Child safety comes first
Forza Team stores personal data about minors, so protecting it isn't a feature — it's built into the architecture. These protections are enforced in the data-access layer, not left to interface discipline.
Last updated: July 2026
Invite-only access
There is no open public sign-up. A club administrator creates the club and invites coaches and families directly; accounts only exist by invitation. This keeps every club's roster controlled and means a stranger cannot create an account to browse for children.
Strict tenant isolation
Every club is a fully isolated tenant. Each record that belongs to a club carries that club's identifier, and every query is scoped to the club the signed-in user is acting within. Reading another club's data is impossible by construction — the isolation lives in a single data-access layer, not in scattered checks that could be forgotten.
Player-safe views of minors' data
A player or family account only ever sees their own linked players and team-public information. Roster and contact queries reachable by these accounts run through dedicated player-safe projectionsthat strip other families' personal information before it ever leaves the server. One family can never see another family's details.
No open contact exposure
Coaches, players, and families communicate through the platform. The raw phone number or email address of another member is never returned to non-privileged roles. Contact happens in-app so that adults and children are never handed each other's personal contact details by default.
Least-privilege roles
Access follows four roles — Master Admin, Club Admin, Coach, and Player/Family — each limited to a scope: the whole system, a single club, assigned teams, or a linked child. People see exactly what their role and scope allow and nothing more. Authorization is checked in three layers, with the server-side data layer as the authoritative one.
Audited sensitive actions
Sensitive changes — linking a child to an account, granting a role, or exporting data — are written to a permanent audit trail. A club's administrators can see exactly what happened in their club, and the record includes a snapshot of what a deletion removed.
Data minimization & retention
We collect only the information a club needs to operate — rosters, schedules, attendance, communication, and evaluations. We do not sell personal data or use children's information for advertising. Data is retained for as long as the club account is active and then deleted or anonymized on request; see our Privacy Policy for details.
Reporting a concern
If you are a parent, guardian, or club official with a child-safety or privacy concern, contact us at support@forzateam.app and we will respond promptly. Parents and guardians can request access to, correction of, or deletion of their child's data at any time.