Privacy Policy

Kickoff tells a group whether their match is on. We collect three things: when, where, and who. Nothing else.

Lire en français

What we collect

If you organise matches (you have an account): your email address, an encrypted password, and the date, place and required headcount of your matches. Optionally a score — only if you choose to record one.

If you answer a link (you have no account): the first name you type, your yes/no answer, and a random identifier stored in your own browser so that you — and only you — can change your answer. Answering creates no account.

What we never collect

• Location
• Contacts
• Photos, camera, microphone
• Advertising identifiers
• Browsing history
• Any health, financial, biometric or sensitive data

The app requests no system permissions.

Usage analytics

To learn what works and what doesn't, the app measures its usage with PostHog, hosted in the European Union. We record the screens you open and the actions you take (posting, liking, commenting, following, starting or watching a live match, playing ranked, organising a match), your internal Kickoff identifier (a random number), the country and language set on your device, the city on your profile, your rank, your sign-up date, and your device model, OS and app version. Never your email, phone number, name, the text you write, your GPS location or your contacts.

You can opt out at any time: Settings → Usage statistics. Once disabled, nothing more is sent. This data is kept for 13 months at most. Legal basis: our legitimate interest in improving the service, with your right to object.

On the link answer page (no account), we count two actions: opening the page and answering. These never include your first name or IP address; they are tied to the random identifier stored in your browser. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, nothing is measured.

Crash reports

When the app crashes, a technical report is sent to Sentry so we can fix it: the error, the screen, the device model, the app version and your internal identifier. Never your email, phone number, IP address or anything you type. Legal basis: our legitimate interest in keeping the service working; you can object by writing to us.

Advertising

None. No ad networks, no ad pixels, no advertising identifiers, no resale. We never sell, rent or share your data with anyone.

Who can see what

People with a match link see the date, the place, and the first names of those who said yes — exactly what your group already shares with itself. The organiser also sees the "no" and pending answers. Nobody else. Matches are private, not indexed, and the link is an unguessable random token.

Processors

Supabase (database, files and server functions; keeps technical logs such as IP addresses and timestamps for security), LiveKit (video transport for live matches), PostHog, EU (usage analytics) and Sentry (crash reports).

Retention

Matches and answers are kept until the organiser deletes them — the archive is the point of the service. Deleting your account permanently deletes your matches and their answers.

Your rights

You can view, correct, export and delete your data at any time, from within the app or by writing to us. If you answered a link without an account and want your first name removed, ask the match organiser or write to us.

Minors

Creating an organiser account requires being at least 16. Answering a link requires no account and collects only a first name. Parents and guardians may ask us to remove a first name at any time; we do so immediately.

Security

Traffic is encrypted. Passwords are never stored in clear text. Data access is restricted at the database level: an organiser can only ever see their own matches.