Privacy Policy

Officiating Journal · Murray Movement Labs LLC · Effective August 30, 2026

Using the app without an account (the default)

With no account, Officiating Journal has no analytics, no advertising, no tracking, and sends none of your data to us. Game records, pay and expense entries, and settings are stored only in the app's local storage on your device. Exporting a backup writes a file to a location you choose; that file is yours to keep, move, or delete.

If you create an account (optional cloud sync)

Creating an account lets your journal sync across devices and carries a Pro unlock between them. If you choose to do this, we collect and store:

• Your email address — to create your account, sign you in, and send account emails (such as email confirmation and password resets).
• An encrypted copy of your journal — your games and entries are encrypted on your device (AES-GCM) with a key derived from a separate sync passphrase that only you know. Our server stores only the resulting ciphertext and a non-secret salt. We cannot read your games, and if you lose your sync passphrase, that synced data cannot be recovered.
• Your Pro status — a record of whether you've unlocked Pro, which platform the purchase came from, and the purchase/transaction identifier, so Pro works across your devices.
• An account identifier — a random ID that ties the above to your account.

Your password is handled by our authentication provider and stored only in hashed form; we never see it in plain text.

Payments

Purchases are processed by Apple (iOS), Google (Android), or Stripe (on the web). We never receive or store your card number. For web purchases, Stripe processes the payment and we store only the resulting purchase identifier and your resulting Pro status.

How we use this data

Only to provide the features you asked for: signing in, syncing your (encrypted) journal, and unlocking Pro across your devices. We do not use it for advertising or tracking, and we do not sell or share it for marketing — ever.

Service providers

We use a small number of processors to run these optional features: Supabase (account hosting, authentication, and encrypted-backup storage), Stripe (web payments), and Resend (delivery of account emails). They process data only to provide these functions on our behalf.

Keeping and deleting your data

You can sign out at any time, which removes your session from that device. To delete your account and everything stored for it, open the app, tap the account button, and choose Delete my account — it takes effect immediately. You can also email support@murraymovementlabs.com from the address on the account and we will delete it within 7 days. Details: officiatingjournal.app/delete-account. Your on-device data and any backup files you exported remain under your control.

Network use

Without an account, the installed app works entirely offline. With an account, the app connects over HTTPS to our provider only to sync and check your Pro status. If you use the web version, pages are served over HTTPS and our host may log standard web-server requests (such as IP address) as all websites do; we add no tracking of our own.

Children

The app is a general-audience utility. It is not directed to children, and account creation is optional and intended for the official using the app.

Changes & contact

If this policy changes, the effective date above will change with it. Questions: support@murraymovementlabs.com, or see our Help & Support page.