Privacy Policy

ThrillTech Sports Management — how we collect, use, share and protect personal information on our sports management platform. Last updated 23 October 2026.

This platform is used by clubs, schools, leagues and departments to run their teams, fixtures, training and records. Under POPIA, your club, school or league is the responsible party: it decides what information it records about you and why. ThrillTech acts as its operator — we process the information on the organisation's instructions, control who can see what, and look after the security of the data. For your own account and sign-in details, ThrillTech is the responsible party.

1. What information we hold

  • Account information: name, email address and cell number, the password or sign-in method you use, your role, and which organisations and teams you belong to.
  • Player information captured by your organisation: date of birth, guardian contact details, position, squad status, availability, attendance, training sessions, fixtures, minutes played, match statistics, ratings, coach notes, awards and highlight video links.
  • Profile media: your profile photo and any images, videos or documents you or your organisation upload, including medical and career records where an organisation has enabled those sections.
  • Readiness and training answers: daily check-ins and post-session reviews submitted by players.
  • Wearable data, only if you choose to connect a Garmin or Strava account: date and time, activity type, duration, distance, heart rate, calories, elevation and training load.
  • Calendar availability, only if you choose to connect a Google Calendar: derived Exam, Test or Busy time blocks — see section 5.
  • Messages and notifications: broadcasts sent within the platform, your replies, read receipts, and the device token used to deliver notifications to your phone.
  • Finance documents uploaded by an organisation's general manager, coach or team manager.
  • Technical information needed to operate the service: sign-in records, device and browser details, and the pages a device has cached for offline use.

2. Why we use it

  • To provide the platform to your organisation and let it run registration, squads, fixtures, training, scoring, communication and reporting.
  • To control access, so each person sees only the pages and records their role allows.
  • To keep records your organisation is required or expected to keep, including game time, attendance and match results.
  • To deliver notifications, reminders and offline access to the app you have installed.
  • To provide support, keep the service secure, diagnose faults and prevent abuse.

Readiness and training review answers are used as coaching prompts. They are not a medical assessment, a diagnosis, or a determination of whether someone is fit to participate.

3. Legal basis

We process personal information under the Protection of Personal Information Act (POPIA). Where consent is required — including for players under 18, whose parent or guardian must consent on their behalf — we ask for it before an account is confirmed. Where processing is needed to honour an agreement with your organisation, or to meet a legal obligation, we rely on that instead. You can withdraw consent at any time; that may mean some features can no longer work for you.

Providing your information is voluntary. However, your name, contact details, role and organisation are needed to create an account; without them we cannot give you access. Connecting a calendar or wearable, and filling in optional profile sections, is entirely your choice.

4. Who can see your information

  • Administrators and team managers of your own organisation.
  • Coaches and strength & conditioning staff of the teams you belong to.
  • You — your own profile, availability, messages, notifications and records.
  • ThrillTech administrators, for support and platform administration.
  • Authorised talent scouts, who may see player details, ratings and performance information; a scouting profile only leaves the platform when someone with permission creates a share link, and those links can expire or be revoked.
  • Where your organisation belongs to a league, the league administrator may see participation and results information for enrolled clubs. School data is not opened to league administrators.

We do not sell your information and we do not share it with advertisers. We do not use your personal information to train artificial-intelligence models.

5. Connected services and third parties

Some features work with services outside the platform. Each one is listed below, and none is switched on for you unless you or your organisation turn it on.

ServiceWhat it does and what it can see
Google CalendarYou connect your own calendar once, with your own Google consent. We request read-only calendar access plus your name and email address. We do not keep your event titles, descriptions, locations or notes — only derived Exam, Test or Busy time blocks, which your coaches and team managers may see to check for clashes with training and fixtures. You can disconnect at any time, which removes the access and the stored blocks.
Sign in with Google and Sign in with AppleThese services confirm who you are and pass us your name and email address. They do not give the platform access to anything else in your Google or Apple account.
Firebase Cloud MessagingDelivers notifications to your installed app using a device token. You choose whether to receive them and can turn them off.
Garmin and StravaOptional. If you connect one, it sends training session data to your own profile. Connecting is your choice and you can disconnect at any time.
TournifyOfficial competition fixtures, results and standings are read from this official record so they are not re-typed by hand.
CricClubsFor cricket, player statistics are read from the competition's existing CricClubs system, which remains the official record.
Hosting and storage providersOur platform is hosted with cloud providers who store the database, photos and documents and process data on our instructions under confidentiality and security obligations.

6. Cookies, local storage and offline use

The platform is a web app you can install on your phone or desktop. It stores a small amount of information on your device to keep you signed in, remember your preferences, show the correct organisation and theme, and let the pages you have already opened load without a connection. Push notifications use a separate browser registration. We do not use advertising or cross-site tracking cookies.

7. Children and guardians

Players under 18 use the platform with a parent or guardian's consent, which is recorded when the account is created. A guardian may review, correct or request deletion of the child's information through the organisation's administrator or the contact details below.

8. How we protect information

  • Access is limited by role, and every page and report checks what the signed-in person is allowed to see.
  • Photos, documents and finance files are kept in private storage that is served only to people with permission.
  • Credentials for connected accounts (for example a Google Calendar connection) are encrypted before they are stored and are only ever used by the platform's own secure services — they are never visible in the app.
  • Where a feature is switched off by an administrator, previously shared data from that feature is withdrawn.
  • We review access and fix security findings as they are identified.

No system is completely secure. If we become aware of a breach that puts your information at risk, we will notify you and the Information Regulator where the law requires it.

9. How long we keep it

We keep information while your account is active and for as long as your organisation needs it for its own records — for example match results, game time and attendance histories. When an organisation asks us to delete a person's account and there is no legal or contractual reason to keep the records, we delete them. Backups are removed on a rolling schedule.

10. Information outside South Africa

Some of the services listed in section 5 operate outside South Africa. Where personal information is processed abroad, we rely on the provider's contractual confidentiality and security commitments, which is what POPIA allows for transfers of this kind.

11. Your rights

You may, at no charge:

  • Ask what personal information we hold about you and receive a copy.
  • Ask for incorrect or misleading information to be corrected.
  • Ask for your account and personal information to be deleted, where we are not required to keep it.
  • Object to processing, or withdraw a consent you gave.
  • Complain to the Information Regulator (South Africa) if you believe we have handled your information unlawfully — website inforegulator.org.za, complaints via POPIAComplaints@inforegulator.org.za.

The quickest route is usually your own organisation's administrator, because they control your records. You can also use the contact details below.

12. Contact and information officer

ThrillTech's information officer can be reached through the details below. We aim to answer requests within 30 days and may need to confirm who you are before releasing any information.

Website: https://thrilltechsportsmanagement.com

Hidden to keep automated scrapers from collecting it.

You can also ask your organisation's administrator to pass a request to us.

13. Changes to this policy

We update this page when the platform changes. The date at the top shows when it was last revised, and we will tell you in the app or by email if a change affects how your information is used.

Read the POPIA consent notice·Back to ThrillTech