Privacy policy

The developer and data controller is Shygo.Dev (Rasheed Bou Hamdan). Contact: info@matchday-tracker.com

What we collect

Account and identity. Sign-in is handled by Clerk, our authentication provider. When you sign in with Google, Apple, or an email code, we receive and store your display name, your email address, and your profile picture URL. You may optionally add your nationality.

Your football record. The matches you are added to, which side you played on, goals and assists credited to you, appearances, awards, and any votes you cast for Players' Player. This is the point of the app.

Fitness data, only if you use the watch app. If you start a session on your Galaxy Watch, Matchday records heart rate, step count, calories burned, distance, and exercise duration for that session, and attaches the summary to that match.

Precise location, only during a watch session. The watch app requests location access so it can measure distance and speed while you play. Location is used only while a session is running. We do not track your location in the background and we do not store a location history.

Notifications. If you allow notifications, we store a device push token so we can tell you about your next game, a live score, or a vote.

How you use the app. So we can see where people get stuck and fix it, the phone app sends usage records to PostHog, our analytics provider. They cover that the app was opened, which screen you are on, and the things you do in it: joining and creating a group, claiming a player, setting up and running a match, logging goals, the Players' Player vote and whether you saw the vote before you left it, invitations sent and answered, sharing a recap, opening a spectator link, your answer to the notification permission prompt, and whether an update prompt appeared and was tapped. Each of these carries ids, counts and yes/no flags, and nothing else. The server adds two of its own: when a vote opens, and when an organiser closes one early, tied to the account that did it. If the app crashes, or hits an error it handles quietly, the crash report and the error stack trace go the same way, under the same "Share usage data" switch. Alongside all of this we receive your device model, Android version, app version, language, an identifier generated by the app for this install, and your IP address, from which an approximate location (country and city) is derived. We do not store a precise location from this, and we do not use an advertising ID.

These records carry no names. They say that a goal was logged, never who scored it; that a group was joined, never with which code. Once you sign in they are linked to your account, so we can tell one person using the app three times from three people using it once.

The watch app has no analytics at all.

What we do not do

• We show no adverts, and we include no advertising SDKs.
• We do not use analytics to profile you, target you, or build an advertising audience.
• We do not read the contents of what you type, and we do not record your screen.
• We do not sell your data, and we do not share it for advertising.
• We do not collect contacts, messages, photos, files, or your browsing activity.

Who else sees it

• Other members of your group. Your display name, picture, and football record are visible to people in the groups you join. That is how a shared record works.
• Spectators. If an organiser shares a live match link, anyone with that link can watch the score and see player names for that match, without an account.
• Clerk, our authentication provider, processes your sign-in and identity data on our behalf.
• Google Firebase Cloud Messaging delivers push notifications.
• PostHog processes the usage records described above, on our behalf, on its European servers.
• We disclose data otherwise only where the law requires it.

Health Connect

On the phone, Matchday can write a finished match's exercise, steps, calories, and distance into Android's Health Connect, so your game shows up alongside the rest of your activity. This only happens if you grant Health Connect permission, and we write to it rather than read from it. You can withdraw that permission at any time in Health Connect.

Where it is stored

Data is held in Microsoft Azure in West Europe. It is sent over HTTPS.

How long we keep it

We keep your account data until you delete your account. Deleting your account scrubs your personal details: your display name becomes "Deleted account", and your email and picture are removed. Match history itself is kept, because it belongs to the group rather than to one person, and removing it would rewrite other people's records.

How to delete your account, step by step.

Your choices

• See or correct your data: in the app, under Settings.
• Delete your account: in the app, under Settings. This also asks Clerk to delete your identity. Full instructions here.
• Turn off notifications, location, or Health Connect: in your device settings, at any time.
• Turn off usage data: in the app, under Settings, Data and privacy. It takes effect straight away and needs no account, so a spectator can turn it off too.
• Ask us directly: email info@matchday-tracker.com and we will respond.

Depending on where you live you may have rights to access, correct, export, or erase your personal data, and to object to processing. The email above is how to exercise them.

Children

Matchday is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, email us and we will remove it.

Changes

If this policy changes we will update the date at the top. Significant changes will be announced in the app.