FootyLens is a match-day statistics app for community Australian rules football coaches, assistant coaches, team managers, club administrators, parents and volunteers. It helps users record, review, export and share team-level football statistics for junior, youth and senior teams.
The owner and publisher of FootyLens is still to be confirmed. Once confirmed, this statement will be updated with the relevant legal entity and contact details. For privacy questions, contact: [privacy contact email — to be confirmed].
FootyLens is intended for use in Australia.
FootyLens collects only what is needed to operate the app and provide match-statistics functionality. Depending on how a club or user chooses to use it, this may include:
Users sign in with a Google account, or with an email address and password. A one-time email sign-in link is also available as a fallback.
FootyLens records match statistics at team level only (for example goals, behinds, kicks, handballs, marks, tackles, missed tackles, clearances, inside 50s and other team-level statistics selected by the user). Completed match statistics do not contain player names and are treated as anonymous team-level data.
FootyLens can record each player's time on ground (on/off rotations and per-quarter game time). This is player-level information. It is stored only on the device and is not uploaded or synced to the cloud.
FootyLens may be used for junior, youth and senior football. Because junior and youth teams may involve players under 18, FootyLens is designed to collect limited player information and avoid unnecessary personal information.
FootyLens does not collect: date of birth, residential address, phone number, photos, videos, audio recordings, GPS location, injury information, health information, school information, payment information, or player-level match statistics (such as individual goals or disposals).
Where a club, coach or team manager enters player information for junior or youth teams, they are responsible for ensuring they have the appropriate authority or consent to do so.
The Australian Privacy Principles apply to personal information handled by organisations covered by the Privacy Act; APP 1 requires open and transparent management of personal information.
FootyLens uses information to:
FootyLens does not use personal information for advertising, behavioural tracking, betting, fantasy sports, external scouting databases, AI processing, or third-party commercial sale.
FootyLens data may be stored:
The Supabase hosting region is being confirmed and will be stated here before this statement leaves Beta. If the project is hosted outside Australia, the overseas-disclosure considerations in section 14 apply. Some information is stored in clear form because it does not contain personal information; other information is encrypted before upload, as explained below.
FootyLens distinguishes two things:
Where sync is enabled, FootyLens uses client-side encryption for collections that contain player names — encryption happens on the device before any encrypted data is uploaded.
These are stored in the cloud as encrypted data blobs.
When a user sets a sync passphrase, FootyLens derives an encryption key from it using PBKDF2 with SHA-256, 200,000 iterations and a random 16-byte salt, producing a 256-bit AES-GCM key. Data is encrypted using AES-GCM with a fresh random 12-byte initialisation vector for each operation. AES-GCM is authenticated encryption, which helps protect confidentiality and detect tampering. Encryption is performed in the browser using the Web Crypto API.
The sync passphrase is not stored — not on the device, not in Supabase, and not by FootyLens. Supabase stores only the random salt and a small encrypted verifier used to check whether the correct passphrase has been entered on a new device. The derived key may be cached locally on each unlocked device so the passphrase need not be re-entered every session.
A passphrase is required to sync across multiple devices. If the passphrase is lost, encrypted player names cannot be recovered. There is deliberately no recovery path, because a recovery path would require someone other than the user to be able to decrypt the data.
Supabase row-level security scopes each row to the relevant account, so even encrypted data is only fetchable by the authorised user.
FootyLens uses a standard client-side encryption approach based on PBKDF2 and AES-GCM. Users should understand the following limitations:
localStorage, not the device's secure keystoreFootyLens is designed to protect player names in the cloud and in transit. It does not protect against access by someone who already has access to an unlocked, authorised device. APP 11 requires organisations that hold personal information to take reasonable steps to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.
FootyLens information may be shared with authorised users within the same club, such as coaches, assistant coaches, team managers, club administrators, and authorised parent or volunteer users.
FootyLens does not share club, team, player or match data with league bodies, external clubs, advertisers, data brokers, AI services, analytics providers or payment providers. FootyLens uses Supabase as a technology service provider for cloud storage, synchronisation and app functionality.
FootyLens allows clubs and authorised users to export or share information, including:
Clubs can export and delete their data. Users are responsible for checking exported content before sharing it externally, especially where it relates to junior or youth teams. Because completed match statistics are team-level and do not include player names, exported statistics are designed to avoid unnecessary disclosure of personal information.
FootyLens does not collect GPS or device location information. Venue information may be entered manually by the user as part of a match record.
FootyLens does not collect, upload or store photos, video or audio.
FootyLens does not use third-party analytics tools, including Firebase Analytics, Google Analytics, advertising pixels, behavioural tracking tools or third-party marketing trackers. If analytics are added in future, this statement will be updated before those tools are enabled.
FootyLens does not use artificial intelligence services and does not send player, team, club or match data to AI providers. If AI-generated coaching insights are introduced in a future version, this statement will be updated before that feature is released.
FootyLens does not collect payment information. There are currently no in-app payments, subscriptions, card payments or third-party payment processors. If paid features are introduced in future, this statement will be updated.
FootyLens is intended for use in Australia. Where cloud sync is enabled, data is stored in Supabase in a hosting region that is being confirmed. If that region is outside Australia, data other than encrypted player names may be stored overseas. Encrypted roster and planned-match data containing player names is encrypted on the device before upload, and completed match statistics do not include player names (they are stored as anonymous team-level data).
Users may request access to personal information held in FootyLens, and may request correction or deletion where it is inaccurate, outdated or no longer required. Because some data may be controlled by a club, requests relating to club, team or player data may need to be handled by the relevant club administrator. Clubs can export and delete their data. Requests can be sent to: [privacy contact email — to be confirmed].
FootyLens keeps information only for as long as reasonably needed for the purpose it was collected. Match, team and squad information may be retained by clubs for season review, coaching records and historical reporting. Users and club administrators should delete information that is no longer needed, particularly where it relates to junior or youth players. APP 11 also includes obligations to destroy or de-identify personal information in certain circumstances once it is no longer needed.
FootyLens may involve information about junior and youth football players. It is not designed for children to use directly without appropriate club, coach, parent or guardian oversight. FootyLens limits the personal information collected about junior and youth players and does not collect photos, video, audio, GPS location, health information, school information, payment information or player-level match statistics.
The OAIC has indicated that a Children's Online Privacy Code is expected to strengthen protections for people under 18. FootyLens should be reviewed against that Code before public launch or before any expansion of junior/youth features.
FootyLens may update this statement from time to time. Material changes will be communicated through the app or another appropriate channel. The latest version will show the date it was last updated.
FootyLens collects limited information to help community football teams record and review match statistics: user, club, team, squad, and player name and jumper number.
Completed match statistics are team-level only and do not include player names. Each player's game time (rotations) may be recorded on the device and stays on the device — it is not uploaded.
FootyLens does not collect photos, video, audio, GPS location, health or injury information, payment details, advertising data, or player-level match statistics.
Data is stored on your device and, where sync is enabled, in Supabase (hosting region being confirmed). Squad rosters and planned matches containing player names are encrypted on your device before upload; completed match stats are anonymous team-level data and are not encrypted.
The sync passphrase is not stored. If it is lost, encrypted player names cannot be recovered. Data may be shared with authorised users within the same club. It is not shared with leagues, advertisers, AI providers, analytics providers or external bodies. Clubs can export and delete their data.