Privacy Policy

Last updated: August 2026

1. Who we are

FootyPro is operated by Luiz Alencar, based in the United Kingdom. For questions about this policy or your data, contact info@footypro.online.

Postal address: Luiz Alencar, Suite 722, 80A Ruskin Ave, Welling DA16 3QQ, United Kingdom.

2. Controller and processor

FootyPro is the controller of your organiser account data (e.g. your email). For the player data an organiser enters (names, contacts, attendance), the organiser is the controller and FootyPro acts as a processor on their behalf.

3. Data we process

Organisers: email address, display name and a hashed password.
Players (entered by the organiser): name/nickname, and optionally phone, date of birth and photo; plus attendance, payments/credits and ranking within the group.

Match videos. An organiser may attach a video to a match round — either a YouTube link or a file we host. Hosted videos are stored in a public bucket: anyone with the address can watch, without logging in, for as long as the file exists. The organiser decides what to publish and is responsible for the consent of everyone who appears. If you are in a video and want it taken down, ask the organiser of that group first, or write to us.

Player-of-the-round votes. If the organiser turns on in-app voting, each player with an account can vote for one teammate. Votes are never public: seeing them requires an account linked to that group. While voting is open, you only see the tally after you have voted, and nobody sees who voted for whom — once the organiser closes the voting, every player in that group can see the full list of who voted for whom. A confirmed vote is final: you cannot change it or take it back. The winner is public and counts towards the season ranking; the individual votes are not.

4. Lawful bases

We process account data to provide the service you requested (performance of a contract) and to keep it secure (legitimate interests). Player data is processed on the organiser's lawful basis for running their group.

5. Who we share it with

We do not sell your data and do not use it for advertising. We use a small number of sub-processors to run the service: Railway (hosting and database, in the EU), Resend (transactional email such as password resets) and Cloudflare (anonymous, cookie-free audience measurement — see section 9).

6. International transfers

Application data is stored in the EU (Amsterdam). Our email provider may process message metadata outside the UK/EU under appropriate safeguards. The exact transfer mechanism will be confirmed before commercial launch.

7. Retention

We keep data while the group is active. You can ask us to delete it at any time; some records may be retained where the law requires it.

When an organiser asks us to close their group, it goes offline immediately and everything — including photos — is permanently deleted after a 30-day grace period, in case the request was a mistake. An organiser account that is left without any group is deleted along with it. Deleting an individual player removes their personal details (name, phone, date of birth, photo) and keeps only the anonymous match records the group needs. Videos are the exception: deleting a player does not edit any footage — we have no way to tell who appears in a video — so a video may need to be removed by hand. Videos hosted by us are deleted when the group is; a YouTube link only stops being shown, as the video itself belongs to whoever uploaded it there.

8. Your rights

You have the right to access, correct, delete, restrict, port or object to the processing of your personal data. To exercise any of these, email info@footypro.online. We aim to respond within one month.

9. Cookies

We use only strictly-necessary/functional cookies: your login session, a security (CSRF) token, and your theme and language preferences. We do not use analytics or tracking cookies, so no consent banner is shown.

On public pages we measure audience with Cloudflare Web Analytics, a cookie-free tool that collects only anonymous, aggregated data (page visited, referrer, browser type). It sets no cookies, stores no personal data and does not track you across sites.

9-A. Chat assistant

On the home page and in the Help Centre there is an AI assistant that answers questions about the product. What you type there is sent to OpenAI to produce the reply, and is stored on our servers for 30 days. If you give us your contact details — name, e-mail and, if you choose to share them, WhatsApp number and city — the assistant only saves them after asking and getting your explicit agreement; the e-mail kept alongside the conversation is erased after 7 days (the contact itself follows the rules in section 4).

A person from our team may take over the conversation — in that case the transcript is sent to our Telegram. The assistant has no access to any group's data: it cannot see attendance, payments or results, not even yours. Please do not type sensitive information. To have a conversation deleted, write to us at the address in section 1.

10. Complaints

You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes

We may update this policy; the "last updated" date above will change.