How it is built
Website and app
Plain HTML, CSS and JavaScript pages served from Netlify's global network. It installs on a phone as an app and keeps working on a weak connection. The Android app is packaged from the same website, so there is one codebase. There is no iOS app yet.
Data
A Postgres database on Supabase, with row-level security rules deciding what each account can read and change. Public counts come from one function that returns totals only, never a person.
Server logic
Anything that moves money, grants a badge or touches documents runs in server functions that check who is signed in. Prices and badges are decided on the server, never trusted from the browser.
Payments
Flutterwave, with the coach's share split to their own bank account at checkout. Naira and dollars.
Email and identity
Email through Resend. Adult ID checks through Dojah. Under-18s are not ID-checked; they are linked to a parent or guardian who must consent before their profile is public.
Running on its own
Scheduled jobs send reminders, expire old requests and run a daily health check that alerts the team when something breaks.
How we keep it safe
- Every code change is scanned automatically for security problems, leaked secrets and outdated dependencies.
- Database permissions are checked against a recorded baseline every day; anything new that the public could call raises an alert.
- Children's data has its own rules: guardian consent, no public profile without it, and contact through the app. See Child Safeguarding.
- Found a security problem? Email hello@allondeck.org with "Security" in the subject.
Version
We are on 0.9: feature-complete, with revenue switched off until 1 January 2027. 1.0 means the platform does what it claims with real money and recovers when it breaks, including one real-price payment completed end to end, a rehearsed database restore and an automated access-control test suite. 2.0 is the commercial switch-on.
Changelog
What changed, newest first. Small fixes are grouped.
28 Oct 2026
- Every public count now comes from the live database and is re-stamped on each deploy, so a page can no longer show an old number.
- Marketing and ad tags wait for "Accept all" on the cookie banner. Before, some loaded before any choice was made.
- New pages: what verified means and how coaches get paid.
- Coach badges re-checked: the ✔ now needs a certificate our team checked by hand.
- Fixed: online bookings took an 8% platform fee although coaches keep 100% until 1 January 2027.
26 Oct 2026
- Security review: closed the remaining routes by which an account could mark its own results, ranking or badge as verified.
- Admin tools for reviewing flagged match results.
25 Oct 2026
- AllONDECK Tour: season leaderboard and result claims.
22 Oct 2026
- Player Opportunity page now publishes the outcome of the ITF tournament grant, naming only players with the right consent.
20 Oct 2026
- The coach profile meter had stopped rendering on 19 Sep; fixed, and it now scores the right things.
18 Oct 2026
- Coach pricing: naira only for coaches in Nigeria, dollars available for coaches abroad, and the card matches what is charged.
- Automated query checks run on every code change.
17 Oct 2026
- Nobody can grant themselves a verification badge.
- Sign-up no longer loses the new profile on a permissions error.
15–16 Oct 2026
- On Deck Daily (one tennis task a day) and the Profile Sprint.
- Every photo, video and document upload is tied to the signed-in account.
- Updates now reach returning visitors straight away; an old offline cache had been holding them back.
10–13 Oct 2026
- ITF tournament grant connected to player profiles, capped at 5 places, with date-of-birth checks instead of guessed ages.
- Photo and video uploads restored.
- PDFs, spreadsheets and maps restored after a security-policy change had blocked them.
4 Sep 2026
- Version 0.9.0, the first tagged release. Booking prices are read from the coach's profile on the server, not from the browser.
- Coaches get 24 hours, not 4, to answer a session request, with one reminder.