Privacy Policy

NextGen ("we", "our", "us") provides an Events Management System (EMS) for taekwondo and martial-arts tournaments — including online registration, payment, live scoring, brackets, rankings, certificates, and push notifications. This Privacy Policy explains what we collect, why, and your choices. It applies to our web platform (nextgenesports.us) and our mobile application (NextGen EMS for iOS and Android).

1. Information We Collect

• Account data: full name, email, phone number, date of birth, gender, country, nickname, account roles (competitor, coach, school owner, parent, etc.).
• Competitor profile data: weight, height, belt level, school affiliation, profile photo / avatar.
• Photos and media you upload: profile avatars, school logos (uploaded by school owners), and tournament-related images. The app may request access to your camera and photo library when you choose to upload an image; access is only used for the upload you initiate.
• Phone verification: when you sign up or verify your phone number, we send a one-time SMS code via Twilio Verify. Twilio receives the destination phone number to deliver the message; the code itself is verified server-side and not stored long-term.
• Family / on-behalf data: a parent, guardian, or school owner registering a competitor (including a minor) on their behalf provides the competitor's identifying data and confirms they are authorized to do so.
• Usage data: server logs, device information, IP address, app-version metadata, scoring and registration activity.
• Push-notification tokens: device tokens issued by Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS), used to deliver tournament reminders, court calls, payment confirmations, and other transactional messages.
• Payment data: handled by Stripe. We never see or store your full card number; we receive only a transaction reference and the amount/status.

2. How We Use Information

• Operate, secure, and improve the platform (web and mobile apps).
• Process tournament registrations and payments.
• Send transactional push notifications and emails (tournament updates, court calls, match results, payment confirmations, password resets).
• Verify phone numbers via SMS to reduce fraud and account abuse.
• Provide customer support and respond to your requests.
• Comply with legal obligations (tax, accounting, fraud prevention, lawful requests).

We do not use your personal data to deliver third-party advertising, and we do not sell or rent personal data.

3. Legal Bases (GDPR)

We rely on consent, contract performance, legitimate interests, and legal compliance as applicable.

4. Sharing With Service Providers

We share limited personal data with the third-party processors that make the service work:

• Stripe — payment processing.
• Twilio — SMS one-time codes for phone verification.
• Firebase / Google Cloud Messaging — Android push notifications.
• Apple Push Notification service — iOS push notifications.
• Hosting / infrastructure providers — operate the servers and databases.

Each processor is contractually bound to process data only to deliver the service we requested. We do not sell personal data to anyone.

5. International Transfers

Data may be processed in the United States and other countries with appropriate safeguards.

6. Data Retention

• Account profile and contact data: retained while your account is active. After you delete your account (see section 11) we keep a minimal record for up to 30 days for fraud / dispute handling, then erase it.
• Tournament results, brackets, rankings, and competitor history: retained indefinitely as part of the public sporting record (medals and rankings are competitive history).
• Payment records: retained as required by tax and accounting law (typically 7 years).
• Server logs: retained for up to 90 days for security and debugging, then rotated.

7. Your Rights

• Access, rectify, erase, or port your data.
• Object to or restrict processing.
• Withdraw consent at any time (does not affect past processing).
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us or email support@nextgenesports.us.

8. Cookies & Tracking

See our Cookie Policy for details on cookies and similar technologies on the website. The mobile app does not use advertising trackers and does not display the App Tracking Transparency (ATT) prompt because we do not track you across other companies' apps or websites.

9. Security

We implement technical and organizational measures to protect your data. No method is 100% secure.

10. Children's Privacy & Parental Consent

NextGen is used in martial-arts tournaments, which include minor competitors (e.g. Dragons 6–7, Tigers 8–9, Youth 10–11, Cadets 12–14, Junior 15–17). We do not allow children under 13 to create their own accounts directly.

Data about a minor is collected only when a verified parent, legal guardian, or authorized school representative registers the minor on their behalf from their own adult account, and confirms they are authorized to provide that information. The adult who registered the minor remains responsible for that minor's account, manages it from their own login, and may at any time:

• Review what personal data has been provided about the minor.
• Update or correct that data.
• Request deletion of the minor's data and registration history.
• Withdraw consent for further processing.

We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws by limiting the data we collect about minors to what is necessary to operate their tournament participation (name, age, gender, weight, height, belt level, school affiliation, parent/guardian contact). We do not target minors with advertising and we do not allow minors' data to be used for marketing. Parents and guardians may contact us or email support@nextgenesports.us at any time to exercise the rights above on behalf of a minor.

11. Account Deletion

You can delete your NextGen account at any time, directly from the app or the web, without needing to email anyone:

• Web: sign in, scroll to the bottom of My Profile, and use Delete My Account.
• iOS / Android app: open your Profile tab and tap Delete Account.

On deletion, your personal information (name, email, phone, profile photo, push subscriptions, and login credentials) is removed immediately and you are signed out from all devices. Tournament results, brackets, podium placements and rankings you competed in are kept in anonymized form (your identity is no longer linked to them) so the sporting record stays intact for other competitors. Payment records are retained only as required by tax and accounting law (typically 7 years).

If you cannot access your account for any reason, contact us and we will process the deletion within 7 business days. See our Account Deletion page for the full breakdown.

12. Contact

For privacy requests, contact us or email support@nextgenesports.us.