Política de Privacidad
1. Controller
The controller responsible for data processing in the futcup app and on this website is:
Emre Dirlik
Eichhorster Weg 29
13435 Berlin
Deutschland
E-Mail: support@futcup.app
2. What data we collect
futcup collects only the data necessary to operate the service:
- Email address — used to create and authenticate your account, and (on this website) for the optional launch waitlist.
- Password — stored in hashed form by our authentication provider (Supabase). We never see or store plain-text passwords.
- Username — a display name you choose, shown on leaderboards and to other users.
- Date of birth — collected once at registration to verify you meet the minimum age of 16.
- Match predictions — the scores you enter for matches, linked to your account.
- Selected competitions, friends and groups — which tournaments you follow, your friend connections and group memberships.
- Push notification token — if you opt in to notifications, a device token is stored to send you goal alerts and kick-off reminders.
- Consent records — when you accepted this policy and the terms, and which version.
- Purchase status — if you buy an optional subscription or in-app product, we store the entitlement status (not your payment details — payment is handled entirely by Apple/Google).
- Contact form — if you use the contact form on this website, the name, email address and message you enter are sent to us by email (via our email provider Resend, see section 4) solely to answer your inquiry.
We do not collect location data, advertising identifiers, browsing history, or any analytics beyond what is described above. We use no third-party tracking or advertising SDKs.
3. Purpose and legal basis (Art. 6 GDPR)
- Account, predictions, leaderboards, groups — performance of a contract, Art. 6(1)(b) GDPR.
- Age verification and consent records — legal obligation, Art. 6(1)(c) GDPR.
- Push notifications and waitlist emails — your consent, Art. 6(1)(a) GDPR, revocable at any time (device settings, in-app, or by contacting us).
4. Processors and third parties
- Supabase (database, authentication, serverless functions) — our backend provider. Data is hosted in the EU (Frankfurt, eu-central-1). A data processing agreement (DPA) under Art. 28 GDPR is in place.
- football-data.org — provides match schedules and results. No personal data of yours is sent to this service.
- Resend (resend.com) — our transactional email provider. Delivers account emails (e.g. email confirmation, password reset), waitlist confirmations and contact-form messages from support@futcup.app. Resend processes only the email address and message content needed for delivery.
- Expo push service — delivers push notifications to your device if you opted in. Only the push token and notification content are transmitted.
- Apple / Google — process payments for optional purchases and deliver the app. See their own privacy policies.
We never sell your data or share it with advertisers.
5. Retention
Your data is stored for as long as your account exists. If you delete your account, all personal data is deleted immediately and permanently (see section 6). Waitlist emails are deleted after the launch notification has been sent. Incomplete guest sessions created during onboarding are automatically deleted after 30 days.
6. Your rights
Under the GDPR you have the right to:
- Access & portability (Art. 15, 20) — use “Export my data” in the app’s profile settings to receive a machine-readable copy of all your data.
- Erasure (Art. 17) — use “Delete account” in the app to permanently delete your account and all associated data.
- Rectification (Art. 16), restriction (Art. 18) and objection (Art. 21) — contact us at the email above.
- Complaint — you may lodge a complaint with a data protection authority (Art. 77).
7. Minimum age
futcup is intended for users aged 16 and older. Registration requires a date of birth confirming this.
8. Changes
We will inform you in the app about material changes to this policy and, where required, ask for renewed consent.