ScoreVault
Privacy policy
Last updated 21 September 2026.
The short version. Your tournament data lives on your phone. If you create an account, a private copy is backed up to the cloud so you can restore it. We don't show ads, we don't use analytics, and we don't sell or share your data.
Who can have an account
ScoreVault accounts are for adults: parents, coaches and instructors. Competitors — who are often children — appear in ScoreVault as records that an adult keeps, not as account holders. We do not knowingly let anyone under 18 create an account. If you believe a child has created one, email us and we will delete it.
What stays on your phone
Everything you enter in ScoreVault is stored on your device: competitor names, belt ranks and divisions, schools and locations, photos you add, teams, tournaments, judges' names, scores and results. The app works fully without an account, and without an account none of this leaves your phone except as described under “Crash reports”.
Some of this is sensitive. Divisions include age groups, and Special Abilities divisions indicate a disability category. Please enter only what you need.
What leaves your phone
If you create an account:
Your email address, a display name, and your password (stored only in hashed form by our authentication provider). When you back up, a full copy of your ScoreVault data is stored privately in the cloud so you can restore it on a new phone. Only your signed-in account can read your backups.
Emails we send:
Account emails such as address confirmation and password reset. We don't send marketing email.
Crash reports:
When the app crashes or hits an error, it sends a technical report so we can fix it: device model and operating system, app version, and what the app was doing at the time. A report can incidentally include text that was on screen when the error happened. Reports are used only to fix problems.
Where it is stored, and who processes it
Your data is stored in the United States. We use these providers:
Supabase — accounts, sign-in and cloud backups.
Sentry — crash and error reports.
Resend — delivers account emails.
Cloudflare — hosts this website.
Apple and Google — distribute the app through their stores.
They process data only to provide their service to us. We don't give or sell your data to anyone else.
How long we keep it
Data on your phone stays until you delete it or remove the app. For an account, we keep your most recent cloud backups — up to eight — and older ones are removed automatically.
When you delete your account, it can be restored for 30 days in case it was a mistake. After 30 days, the account, its email address and every cloud backup are permanently erased. Deleting your account does not delete the data on your phone; remove that in the app or by deleting the app.
Your choices
You can export all your data at any time from Profile → Export Full Backup. You can delete your account from Profile → Account & Access → “Request Cloud Account Deletion”, or by emailing us from the address on your account. You can ask us what we hold about you, or to correct it, by email.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.