How we handle your data.
Last updated May 8, 2026 · Effective immediately
1. Introduction
FieldPass is a credentialing platform for sports creators and event hosts. Creators apply for press credentials; hosts review, approve, and issue them; both sides post reels and recap content tied to credentials. This policy explains what data we collect to run that service, how we use it, who we share it with, and what rights you have over it. It applies to fieldpass.co, our iOS app, and any related services.
2. What we collect
We try to collect only what we need to run the service. Here's the full list:
- Account info. Email (required for sign-in), display name, handle, location, bio (optional).
- Profile data. Avatar, creator types, sports covered, social handles.
- Application data. Events you apply to, credential history, application messages.
- Content you upload. Videos, photos, and captions tied to credentials or your portfolio.
- Usage data. Pages viewed, features used, errors encountered — used for debugging and product improvement.
- Device info. Browser type, OS version, IP address (truncated for privacy before storage).
- iOS app permissions. When you grant them, we access your camera and microphone (to record reels in-app), your photo library (to upload existing photos and videos), and to save earned credentials back to your photo library on request. Each permission is requested the first time it's needed and can be revoked at any time from iOS Settings → FieldPass.
No cross-app tracking. We do not track your activity across other companies' apps and websites. We don't use Apple's App Tracking Transparency framework because we have nothing to track.
3. How we use it
- Provide the service — process applications, issue credentials, host your reels.
- Improve the product based on aggregate usage patterns.
- Communicate with you — sign-in links via email, in-app notifications, and (if enabled in Settings) push notifications about applications and credential approvals.
- Comply with legal obligations.
4. Who we share it with
FieldPass relies on a small set of trusted infrastructure providers. Each one only sees the data they need to do their job:
- Supabase — authentication and database. supabase.com/privacy
- Vercel — hosting and edge network. vercel.com/legal/privacy-policy
- Cloudflare — video hosting via Stream and DNS. cloudflare.com/privacy
- Google — OAuth login, only if you choose to use it. policies.google.com/privacy
- Apple — Sign in with Apple, only if you choose to use it. Apple may share your name and a private relay email with us; you can hide your real email at any time in your Apple ID settings. apple.com/legal/privacy
We do not sell your data to advertisers or third-party data brokers. Full stop.
5. Your rights
- Access, edit, or delete your profile anytime via Settings → Profile.
- Request a full export of your data by emailing hello@fieldpass.co.
- Delete your account permanently via Settings → Danger zone → Delete account.
- EU/UK users (GDPR): you have rights of access, rectification, erasure, restriction, portability, and objection. Contact us to exercise any of them.
- California users (CCPA): you have the right to know, delete, and opt out of sale. Opt-out isn't needed in practice — we don't sell data — but the right is yours.
6. Data retention
- Profile and application data are kept while your account is active and deleted within 30 days of account deletion.
- Analytics events are anonymized after 90 days.
- Routine backups roll off within 90 days of source deletion.
7. Security
- HTTPS everywhere.
- Data encrypted at rest in Supabase (AES-256).
- Cloudflare DDoS protection in front of the edge.
- We follow industry-standard practices, but no system is 100% secure. If you believe your account has been compromised, email hello@fieldpass.co.
8. Children's privacy
FieldPass is for users 13 and older, in line with COPPA. Children under 13 are not permitted, and any account found violating this will be deleted.
For users between 13 and 17, parental consent is recommended. We don't knowingly collect more information from minors than is necessary to run the service.
9. Changes to this policy
If we make material changes, we'll notify you by email and post a notice in-app at least 14 days before they take effect. Minor edits (typos, clarifications) we may publish quietly.
10. Contact
Privacy questions or requests: hello@fieldpass.co
Mail: FieldPass, 21 Leonard St, New York, NY 10013, US