Privacy Policy
Last updated: 10 October 2026
This policy explains what information the Kickoff Club app ("Kickoff Club", "we", "us") collects, why we collect it, and the choices you have. In short: we collect what's needed to run your account and show your matches, we don't sell your data, and you can delete everything at any time.
Kickoff Club is operated by [your name or company], [country]. Contact: [email protected].
What we collect
Information you give us
- Account details: email address and password (stored securely by our authentication provider; we never see your password).
- Profile: username, display name, profile photo, bio, favourite team and, if you add them, Instagram, X/Twitter and YouTube links.
- Date of birth and home country: used to confirm you are 13 or older and to work out your passport stamps. These are private and never shown on your public passport.
- Matches you log: teams, date, stadium, score, stand/block/seat, ticket type, ratings, notes, and any photos or videos you attach.
- Community activity: posts you share to the feed, comments, likes, follows, trip plans, stadium tips, and reports you make.
- Feedback: bug reports and feature suggestions you send from the app or by email.
Information collected automatically
- Push notification token: if you allow notifications, your device gets a token from Google Firebase Cloud Messaging so we can send them. Your notification preferences are stored with your account.
- Basic technical data: like any online service, our servers and providers receive your IP address and device/app information when the app connects to them. We use this only to run and secure the service.
What we don't collect
- We don't access your device's location. Stadium locations come from our own directory, not from your phone's GPS.
- Face ID, Touch ID and fingerprint unlock are handled entirely by your phone. Your biometric data never leaves your device and we never receive it.
- We don't use advertising trackers or third-party analytics, and we don't sell or rent your personal information.
How we use it
- To create and run your account, ledger, map and passport.
- To show the content you choose to share to other users, and to let you follow people and react to posts.
- To fill in match details automatically, such as scores and matchday weather.
- To send the notifications you've switched on.
- To keep the community safe: reviewing reports, removing content that breaks our rules and preventing abuse.
- To answer your messages and improve the app.
Where the GDPR or UK GDPR applies, we rely on performing our contract with you (running the service you signed up for), our legitimate interests (keeping the service safe and improving it) and your consent (for push notifications, which you can withdraw at any time).
What other people can see
Your passport (username, display name, photo, bio, favourite team, social links and grounds count) and any matches you share to the community feed are visible to other users. When you log a match you can switch off Share to community feed to keep it private. Your email, date of birth and home country are never shown to other users.
Service providers
We use a small number of providers to run the app. They process data on our behalf and only for that purpose:
- Supabase: database, sign-in, file storage and server functions.
- Google Firebase Cloud Messaging: delivering push notifications.
- OpenStreetMap tile servers: your device loads map images directly from them.
- Open-Meteo, football-data.org, football-data.co.uk, openfootball and Wikimedia: public football, stadium and weather data. We send these only match dates, competitions and stadium locations, never your personal details.
- GIF search provider (KLIPY): if you search for a GIF, the search terms go through our server to that provider.
Some of these providers may process data outside your country. Where that happens we rely on the safeguards they offer, such as standard contractual clauses.
How long we keep it
We keep your information for as long as your account exists. When you delete your account, your profile, ledger, photos, videos, comments, likes, follows and trip plans are deleted. Copies in routine backups are overwritten within a limited period. We may keep a record of reports or actions taken against content that broke our rules where we need to for safety or legal reasons.
Your choices and rights
- Edit your profile and match logs at any time in the app.
- Delete your account and data in Passport → Settings → Delete account. See how to delete your account.
- Turn off notifications in the app's settings or your phone's settings.
- Ask us for a copy of your data, or to correct or delete it, by emailing [email protected].
Depending on where you live (for example the UK, EU or California) you may have further rights, including to object to or restrict processing and to complain to your local data protection authority. We will respond to requests within the time the law requires.
Children
Kickoff Club is not for children under 13. We check your date of birth when you sign up, and if you are under 13 the account you just created is deleted straight away. If you believe a child under 13 has an account, contact us and we'll remove it.
Security
Data is sent over encrypted connections, and access to private fields is restricted at the database level so other users can't read them. No service is perfectly secure, but we take reasonable steps to protect your information.
Changes to this policy
If we change this policy we'll update the date at the top. If the changes are significant, for example if we introduce advertising, we'll tell you in the app before they take effect.
Contact
Questions about privacy? Email [email protected].