1. About this policy
This Privacy Policy explains how Form2 Pty Ltd (ABN 27 163 638 533) (Form2, we, us, our) collects, uses, stores and discloses personal information through the MatchAssist application and website (MatchAssist).
We are bound by the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). This policy applies to all users of MatchAssist, including club administrators, team managers, coaches, assistants, parents, spectators and anyone else whose personal information we collect.
2. Children and minors (important)
MatchAssist accounts are for adults only. By creating an account you confirm you are 18 years of age or older. We do not knowingly create accounts for, or allow sign-up by, minors.
MatchAssist is used by adults (parents, coaches, club administrators) to record information aboutminor sport participants — first name, surname, jersey number, on-field stats, team selection. This information is entered and managed by an adult account holder who is responsible for the data they enter and for having appropriate authority to enter it (typically as the player's parent, guardian, or as an authorised representative of the team or club).
We do not knowingly collect contact details (email, phone number, home address) for minors. Where contact details are entered against a player record, those contacts must be the parent or guardian of the player, not the player themselves.
If you become aware that a minor has created their own MatchAssist account, please contact us at privacy@matchassist.com.au and we will close the account and delete the associated data.
3. Personal information we collect
3.1 Account holder information
- Name and email address
- Password (stored encrypted)
- Mobile number (where provided)
- Club, team, role and game-day duty information
- Subscription, billing and payment status (Stripe handles card data — we never see or store your card number)
3.2 Player and team data entered by account holders
- Player first name, surname, jersey number
- Parent / guardian contact details (where entered by an account holder)
- Team-roster relationships (which players belong to which team)
- Game-day data: scores, rotations, match-day stats, votes, awards, match-report notes
3.3 Technical and usage data
- IP address, device type, browser type, operating system
- Pages visited, features used, time spent
- Cookies and similar identifiers (see section 8)
4. How we collect personal information
- Directly from you when you create an account, sign in, set up a club or team, or contact us
- Indirectly when an account holder enters information about a player or contact
- Automatically when you use MatchAssist (technical and usage data)
5. Why we collect, hold and use personal information
- To provide MatchAssist's core services — running game day, tracking stats, generating match reports
- To create and authenticate your account, manage permissions, and protect against unauthorised access
- To process subscription payments via Stripe
- To communicate with you about your account, support requests, billing, and material updates to our terms or this policy
- To improve, secure and operate MatchAssist (analytics, debugging, fraud and abuse prevention)
- To meet legal obligations
We do not sell personal information. We do not use personal information for behavioural advertising.
6. Who we share information with
We share personal information only with:
- Other authorised users of your team or club — by design. A team manager invitation, a coach link, or a parent stats link gives that person access to specific data within your account's scope. You control these permissions.
- Service providers who help us operate MatchAssist:
- Supabase (database hosting) — your data is stored in Supabase's Sydney (ap-southeast-2) region, on infrastructure operated by Amazon Web Services Australia. Supabase Inc. is US-based and may access data for support and platform administration under a Data Processing Agreement.
- Vercel (web hosting) — application hosting; serves the MatchAssist website.
- Stripe (payments) — Stripe is US-based and processes payment cards. MatchAssist never sees or stores your full card number; Stripe holds and processes that data under its own privacy and security frameworks.
- Resend (transactional email) — for sign-in emails and account notifications. Email delivery infrastructure based in Australia and the United States.
- Legal and regulatory bodies where required by law, court order, or to protect our rights or the safety of others.
7. Cross-border disclosure
Some of our service providers (Stripe, Supabase Inc., Resend, Vercel) are based outside Australia, primarily in the United States. By using MatchAssist you consent to your personal information being disclosed to these providers in those jurisdictions for the purposes described above.
Where we are required by APP 8 to take reasonable steps before disclosing personal information overseas, we do so by entering into written data processing agreements with our providers.
8. Cookies and similar technologies
MatchAssist uses cookies and similar identifiers to keep you signed in, remember your preferences, secure your session, and understand how the application is used. You can control or delete cookies in your browser at any time, but parts of MatchAssist will not work without them (for example, you cannot stay signed in).
We do not use third-party advertising cookies or behavioural advertising trackers.
9. How we keep personal information secure
- Encrypted in transit (HTTPS/TLS) and at rest in Supabase
- Passwords stored using industry-standard hashing (handled by Supabase Auth)
- Row-level security and role-based access controls on the database
- Card data never stored on our systems — handled exclusively by Stripe
- Access to administrative tooling restricted to authorised personnel
No system is completely secure. If we become aware of an eligible data breach we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.
10. How long we keep your information
We retain personal information only for as long as is necessary to provide MatchAssist or to meet our legal obligations. When you close your account we delete or de-identify your personal information within a reasonable period, except where retention is required by law (for example, accounting and tax records) or where data has been aggregated or anonymised so it can no longer identify you.
11. Accessing, correcting or deleting your information
You can request access to, correction of, or deletion of personal information we hold about you by emailing privacy@matchassist.com.au.
We will respond within a reasonable period (typically 30 days). We may need to verify your identity before acting on a request. There is no fee for access or correction. If we decline a request we will explain why and how you can complain.
12. Complaints
If you have a privacy concern, please contact us first at privacy@matchassist.com.au so we can try to resolve it. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be available at matchassist.com.au/privacy. Where changes are material we will notify account holders by email or via an in-app notice and require re-acceptance.
14. How to contact us
Form2 Pty Ltd
ABN 27 163 638 533
North Balwyn, VIC 3104, Australia
Email: privacy@matchassist.com.au