Privacy policy

Last updated 5 October 2026

This policy explains how NBA Basketball School academies operated by the licensed local operator (“the academy”, “we”) handle personal data in the NBA Basketball School app, website and back-office.

What we collect

• Parents and guardians: name, email, mobile number and password (stored only as a secure hash).
• Players: name, date of birth, gender, photo (optional), school, kit size, training groups, attendance, coach evaluations, and — when provided by the family — medical notes, allergies and an emergency contact.
• Payments: invoices and payment records (amount, method, date). We do not collect or store card numbers in the app.
• Messages between families, coaches and the academy about a player.
• Technical data: sign-in sessions and an activity log used for security.

Why we use it

To run the academy: schedule and coach sessions, keep children safe (medical and emergency information), report progress to families, bill tuition and camps, and send service notifications. We do not sell personal data and we do not use it for third-party advertising. The app contains no third-party tracking or advertising SDKs.

Who can see it

Families see their own children. Coaches see the players in the groups they coach, including medical and emergency details needed on court. Academy staff see the players at their location or country. Sensitive notes are never visible to other families.

Children

Player profiles for children are created and managed by a parent or legal guardian or by the academy at the family’s request. Young players do not create their own accounts; older players may be given a login by the academy with their family’s agreement. Photos are only shared on official channels when the family has given consent in the player profile.

Retention & deletion

You can delete your account at any time in the app (More → Profile & security → Delete my account) or by contacting the academy. Deleting an account removes your login and personal contact details. Training and financial records linked to a player are kept as long as needed for the academy’s accounts and legal obligations, then deleted or anonymised. See how to delete your account.

Security

Data is transmitted over HTTPS and stored on secured servers. Passwords are hashed; sign-in tokens are stored only as hashes. Access is limited by role.

Contact

Questions or requests about your data: contact the academy.