Privacy at NipperHub
Effective: 27 August 2026 · Last updated: 10 September 2026
About this policy
NipperHub is a platform that helps surf life saving clubs run their Nippers programs — registration, payments, beach-day operations and club administration. This policy explains what personal information the platform collects, why, and the choices you have. It's written to satisfy Australian Privacy Principle 1 (open and transparent management of personal information).
Your club remains responsible for its members' information under its own privacy obligations; NipperHub processes that information on the club's behalf to run the season, and holds account information (like your sign-in details) in its own right.
There is a separate, simpler privacy page written for children.
What we collect, and why
About adults: your name, a verified email address and a verified mobile number — so you can sign in, be contacted about your family's season, pay and be sent receipts, and recover your account. Club volunteers' clearance records (such as a Working with Children Check's type, number and expiry) are recorded by the club because the law requires it.
About children: name, Surf Life Saving member ID, age group, program and group placement, attendance at sessions, and the care information a parent chooses to provide so the club can keep their child safe on the beach. We never collect or store a child's date of birth — age group comes from your club's own membership records, verified by the club.
Payments: processed by Stripe against your club's own Stripe account. NipperHub records that a payment was requested, made or refunded, and card details never touch NipperHub. One child-derived detail does reach Stripe, and we'd rather name it than let you find it on a receipt: your child's given name appears on the program line of the payment, so the charge is recognisable to you and to your club's treasurer. It is sent only when the name you entered is a single word — if you entered more than one word we send none of it, because nothing tells us which word is the given name. Never a surname, never a Surf Life Saving member ID, never a date of birth (we don't hold one), and never any child detail on the payment's internal record, which carries opaque reference codes only.
What we don't do: no advertising, no sale of personal information, no analytics trackers on this website, and no use of your information to train artificial-intelligence models.
Children's information
Every child on NipperHub is treated as under 15, and a parent or guardian always provides consent — there is no self-consent path, and because we hold no birth dates we never guess at a child's age. Consents are specific, never pre-ticked, and expire after at most 12 months, so your club asks again each season.
One of those items is an acknowledgement rather than a choice: clubs take photographs and video at sessions and events and may use them in club material such as newsletters, social media and the club's own website. There is no way to decline it in the app. If you'd like an exception for your child, contact your club directly and they will record it.
Access to a child's information is limited to three bases: their own parents and guardians, adults those parents have specifically nominated, and cleared club personnel whose role requires it. Health and care notes are held more tightly than everyday details — a club's list of applicants doesn't carry them at all, and opening a child's record needs a cleared role, checked afresh on every request.
Who can see what
- Your family: parents and co-parents see their own family's information. Adults you nominate see only what you granted them, per child.
- Your club: authorised, cleared club personnel see what their role needs — no more. Every access-affecting change is logged with who made it.
- Other clubs: nothing. A club sees only its own members and applicants.
- The platform: platform personnel do not browse club data in the ordinary course. The platform-level screens that exist are limited to club records, licences and system alerts, and each one demands an authenticator app to open. We'd rather be exact than reassuring here: there is no time-boxed support-access mechanism today, and those platform-level reads are not written to the audit trail individually. If either changes, this page changes with it.
Disclosure and overseas processors
This is every outside service NipperHub sends anything to, and what each one receives. There is no sixth, and a sixth cannot be added quietly — adding one is a change to this table.
| Processor | What | Where |
|---|---|---|
| Resend | Delivers our email (receipts, confirmations, club messages) | United States |
| Stripe | Processes payments — the paying adult's name and email, the amount and the club's account, plus your child's given name alone on the program line (see Payments, above) | United States |
| MobileMessage | Delivers our text messages — the recipient's mobile number and the text of the message | Australia |
| Telegram | Optional club announcements — broadcast only, never personal information | Overseas |
| Have I Been Pwned | Checks a password you choose against known breaches — the first five characters of its scrambled form and nothing else. Never the password, never your name, email or any account reference | Overseas |
Three of those five are overseas exceptions for personal information — Resend, Stripe and Telegram. MobileMessage is an Australian service, and Have I Been Pwned receives nothing that identifies anyone. Everything else about your family and your children stays in Australia, in Google Cloud's Sydney region.
Two qualifications on that, because "everything else" should not be read wider than we mean it. Sign-in is run by Google's Identity Platform, which holds your email address and your sign-in events, and Google does not undertake to keep those account records in a single region. And the NipperHub app — not this website, which loads nothing from anywhere else — runs Google's reCAPTCHA Enterprise to tell a real browser from an automated one; it sees your IP address and how you interact with the page. It is part of signing in safely rather than something to switch off.
Club marketing email (the pre-season reminder) is sent only to families with a recent relationship with the club, carries the club's identification and a working unsubscribe, and unsubscribing is honoured permanently.
Retention and destruction
We keep personal information while it serves the seasons it was collected for. A family's records are then destroyed automatically: once three seasons have fully passed with no activity — no application, no attendance, nothing — a nightly job removes them. We email the primary parent about a month before that happens, where we hold a confirmed address for them.
You can also ask us to delete your family's information sooner, by writing to support@nipperhub.com. Here we would rather be exact than reassuring: there is no delete button in the app and no same-day promise. A request reaches a person, who carries it out and tells you when it is done.
When a deletion does happen it is a real one, including the family's payment records. We keep a record that a deletion happened, never the deleted content, so restoring a backup cannot bring the information back. Two things deliberately survive it, and you should know which: records a club holds in its own right rather than as part of your family — a volunteer's own clearance declaration, and the club's points ledger — and the audit trail of who did what, which is how a club can answer a question about a past decision.
Access, correction and complaints
You can see most of your family's information directly in NipperHub. For anything else — access, correction, or a deletion request — contact your club, or write to support@nipperhub.com. We respond in plain language, within a reasonable time.
If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992 · GPO Box 5288, Sydney NSW 2001.
Changes to this policy
We'll post changes here with a new date, and for significant changes we'll tell parents directly by email.
Contact
support@nipperhub.com — privacy questions are answered by a person.