Privacy

Sixth Man privacy policy

Effective date: November 9, 2026

Sixth Man is an app for basketball coaches. It's built so your team's information stays with you.

What the app stores

When you use Sixth Man, you type in:

your team's name, colors, and league rules
your players' first names, jersey numbers, and a last initial or full last name
games and their stats: scores, fouls, minutes played, shooting, rebounds, assists, and where shots were taken
the other team's jersey numbers and stats, if you keep them
schedules, practices, attendance, and plays
optionally, parent or guardian names, phone numbers, and email addresses
optionally, a team logo image you pick from your phone

Where it's stored

On your phone. Without an account, the app never sends your team's information to our servers or anyone else's, and we (the developer) can't see it. The one exception is a team you choose to share with staff (see Sharing a team with staff, below).
Your phone's backup. If your phone's own backup is on, it may include Sixth Man's data in your account's cloud backup, as it does for most apps. You control this in your phone's settings.
Files you share. When you save or share a backup ("Save backup file" on iPhone and iPad, "Save to a folder" or "Share to Drive or email" on Android), tap "Share play", or export a PDF or spreadsheet, the app makes a file and hands it to the folder or app you choose (Drive, email, Messages). After that, the file is yours, and where it goes is up to you.
Emails you send us. The app keeps a short list of the last problems it ran into (what went wrong, on which screen, and when) on your phone. It never sends that list by itself. When you email support from the app ("Help and feedback", or "Tell us what happened" after an error), the list is added to the email so we can see what happened. The email also carries the app's version, your phone's model and system version, and this install's app ID (its RevenueCat ID, so we can find a purchase). You can read all of it, change it, or delete it before you send.

What we don't do

No ads.
No analytics, tracking, or automatic crash reporting.
We don't sell your data or share it with anyone. A team you share with staff is kept on Google Firebase so your staff can reach it, and it isn't used for anything else.
Players don't use the app or create accounts. Coaches and scorekeepers enter what they choose to track.

The website counts visits without cookies (Cloudflare Web Analytics). The app has no analytics.

Purchases

Sixth Man Pro is bought through the app store you installed Sixth Man from, and that store handles the payment. We never see your payment details.

To check whether this phone has Pro, the app uses RevenueCat, a purchase service. RevenueCat receives a random ID made by the app for this install, your purchase record from the store, and basic device details (such as the app version and your phone's country). It never receives your team's information. If you sign in to share a team with staff, RevenueCat's ID for this phone becomes your Sixth Man account's ID instead, so Pro follows your account. See RevenueCat's privacy policy.

App updates

Sixth Man checks for updates to the app from Expo, the service that delivers them. Each check sends a random ID for this install and the app's version, so the right update comes back. No team information is sent. See Expo's privacy policy.

When it opens, Sixth Man also reads a small file from our website (sixthman.centristudios.com) that says which version is newest, so it can tell you when to update from the store. Like any web request, it carries your phone's IP address; no ID or team information goes with it.

Google Firebase

Each time Sixth Man starts, it asks Google's Firebase (Cloud Firestore) for one public settings page: whether sharing a team with staff is turned on. This needs no sign-in or account. Like any internet request, it carries your phone's IP address, along with Sixth Man's Firebase app ID and the version of Google's software in the app. No team information, names, or account details go with it, and the app keeps only the answer.

On Android, the app also includes Google's Firebase Cloud Messaging, because of a library it uses. Sixth Man doesn't send push notifications (its reminders are set up on your phone). Android builds before 18 (the number in parentheses after the version, at the foot of Settings) may register a random installation ID with Firebase, which the app doesn't use; from build 18 on, that's switched off. See Firebase's privacy information.

Firebase's security rules decide who can read or change what's on the server. Only a shared team's head coach and the staff holding its seats can read or change that team.

Sixth Man also uses Firebase App Check: the app proves to Firebase that each request comes from the real Sixth Man app on a real device, using Google Play Integrity on Android and Apple's App Attest on iPhone and iPad. Google or Apple vouches for the app, and Firebase gives it a short-lived token that goes with its requests. No team information or names are part of that check.

If you share a team with staff, Firebase also keeps that team. See Sharing a team with staff, below.

Sharing a team with staff (optional)

Sixth Man works without an account. If you choose to share a team with an assistant coach or a scorekeeper ("Staff"), the app needs an account and a server, so the shared team can reach their phones. The server is Google Firebase, working for us as our service provider. Shared teams are kept on Google's servers in the United States, encrypted on the way and where they're stored.

Signing in. Staff uses Google sign-in, or Sign in with Apple on iPhone and iPad, through Firebase Authentication. Firebase Authentication keeps your account's basic profile, with an account ID. From Google, that's your email address, name, and profile photo link. From Apple, it's your name, which Apple shares only the first time you sign in, and your email address, or a private relay address from Apple if you choose to hide yours. The app uses only the account ID and your name. Your staff see a first name, taken from that name (up to 20 characters), which you can change. Your email address isn't shown to your staff, and the app doesn't copy it into your teams, but it stays with your account in Firebase Authentication.

What a shared team sends to the server. While a team is shared, the server keeps a copy of it so every staff phone has the same team:

the team's name, colors, league rules, and settings
the roster: each player's first name, last initial or full last name (the team's "Full names" setting decides which), jersey number, and whether they're active. Nothing else about a player: no birth date, grade, or photo.
games: the opponent, home or away, the location, the date and time, the score, who played (their names and numbers at tip-off), every entry in the book (points, fouls, stats, shot locations, and subs), when a player was marked out of the game, and the playing-time plan
practices, with attendance, and plays (the diagram, its name, and your notes)
who made each change (the account ID of the coach who made it), and on a game, which phone is keeping the book (a random ID the app makes for the phone, not its serial number or model)
the team's card: the head coach's name, the team's name and colors, whether it has Pro and until when, its newest invite code, and who holds its staff seats; and for each staff member, their name, when they joined, and when they were last active
parent or guardian contacts (names, phone numbers, and emails), only if the head coach turns on Share with staff for that team. It's off unless they turn it on. Turning it off removes the contacts from the server's copy and from staff phones the next time your phone syncs.

Notes on practices and plays are free text, so whatever you write there is shared too.

What stays on your phone. The team's logo, and parent contacts unless Share with staff is on. Teams you don't share stay on your phone.

Who can see it. Only you and the staff you invite. Each invite is a code that works once, for 7 days. A team has at most two staff seats, and the head coach decides who holds them. A Coach can change the team while it has Pro; a Viewer can only look. If the team's Pro ends, staff can only look. Anyone who has an unused invite code can see the team's name and colors and the head coach's name, so share codes only with your staff. We don't look at what's in shared teams, and we don't use it for anything but getting it to your staff.

Pro and your account. A head coach needs Pro to invite staff. When you sign in, the app gives RevenueCat (our purchase service) your account ID, so Pro follows your account. RevenueCat never receives your team's information.

How long it's kept, and deleting it.

A shared team stays on the server while it's shared. Something you delete from it (a player, game, play, or practice) stays on the server's copy, marked deleted, until it's erased from Recently deleted (after 30 days, or sooner with Empty now).
When the head coach deletes the team, its contents are removed from the server, and it comes off staff phones.
Leaving a team (Team › Staff › Leave team) removes your seat and your name from it, and the team comes off your phone. The head coach's copy stays theirs.
Signing out (Team › Staff › Sign out) takes off your phone every team that came to it with your account: the teams you're staff on, and your own teams that arrived when you signed in on this phone. So other coaches' players don't stay on it. Teams you made on this phone stay. Parent contacts typed on this phone for a team that leaves are erased with it; they were never on the server, so they don't come back. Everything else comes back when you sign in again with the same account. If a team that's leaving has changes the server doesn't have yet, the app asks before it erases them. Signing out also clears the invitations and sharing choices the app kept on this phone for your account.
Delete account (Team › Staff) asks you to sign in again to confirm it's you, then deletes your account, your name, your staff seats, and every team you share from the server. Your own teams stay on your phone, teams other coaches shared with you come off it, and your staff lose access. Changes you made on another coach's team keep your account ID, with no name attached.
You can also ask us to delete your account at https://sixthman.centristudios.com/delete-account/. We delete it within 30 days and confirm by email. If you signed in with Apple, also choose Sixth Man under Sign in with Apple in your Apple Account settings, then Stop Using (Apple's steps). Only the app's Delete account can do that part for you.
After a deletion, the server keeps a short record that something was deleted for up to 90 days, so phones that were offline remove it too, then deletes it. Unused invites are deleted after they expire.
The server is backed up daily and weekly. Daily backups are kept 7 days and weekly ones 56 days, so anything deleted is gone from every backup within 8 weeks.
When an account is deleted, we keep its account ID, when and how it was deleted, a count of what was deleted, and whether RevenueCat's record was deleted, and nothing else, in a private list for up to 8 weeks, only so that restoring a backup can't bring it back.

When your account is deleted, in the app or at your request, we also delete RevenueCat's record of it, within 30 days. Google Play or the App Store keep their own purchase records, and you can get Pro back with Restore purchases on the same store account. Deleting your account doesn't cancel a season pass: cancel it in your store's subscription settings.

A deleted player's name stays in the games they played, on the server's copy of a shared team too.

Players' information. Players don't use the app or sign in. Enter only what coaching the team needs: first names and numbers are enough. Keep parent contacts on your phone unless your staff really need them.

Permissions

Photos (optional): only when you choose a team logo, through your phone's photo picker.
Calls and texts (optional): tapping "call" or "text parents" opens your phone or messaging app with the numbers you entered. Sixth Man doesn't send messages itself.
Notifications (optional): if you allow them, the app reminds you on this phone before a season pass renews or ends, and if the store couldn't take a payment. The reminders are set up on your phone; nothing is sent to us.

Deleting your data

When you delete a player, play, practice, or game, it moves to Recently deleted on your phone for 30 days so you can put it back. After 30 days it's erased. To erase it sooner, tap Empty now in Team › Settings › Recently deleted. Erasing a player doesn't remove their name from the box scores of games they played.
Deleting a whole team (Team › Settings) erases it and everything in it right away. If it's shared, it comes off the server and your staff's phones too.
Backup and export files the app made can stay in its temporary storage on the phone until your phone clears it or you uninstall the app.
Uninstalling the app removes everything on the phone.
Backup files you saved elsewhere stay where you put them.
If you share teams with staff, see Sharing a team with staff above for deleting your account and the shared teams.

Children's privacy

Sixth Man is meant for adult coaches. It doesn't collect personal information from children, and it isn't directed to children. Coaches decide what information about their players to enter. It stays on the coach's phone unless the coach shares the team with staff, and then only the coach and the staff they invite can see it. Players never sign in. Purchases are made by the adult who owns the app store account.

Changes

If this policy changes, we'll update the date above and note the change in the app's release notes.

Contact

Questions: support@centristudios.com