🔒 Your players' details are end-to-end encrypted
NIM Sports helps a coach or academy track their roster, attendance and fee payments. The sensitive details you enter — player names, phone numbers, notes, and fee amounts — are encrypted with AES-256 on your device before anything is uploaded, so our servers only ever store ciphertext they cannot read. Cloud backup is opt-in: by default your data stays on your device.
Information we collect
Account information (handled by the NIM platform)
When you sign in we collect, via our backend provider Supabase:
- Your email address and/or phone number (to send and verify a one-time login code)
- Your display name and NIM profile identifier
- A record of which NIM products you use
Coaching data you enter
- Players — names, phone numbers and notes. These PII fields are AES-256 encrypted on your device before upload; the server stores only ciphertext.
- Fee payments — amounts and method/notes are encrypted the same way; the dates and status are stored in plain form so the app can show who is overdue or due soon.
- Attendance — present/absent/late marks and an optional note (the note is encrypted).
- Player photos — optional avatars you add, stored in a private, per-coach cloud folder accessible only to you.
End-to-end encryption & cloud backup
By default, your roster, attendance and payment data is kept on your device only. Cloud backup is an opt-in feature you can turn on or off at any time.
When you enable cloud backup, you choose a passphrase and receive a one-time recovery code. Your device's encryption key is wrapped with that passphrase before it is backed up, so we can never see or reset your passphrase, and we cannot decrypt your data. The passphrase or recovery code is required to restore your data on a new device.
All network traffic is encrypted in transit with TLS.
Reminders & messaging
- Payment reminders — if you turn them on, reminders are scheduled and shown entirely by your own device. There is no push server and no third-party push service involved, and no data is sent anywhere to deliver them.
- WhatsApp reminders — when you tap "Send reminder", the app simply opens WhatsApp with a message pre-filled for the contact you chose. You send it yourself; NIM does not transmit the message or the number to any server of ours.
How we use & share information
We use your account information solely to authenticate you and provide the coaching service across your NIM account. We do not use your data for advertising, we do not sell or rent it, and the app contains no third-party advertising or analytics SDKs. Account data and your encrypted records are processed by our backend provider Supabase on our behalf. We disclose information only where legally required.
Retention, deletion & your rights
You can delete your NIM Sports data at any time from Profile → Delete account, which removes your players, attendance, payments and coach profile both on your device and in the cloud. (Your shared NIM sign-in identity is kept so you can still use other NIM products; full account deletion is handled centrally.) On-device data is removed when you uninstall the app.
Depending on your region (including the EU/EEA under GDPR and India under the DPDP Act), you may have the right to access, correct, delete, or restrict processing of your personal data, and to data portability.
Data in transit is encrypted with TLS; sensitive fields are encrypted at rest with AES-256, and your cloud-backup key is protected by a passphrase only you hold.
NIM Sports is intended for coaches and academy organisers and is not directed to children under 13 (or the minimum age in your country); we do not knowingly collect their data.
Contact
Questions or data requests: privacy@nexinfinitymeta.ai