Privacy Policy

Next Up is a platform for finding, booking and organising pickup soccer games and private field rentals. This policy is published by, and applies to, Next Up as it is currently operated (“Next Up”, “we”, “us”). If the operating entity changes in the future, this policy will be updated to reflect it.

For any privacy question or request, contact support@gotnextup.com.

Everything below is information Next Up actually stores or processes.

Account information

• Name and username — to identify you on rosters, in chats and in search.
• Email address — to sign you in, send booking and account emails, and match facility invitations to the right person.
• Phone number — collected at signup so organisers and venues can reach you about a game.
• Password — stored only as a salted hash by our authentication provider. We never see it.
• Profile photo, bio, city, preferred position, skill level, play style, dominant foot, jersey number and availability — optional profile details you choose to publish.

Facility-owner information

• Venue name, address, contact email, contact phone, operating hours, photos, field list and pricing — to list and operate your venue.
• Payout details such as account holder name, payout email, bank name, the last four digits of an account, country and currency — to pay you for completed bookings. We do not store full bank account numbers.
• Your commercial terms with Next Up, including revenue share, which are visible only to you and to Next Up administrators.

Bookings, Player Spots and attendance

• Player Spot reservations, including which spots you paid for and which spot you claimed.
• Rosters showing which players have claimed a spot in a game you are part of.
• Booking, cancellation, no-show and attendance history.
• Captain responsibilities for private matches you organise.

Payment information

Card details are entered directly into Stripe’s hosted checkout and are never sent to, or stored on, Next Up’s servers. We never see or store your full card number, expiry date or security code.

• Stripe customer, checkout session, PaymentIntent and refund identifiers — to reconcile a payment with a booking and to process refunds and disputes.
• Payment status, amounts, service fees, currency and payout records.
• These identifiers are restricted to Next Up backend systems and administrators. Other players and venues cannot read them.

Content you create

• Direct messages, team chats and game chats, including message text and timestamps.
• Posts, comments and likes in the community feed.
• Photos and files you upload for your profile, posts or venue.
• Follows and team membership.

Device and technical information

• Push notification device tokens and platform, so we can notify you about your games. Used only to deliver notifications.
• Crash and error diagnostics, to fix bugs.
• Security events such as failed facility-invite attempts and account deletion requests, to detect and prevent abuse.
• IP addresses, which are processed by our hosting and database providers to serve requests and rate-limit abuse. Next Up does not keep its own IP log; where an IP is used for abuse prevention it is stored only as an irreversible hash.
• First-party usage counts, such as how often a game link was shared, shown only in Next Up's internal admin dashboards.

Location

• We collect the city you type into your profile, and the addresses of venues. This is approximate location.
• Next Up does NOT request or collect precise device location. The app does not use your device's GPS.

What we do not collect

• No advertising identifiers. Next Up contains no advertising SDK.
• No third-party analytics or attribution SDK.
• No contacts, browsing history, health or biometric data.

Next Up does not track you across other companies’ apps or websites, does not sell personal information, and does not share personal information for cross-context behavioural advertising.

• Stripe — payment processing, refunds and disputes. Stripe receives your payment details directly and acts as an independent controller for its own purposes under its own privacy policy.
• Supabase — our database, authentication and file storage provider.
• Lovable — application hosting and error reporting.
• Apple Push Notification service — delivery of push notifications to iOS devices.
• Our transactional email provider — account, invite and booking emails.
• Facility owners and match captains — receive the roster and contact information necessary to run the game you booked.
• Other players — see your public profile, username, photo, city and any content you post or send in a chat.
• Authorities or advisors — where we are legally required to disclose information, or to establish or defend legal claims.

We keep most personal data only while your account is active. Some records must be kept after you delete your account, because deleting them would prevent us from meeting legal, tax or financial obligations. Specifically, we may retain:

• Completed payment and payout records, for accounting and tax purposes.
• Refund records.
• Dispute and chargeback records, for as long as the dispute window and any resulting claim remains open.
• Fraud- and abuse-prevention records, including security event logs.
• Records we are otherwise required by law to keep.

These retained records are de-identified wherever possible: when you delete your account, the link between the record and your identity is removed and the record is kept under an internal reference and the label “Former member”.

Financial, accounting, tax, fraud-prevention, payment, payout, refund and dispute records are retained only for as long as required by applicable legal, accounting, tax, fraud-prevention and regulatory obligations. Once those obligations expire, the records are securely deleted or anonymised where appropriate.

• Access and correction — most of your data is visible and editable in the app under Profile → Edit profile.
• Deletion — you can delete your account yourself, without contacting support, at Settings → Account → Delete Account. We explain exactly what is removed and what is retained before you confirm.
• Push notifications — you can turn these off in your device settings at any time.
• Other requests — depending on where you live you may have additional rights, such as data portability or objecting to certain processing. Contact support@gotnextup.com and we will respond within the period required by applicable law.

Deleting your account does not cancel a game you already booked or remove your obligations to a venue. See the Terms of Service.

We use access controls that restrict each record to the people who need it: row-level security in our database, column-level restrictions on sensitive fields such as email, phone and payment identifiers, server-side authorisation checks on privileged actions, encrypted connections, and rate limiting on sensitive flows such as facility invitations.

No online service can promise perfect security. We do not claim that Next Up is “completely secure” or that a breach can never happen. If a breach affects your information we will notify you as required by applicable law.

Next Up is not directed to children. You must be at least 13 years old to create an account. If you are under the age of majority where you live, you may only use Next Up with the involvement of a parent or guardian who accepts the Terms of Service on your behalf.

If we learn that we have collected personal information from a child below the minimum age, we will delete it. Contact support@gotnextup.com to report this.

Our providers may process and store information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for those transfers.

We may update this policy. The version number and effective date at the top of this page always reflect the current version. If a change is material we will ask you to review and acknowledge the new version the next time you use the app, and we record which version you accepted.

Privacy requests: support@gotnextup.com
General support: support@gotnextup.com