Privacy Policy

MHL Club (Band of Brothers) is a mobile-first hockey community app operated by MHL Club(“we”, “us”, “our”), the data controller responsible for your personal information. You can reach us at MitchAil@mhl.club.

We collect only what we need to run the app:

• Account & identity: your mobile phone number (used to sign in), and any display name, avatar, position, skill level or profile details you choose to add.
• Activity data: games, teams, tournaments, RSVPs, scores, stats, leaderboard standings, and social posts or messages you create.
• Communications: invitations and team updates you send, and the contents of conversations you have with our in-app assistant, MitchAil.
• Device & usage: IP address, device and browser type, and basic interaction events collected through privacy-friendly analytics.
• Cookies & local storage: small identifiers needed to keep you signed in and remember preferences (see our Cookie Policy).

We do not intentionally collect special-category data (such as health or biometric data) and ask that you do not submit it. MHL Club is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data.

• Create and secure your account and verify your identity by SMS.
• Provide core features: scheduling games, managing teams and tournaments, stats, leaderboards, and social feeds.
• Send invitations, notifications, and team updates by SMS or email at your direction.
• Power the MitchAil assistant, including answering questions about your stats and drafting messages.
• Maintain security, prevent fraud and abuse, and debug and improve the service.
• Comply with legal obligations and enforce our Terms.

Where the EU/UK GDPR applies, we rely on the following legal bases:

• Contract: to provide the features you request and operate your account.
• Legitimate interests: to secure, maintain and improve the service, where not overridden by your rights.
• Consent: for optional communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation: to meet record-keeping, tax, and law-enforcement requirements.

The MitchAil assistant uses third-party AI model providers to generate responses, draft emails, and create images. Your prompts and relevant app data may be sent to these providers to produce a result. We do not use your content to train third-party models, and these features do not make legally significant decisions about you without human involvement. Always review AI-drafted messages before they are sent.

We never sell your personal information. We share it only with:

• Service providers (subprocessors) that host our infrastructure and deliver messages on our behalf, under contract. See our Subprocessors page for the current list.
• Other users, to the extent you choose to share — for example your profile, posts, team membership and game participation are visible within the relevant groups.
• Legal & safety recipients when required by law, to enforce our Terms, or to protect the rights and safety of users.
• Successors in connection with a merger, acquisition, or sale of assets, subject to this policy.

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect data transferred outside your region.

We keep your information for as long as your account is active and as needed to provide the service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

We use technical and organizational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect your data. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. You can edit much of your data in the app, or contact us to exercise these rights. You also have the right to lodge a complaint with your local data protection authority.

US state privacy rights:residents of California and other states may request access to or deletion of their information and are entitled not to be discriminated against for exercising these rights. We do not sell or “share” personal information for cross-context behavioral advertising.

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of MHL Club after an update means you accept the revised policy.

For privacy questions or requests, email MitchAil@mhl.club.