The data controller is KICKR Global Sports Inc., a Canadian federal corporation incorporated under the Canada Business Corporations Act, with registered office at 3080 Yonge Street, Suite 6060, Toronto, Ontario M4N 3N1, Canada. KICKR is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for visitors and players in Quebec, by Quebec's Act respecting the protection of personal information in the private sector (Law 25).
The short version
- We collect only what we need to run KICKR and process your payment.
- We never sell, rent, or share your information with advertisers or data brokers.
- Payments are handled by Stripe. KICKR never sees your card number, CVC, or full bank details.
- We use trusted analytics providers to measure how the site performs (visitors, sources, conversions). Analytics cookies are only set after you tap Accept on the cookie banner. Tap Reject and no analytics cookies are set; the site may still send basic signals without cookies or a visitor ID, used only for anonymous totals (see "Cookies, analytics, and your choices"). You can change your mind any time using the Reset cookie choice button below.
- No advertising pixels. No social-media trackers. No data brokers. No resale of your data.
- You can request a copy of your data, correct it, or have it deleted at any time. Email league@kickr.ca.
What we collect
When you register for KICKR, we ask for:
- Identity and contact: first name, last name, email address, phone number.
- Match logistics: player name, position preference, weekday and time-slot availability, optional notes you choose to share.
- Waiver and safety: your emergency contact's name, phone number and relationship to you, any medical notes you choose to share, your typed signature, and the date, IP address and browser used when you signed the participant waiver. We use this only to keep you safe on match night and to keep a record of your signed waiver.
- Payment: Stripe collects and stores your card details on its own servers. KICKR receives only a payment confirmation and a non-sensitive customer reference, never the card number itself.
- Operational logs: standard server logs (IP address, browser type, request timestamps) kept for 30 days for security and abuse prevention.
- Profile and match-note photos: optional, only if you choose to attach one in the iOS app. Officials and admins can attach photos to match notes; players can update their profile photo. KICKR never opens the camera or photo library on its own.
- App diagnostics: described in detail under "Diagnostics and in-app feedback" below.
- Website analytics (only with your consent): if you tap Accept on the cookie banner, we measure how the site is used, such as pages viewed, buttons tapped, how you found us, your device and an approximate city. If you then sign up and pay, that visit is linked to your KICKR account. See "Cookies, analytics, and your choices" below.
We do not ask for or store your date of birth, government ID, address beyond city, social media accounts, or anything outside what's listed in this policy.
Why we collect it
- Run the league: assign you to teams, schedule you into the time slots you can actually make, and record results and weekly winners.
- Communicate with you: send your weekly fixtures, venue changes, weather cancellations, and roster updates by email.
- Process payment: charge $67.96 or $135.92 CAD per month plus HST depending on your membership plan, or the price shown on a Pickup game ($18.99 to $24.99 CAD plus HST) once that game goes ahead, send receipts, and process refunds per the refund policy.
- Keep the league fair: prevent duplicate signups, contact you if a teammate flags a no-show, follow up on injuries.
Public league view
Anyone using the KICKR app without an account can browse a read-only public league view: league standings, schedules, results, weekly winners (team names), and player cards showing jersey name, position, rating and season stats. Jersey names, ratings and stats are visible by default. Playing, your own stats and check-in remain member features. Guests can choose to get notifications, as described in "Push notifications" below.
Your legal name, email and phone number are never shown publicly. Your photo is never shown publicly unless you turn on "Show my photo publicly" in Settings > Privacy and data. Photos are off by default, and you can turn this setting off at any time.
You can hide yourself entirely from the public view in Settings > Privacy and data. Your player card will not be shown, and you will appear as "Player N" in team rosters instead of your jersey name. Game officials and admins are never listed in the public view.
Push notifications
If you have an account and allow notifications, the app sends a reminder before your block, a heads-up when your game film is posted, and announcements such as weather or schedule changes. You can turn each type off in the app's notification settings, or turn all notifications off in your device settings.
If you use the app without an account, you only get notifications after you tap Turn on alerts. These are alerts when new games go up, results, reminders, offers to join, and announcements. Automatic updates are limited to 2 a week and are only sent between 10 AM and 8 PM Toronto time. You can turn them off at any time with the Game alerts switch on the Become a member page, or in your device settings.
To deliver notifications we store a push token for your device. A guest token is not linked to any name, email or account, and is deleted after 90 days without use. Notifications are delivered through Apple's push service and our push delivery provider. We never sell push tokens or use them for advertising.
Diagnostics and in-app feedback
The KICKR mobile app collects a small amount of first-party diagnostic data so we can fix bugs and improve the app. We do not embed any advertising or cross-app tracking SDKs, and we never access your advertising identifier (IDFA).
Product analytics: to understand how players use the app, the app sends usage events to our product analytics provider: app opens, screens viewed, sign-ins and sign-outs, check-ins, and opening the membership page. These events are linked to your KICKR account id, email, display name and player id so we can see how the app works for real players, plus the same app version, OS version and device model described below. In App Store and TestFlight builds, the provider may also record sessions (a replay of the screens you move through and what you tap) to help us find confusing screens and bugs. Recordings hide everything you type and every image, including profile photos. The provider processes this data in the United States on KICKR's behalf and is not permitted to sell it or use it for advertising.
Crash reporting: when the app crashes or hits an error, it sends a crash report to our error-monitoring provider: the technical error and stack trace, the screen you were on, your recent in-app actions leading up to it, your app version, OS version and device model, and your KICKR account id and player id. Crash reports do not include your email or name, and the provider is set not to store your IP address. It processes this data in the United States on KICKR's behalf and is not permitted to sell it or use it for advertising.
Automatically, in the background: when the app records a notable event (a failed query, a crash, an authentication failure, a navigation, a milestone) we write a row to our own database in Canada containing your account id and player id, a per-app-session id, the screen you were on, the event type, severity level, the event message, the technical error name and stack trace if there is one, a snapshot of your last few in-app actions for context, optional structured detail about the event (e.g. which query name failed), the timestamp, the platform (iOS), your app version, build number, OS version, and device model (e.g. "iPhone 15 Pro"). We do not collect your location, contacts, microphone, photos, advertising identifier (IDFA), or any data from outside this app.
When you tap "Report a problem" in the app: we save the title and description you wrote, the severity you picked, the report category, the last 25 in-app actions you took (e.g. "opened My Card", "tapped Check in"), and pointers to recent background events from this app session, so we can reproduce what you saw without asking follow-up questions. The sheet lists exactly what's attached before you send.
When you tap "Send feedback" in the app: we save the title and description you wrote and the feedback category, plus your account id, player id, per-app-session id, app version, build, OS version, device model, and the screen you were on. No breadcrumbs and no background-event pointers. Feedback is opinion, not a debug artifact, so we keep the attached context minimal.
If you have voluntarily turned on "Share with App Developers" in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may also share anonymised crash diagnostics with us through App Store Connect; you can turn this off at any time in iOS Settings.
Payment information
When you join a Pickup game, the app saves your card with Stripe so KICKR can charge it for that game once it goes ahead, as set out in the Pickup refund policy. The saved card stays with Stripe; KICKR keeps only Stripe's reference to it and the games you joined, and charges it only for games you join. When you pay for a monthly subscription, your card details are entered directly into Stripe: the secure card box on our sign-up page (a Stripe frame inside kickr.ca), Apple Pay or Google Pay through Stripe, Stripe's hosted Checkout, or the billing portal. They never touch KICKR's servers. If you start signing up and don't finish, KICKR keeps the name, email and phone you typed and how far you got, and may email you up to three reminders over the next few days. Each one has an unsubscribe link. Stripe is certified as a PCI-DSS Level 1 service provider, the highest available certification for handling card data, and tokenizes your card so KICKR only ever sees an opaque reference and the last 4 digits plus the card brand and expiry. KICKR does not offer free trials. The subscription billing terms are described in section 14 of the KICKR participant waiver and terms.
Account credentials
You can sign in to the KICKR app with Sign in with Apple, or with your email and either a password or a one-time code we email you. When you sign in with Apple, KICKR receives an opaque Apple user identifier and, if you choose to share it, your email address (which may be Apple's private email relay address rather than your real inbox). One-time codes are delivered by our email service provider on KICKR's behalf, expire after a short window, and work only once. Accounts are managed by our hosting and authentication provider. If you set a password, it is stored only as a one-way hash, never in readable form, and KICKR staff cannot see it.
How long we keep it
- Active player records (name, contact, preferences) are kept for as long as you have an active subscription or play Pickup games, plus 12 months after your last game or after you cancel so we can welcome you back without making you re-enter everything.
- Payment and tax records (invoices, refund history, amount paid) are kept for 7 years to satisfy Canada Revenue Agency record-keeping rules.
- Server logs are kept for 30 days, then deleted automatically.
- Background diagnostic events (the in-app events described under "Diagnostics and in-app feedback" above) are auto-deleted on a tiered schedule: routine events at 14 days, warnings at 30 days, errors and crashes at 90 days.
- In-app bug reports and feedback that you send through "Report a problem" or "Send feedback" are kept until you ask us to delete them so we can track recurring issues across releases. If you delete your account, the report stays in the system but is unlinked from your identity (your account id is replaced with NULL). To have past reports removed entirely, email league@kickr.ca.
- Email logs (delivery confirmations, bounce reports) are kept for 90 days for troubleshooting.
- Web analytics data is kept by our web analytics provider for 14 months from the visit, then deleted automatically. We do not export it into our own database; the only thing that lands on KICKR's servers from the analytics path is your conversion (the fact that a paid signup happened) so we can attribute revenue to the marketing channel that brought you in.
- Product analytics data (website and app usage events) is kept for up to 12 months, and app session recordings for up to 30 days, then deleted.
- Crash reports are kept for up to 90 days, then deleted.
You can request earlier deletion at any time, except for payment records that we are legally required to retain.
Your rights under PIPEDA
You have the right to:
- Access a copy of every piece of personal information we hold about you.
- Correct anything that is inaccurate or out of date.
- Delete your account and personal data, subject to the 7-year retention requirement on payment records noted above.
- Withdraw consent for non-essential communications at any time. Note that if you withdraw consent for match-logistics emails, we cannot continue to roster you.
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have mishandled your information.
To exercise any of these rights, email league@kickr.ca from the address you registered with. We respond within 7 days.
Security
Protecting your information is a first-order priority at KICKR. Every connection to kickr.ca is encrypted, your card details never touch our systems (they go straight to Stripe), and access to player data is limited to the small KICKR team that runs the league. We follow industry best practices for storage, access control, and incident response, and we review them on an ongoing basis. We will not publish the specifics of those controls, because doing so would reduce their effectiveness; if you are a security researcher and would like to report a concern responsibly, please email league@kickr.ca.
Age
KICKR is an 18+ league. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered, email league@kickr.ca and we will delete the record.
Changes to this policy
We may update this policy from time to time. When we do, we change the "Last updated" date at the top of this page, and if a change is material we let active players know by email.
Contact
Privacy questions, data requests, or concerns: league@kickr.ca. KICKR Global Sports Inc. operates in Toronto, Ontario, Canada.