Your Information

PRIVACY
POLICY

AllSport is a koha-based community sport. We collect the least we can get away with, we do not sell anything to anyone, and we will tell you plainly what we hold.

Last updated 21 August 2026
The Short Version

IN PLAIN WORDS

Your scores are public
AllSport is a competition. Your display name, scores, placements and colour are visible to anyone — that is how a leaderboard works.
Your contact details are not
Your email, phone number and date of birth are never shown anywhere on the site. They are for kaiwhakawā to run sessions and keep you safe.
The wellbeing check-in is yours
Nobody at AllSport can read your individual answers. Kaiwhakawā only ever see group averages, and only when at least three people have answered.
We do not sell or advertise
No advertising, no tracking pixels, no analytics, no data broker. We have never sold personal information and we will not.
You can leave
One button on your profile erases your details for good. Another downloads everything we hold about you. Neither needs to go through us.
You choose your name
Play under a username. You never have to show your legal name to other players.
Who We Are

WHO HOLDS YOUR DATA

AllSport is run by Te Kura ō ngā Koha/Allsport Aotearoa, a charitable trust board incorporated under the Charitable Trusts Act 1957 and registered with Charities Services. We are based at 26 Carbine Place, Sockburn, Ōtautahi Christchurch.

This policy covers the AllSport website and app at allsport.nz. It is written to meet the New Zealand Privacy Act 2020. In this policy, “we” means the trust, and “kaiwhakawā” means the judges who run sessions and hold administrator accounts.

For anything about your privacy — a question, a correction, a copy of your information, or a deletion — email privacy@allsport.nz. We aim to reply within 5 working days, and the Privacy Act gives us 20 working days at the outside.

What We Collect

YOUR ACCOUNT

Collected when you register, or when you sign in with Google and finish your profile. Only your name, email, password, date of birth and username are required — everything else you can leave blank.

Name
Optional. Only for insurance and safeguarding records, and so a kaiwhakawā knows who you are at a session. You can register and play under a username without giving it.
Who can see it — Kaiwhakawā. Never shown to other players unless you switch "show full name" on.
Email address
To create and sign in to your account, and to contact you about sessions.
Who can see it — Kaiwhakawā only. Never displayed on the site.
Password
To secure your account. Stored only by our authentication provider, hashed — we never see it.
Who can see it — Nobody, including us.
Date of birth
To place you in the right division and age group, and to know when a player is under 17.
Who can see it — Your age group is used in leaderboards. Kaiwhakawā can see the date itself.
Which division you compete in
To place you in a division. That is the only thing it is used for. If neither Men's nor Women's fits, you choose your own starting division, and a kaiwhakawā can move you at any time.
Who can see it — Kaiwhakawā. Your division is structural, so it is visible — the label next to your name is what "show division" controls.
Phone number
Optional. So a kaiwhakawā can reach you about a session or an injury on the day.
Who can see it — Kaiwhakawā only. Never displayed on the site.
City and region
Optional. To understand which communities we are reaching, which funders ask us to report on.
Who can see it — Kaiwhakawā only. Your location is never published on the site or shown to other players.
Username and display name
How you appear to other players on leaderboards and in sessions.
Who can see it — Public. Anyone visiting the site can see it.
Profile icon
A picture next to your name. Chosen from a fixed set — you cannot upload a photo.
Who can see it — Public.
What We Collect

YOUR RESULTS

Collected every time you or a kaiwhakawā records a score during a session. This is the public part of AllSport — a leaderboard only works if the results are on it.

Your scores
To rank each event, work out placements and award points. This is the sport.
Who can see it — Public, next to your display name.
Placements, points and colours
To run leaderboards and the colour ladder, and to report participation to funders in aggregate.
Who can see it — Public.
Session attendance
To count sessions played, qualify referrals and report total attendances to funders.
Who can see it — Public that you played; kaiwhakawā for the detail.
Opponent names in head-to-head events
To record who played whom in match events such as Tennis or Arm Wrestling.
Who can see it — Public, as part of the result.
What We Collect

THE WELLBEING CHECK-IN

About once every three months we may show you a 10-question check-in on your dashboard. It uses the WHO-5 Wellbeing Index and two standard activity questions. Your answers say something about your health, so we treat them more carefully than anything else on this page.

It is voluntary. You can close it and nothing is saved. Skipping it has no effect on your scores, points, colour or standing. Kaiwhakawā can never read your individual answers — the report they see shows group averages only, and hides any group with fewer than three responses so no single person can be identified. We use those averages to show funders whether AllSport actually improves wellbeing.

WHO-5 wellbeing answers (5 questions)
To measure whether taking part in AllSport improves how people feel. Required evidence for our health and community funders.
Who can see it — Only you (and a parent, for a child profile). Kaiwhakawā see group averages only.
Days active in the last week, and self-rated fitness
To track physical activity change across the group over time.
Who can see it — Only you. Group averages only for everyone else.
Confidence, enjoyment and belonging answers
To check we are actually building the community we say we are.
Who can see it — Only you. Group averages only for everyone else.
What We Collect

KOHA, REFERRALS AND VOTES

We do not take payments through this website. There is no card processor and we never see or store card or bank details. Koha is given by bank transfer or in person, and a kaiwhakawā records the amount against your name by hand.

Koha amounts
To recognise supporters and to keep the charity’s financial records.
Who can see it — You and kaiwhakawā. Your name appears on the supporters wall only with your agreement.
Who referred you
To credit the player who invited you once you have played 10 sessions.
Who can see it — You, the player who referred you, and kaiwhakawā.
Your event votes
To choose the events for a competition by community vote.
Who can see it — Other players see counts only. Kaiwhakawā can see who voted for what.
Tamariki And Rangatahi

PLAYERS UNDER 17

Juniors are welcome at AllSport and a lot of our mahi is aimed at rangatahi. If a player is under 17, we also collect a parent or guardian's name, email address and phone number, so that we can reach someone responsible about a session, an injury or a concern. That is the only reason we hold it.

A parent or guardian can create and manage profiles for their tamariki from their own account. If you do that, you can see and change everything on your child's profile, including their wellbeing check-in answers.

A junior's display name, age group, scores and placements appear on public leaderboards in the same way as any other player. If you would rather your child appeared under a username only, that is the default — you do not have to show a full name. Ask a kaiwhakawā if you want a junior removed from public leaderboards entirely.

Guests

IF YOU PLAYED WITHOUT AN ACCOUNT

You can play AllSport without ever making an account. When you do, a kaiwhakawā writes down the name you give them so your scores can be ranked against everyone else's that session. That name and those scores are visible on the session leaderboard, the same as any other player.

We hold nothing else about you — no email, no phone number, no date of birth. Give us a first name or a nickname if you would rather. If you want your name taken off a past session, email us and we will remove it.

Who Else Sees It

SERVICES WE RELY ON

We are a small charity and we do not run our own servers. These are the only companies your information reaches, and each is used strictly to run AllSport. We do not use advertising networks, analytics services, social media pixels or data brokers — there are none on this site.

SupabaseDatabase and sign-in
Stores everything described above, and handles passwords and Google sign-in. Our database is hosted in Sydney, Australia (AWS ap-southeast-2). Supabase Inc. is a United States company, so your information is stored and processed outside New Zealand.
VercelWebsite hosting
Serves the site. Its servers automatically log request information including your IP address, browser type and the pages you request, for security and reliability. Vercel Inc. is a United States company.
Google FontsTypefaces
Our fonts load from Google’s servers, which means Google receives your IP address and browser type when you open any page — including if you never sign up. We are moving these fonts onto our own site to remove this.
Google Sign-InOptional sign-in
Only if you choose "Continue with Google". Google tells us your name and email address; we do not receive your Google password and we cannot see anything else in your Google account.

Because these companies are based overseas, your information is stored and processed outside New Zealand — our database sits in Sydney, Australia. We only use providers that are required to protect it to a standard comparable to the Privacy Act 2020.

We will also share information where we are legally required to, or where it is necessary to prevent a serious threat to someone's safety.

Cookies

WHAT WE STORE ON YOUR DEVICE

We use one cookie, and it exists only to keep you signed in. We do not use tracking or advertising cookies, which is why you have never seen a cookie banner here. Everything else below is stored locally in your own browser and never sent to us.

sb-…-auth-token
Cookie
Keeps you signed in. Set by our authentication provider and refreshed as you browse.
Kept for — Until you sign out or it expires.
allsport_active_player_id
Local storage
Remembers which family member’s profile you are currently viewing.
Kept for — Until you clear your browser data.
pending_session_code
Local storage
Holds a session code while you sign in, so you land in the right session.
Kept for — Deleted as soon as you join.
allsport_postgame_…, allsport_effortmax_…, allsport_fullhouse_…
Local storage
Remembers that you have already seen an end-of-session or celebration message, so it does not repeat.
Kept for — Until you clear your browser data.
How Long

WHAT WE KEEP

Your account and contact details — kept while your account is open. If you ask us to delete your account, or if you have not played for three years and do not respond when we check in, we delete them.

Your scores, placements and colours — kept indefinitely. Colours are a lifetime record and a competition history is not much use with holes in it. If you delete your account, these stay as part of the session record but are separated from your name and contact details.

Wellbeing check-in answers — kept for as long as you have an account, and deleted with it. Once answers are rolled into a group average for a funder report, that average cannot be traced back to you.

Koha records — kept for seven years, because charity financial records have to be.

Your Rights

WHAT YOU CAN ASK FOR

The Privacy Act 2020 gives you these rights. We would honour them anyway — email privacy@allsport.nz and ask. There is no charge.

See what we hold
Your profile page has a "Download a copy of my data" button. It gives you a single file containing everything we hold about you — profile, every score, session summaries, colours, koha and any wellbeing answers. No need to ask us.
Fix what is wrong
You can edit your username, display name, icon and visibility settings yourself on your profile. Ask a kaiwhakawā to correct anything else, including your division.
Erase your account
There is an "Erase my account" button on your profile. It permanently destroys your name, contact details, date of birth, location, any parent details and every wellbeing answer. Your scores and placements stay in each session's record under "Former player" — removing them would change where other players finished in games already scored.
Skip the wellbeing check-in
The wellbeing check-in is entirely voluntary. Close it and nothing is recorded. It will not affect your scores, your colour or anything else.
Choose what is public
Your visibility settings on your profile control whether your full name and division labels appear alongside your display name. They are applied in the database, not just in the page, so they hold everywhere.
Complain
If we get it wrong, tell us first and we will put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.
Security

HOW WE PROTECT IT

Everything travels over an encrypted connection. Passwords are hashed by our authentication provider and are never visible to us. Our database uses row-level security so that records such as your wellbeing answers, koha and referrals can only be read by the accounts entitled to see them. Administrator access is limited to kaiwhakawā, and today that is a single person.

No system is perfect. If we ever have a privacy breach that could cause you serious harm, we will tell you and notify the Office of the Privacy Commissioner, as the Privacy Act requires.

Changes

IF THIS CHANGES

We update this page when what we do changes. The date at the top always tells you when it was last reviewed. If we start collecting something meaningfully new, or use what we already hold for a new purpose, we will tell players directly rather than quietly editing this page.

Contact
Te Kura ō ngā Koha/Allsport Aotearoa
26 Carbine Place, Sockburn
Ōtautahi Christchurch, Aotearoa New Zealand
privacy@allsport.nz

Not satisfied with how we handle it? The Office of the Privacy Commissioner can investigate. Visit privacy.org.nz or call 0800 803 909.

How To PlayJoin AllSport