-month period and may extend by up to two additional months. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

Verification. To protect your privacy, we may need to verify your identity before fulfilling a request. We will ask you to confirm details associated with your account.

11. International Data Transfers

Activebeans is based in Texas, United States. When you use The Water Polo App, your personal data is transferred to and stored in the United States.

Google (Firebase). Our primary infrastructure provider is Google LLC, which processes data through Firebase services (Authentication, Cloud Firestore, Cloud Storage, and Cloud Messaging). Google participates in the EU-U.S. Data Privacy Framework (DPF), certified by the European Commission's adequacy decision of July 10, 2023. Google's Firebase Data Processing and Security Terms also incorporate Standard Contractual Clauses (SCCs) approved by the European Commission, covering both Controller-to-Processor and Processor-to-Processor transfer scenarios.

Algolia. We use Algolia, Inc. to provide search functionality within the app. Algolia's Data Processing Addendum incorporates Standard Contractual Clauses for international data transfers.

If you have questions about international transfers of your data, contact us at privacy@activebeans.com.

12. Marketing Communications

We may send occasional email communications to adult account holders regarding app updates, new features, or service announcements. You may opt out at any time by following the unsubscribe link in any email or by contacting support@activebeans.com.

We do not send marketing or promotional communications to Minor Athlete accounts.

13. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy within the app and, where practicable, by email. Material changes to how we collect, use, or share children's personal information will require new parental consent before taking effect. The “Last Updated” date at the bottom of this policy indicates when it was most recently revised.

Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Activebeans
Attention: Privacy Notice
privacy@activebeans.com

• General inquiries: support@activebeans.com
• Privacy and COPPA concerns: privacy@activebeans.com

Last Updated: April 8th, 2026