Privacy Policy

The data controller for the App is Wendelin Gschwenter, Austria. If you have any questions about this policy or your data, email gschwenterw@gmail.com.

We only collect what the App genuinely needs to work.

Account information: email address, hashed password, username / display name, and an optional profile avatar.

App activity: your match predictions, points earned, ranking, leagues you belong to or create, and any messages or predictions you share within a league.

Technical data: basic device information provided automatically by iOS or Android when the App connects to our servers, plus timestamps of your activity.

We do not collect your real name, location, contacts, photos beyond an avatar, advertising IDs, or payment information. The App does not use analytics or tracking SDKs.

We use your data only to provide the core features of the App, let other members of a league see your username, avatar, predictions and points, keep the App secure, and contact you about important account matters. We do not sell your personal data and we do not share it with advertisers.

Performance of a contract (Art. 6(1)(b) GDPR) — to give you the App's core functionality once you sign up.

Legitimate interests (Art. 6(1)(f) GDPR) — to keep the App secure and free of abuse.

Consent (Art. 6(1)(a) GDPR) — for anything optional, such as uploading an avatar.

Supabase provides the database, authentication and backend functions that store your account and predictions. Data may be hosted in the EU or other regions depending on Supabase's infrastructure. See supabase.com/privacy.

Football-Data.org provides live match fixtures and results. We only receive data from them; we do not send them any of your personal data.

There are no analytics providers, crash reporters, ad networks or marketing tools.

Match fixtures, team names and results shown in the App come from Football-Data.org. This is public sports data and does not contain personal information about you.

Account data is kept for as long as your account exists.

Predictions and league history are kept for as long as your account exists so leagues and leaderboards remain accurate.

After you delete your account, your personal data is deleted within 30 days. Predictions may be retained in anonymised form so historical league standings remain intact.

You have the right to access, correct, delete, restrict, object to and port your personal data, as well as to withdraw consent where processing is based on consent.

You can also lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde (dsb.gv.at).

To exercise any of these rights, email gschwenterw@gmail.com. We aim to respond within 30 days.

You can delete your account at any time from Settings → Delete account inside the App. This removes your personal data as described in Section 7.

The App is not intended for children under 13 (or under 16 in EU jurisdictions where local law requires). We do not knowingly collect data from children below the applicable age. If you believe a child has created an account, contact us and we will remove it.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords and access controls (row-level security policies on our database). No system is perfectly secure, but we work to reduce risk.

Your data is primarily processed within the European Economic Area via Supabase. Where Supabase transfers data outside the EEA, they rely on Standard Contractual Clauses approved by the European Commission.

If we make material changes to this policy, we will update the 'Last updated' date and, where appropriate, notify you inside the App. Continued use of the App after changes means you accept the updated policy.

Questions, requests or complaints can be sent to Wendelin Gschwenter at gschwenterw@gmail.com.