Privacy Policy

  • Home /
  • Privacy Policy

Last updated: September 5, 2026

1. Introduction

This privacy policy describes how Fireflow s.r.o., Company ID: 19407963, registered office at Lidická 700/19, Brno, 602 00, Czech Republic, email: ahoj@sportuj.app (the “controller”), processes the personal data of users of the Sportuj.app mobile app and website.

The controller protects your privacy and acts in accordance with applicable law, in particular the General Data Protection Regulation (GDPR).

2. What data we process

Personal information

  • Email (required, for signing in and communication)
  • Name or nickname (required, for display in the app)
  • Phone number (optional, used as contact information within the team)
  • Registration date and account status

User and device identifiers

  • Firebase UID, Google OAuth ID, Facebook OAuth ID
  • FCM tokens (push notifications), Google Client ID

Team and sports activity data

  • Team name and details (sport, city, contacts)
  • Role in the team (admin, member, coach)
  • Events (name, description, place, time) and attendance
  • Attendance statistics

Data on managed child profiles

  • The child’s name as it appears on the roster
  • Year of birth (optional, for assigning an age category)
  • The link to the legal guardians who manage the profile

Communication data

  • Messages on the team board
  • Direct messages between users (once the feature is introduced)

Technical data

  • Crash logs (Firebase Crashlytics)
  • Notification preferences
  • Connection status

3. Purposes of processing

  • App features: authentication, management of teams and events, messages, push notifications.
  • Account management: creating and managing the user profile, identity verification.
  • Communication from the developer: notifications and emails about the services and changes to the app.
  • Marketing: information about paid services (sent to registered users only).
  • Analytics and diagnostics: app stability, bug fixing, performance.
  • Security: preventing account misuse, verifying sign-ins.

We process personal data on the basis of:

  • performance of a contract (running your account and the app’s features),
  • legitimate interest (improving our services, basic marketing),
  • consent (signing in with Google or Facebook),
  • consent of a legal guardian under Article 8 GDPR (managed child profiles, see Section 10).

5. Data sharing and third parties

Data is shared only with:

  • Google Ireland Limited (Firebase, Auth, Firestore, Crashlytics)
  • Meta Platforms Ireland Limited (sign-in with Facebook)
  • Other team members (name/nickname, email, phone within the team; for a managed child profile, the child’s name and the legal guardian’s contact details)

Data is not provided to advertising networks, or to analytics or marketing companies other than those listed above.

Personal data is not transferred outside the EU/EEA, except where applicable law permits it and appropriate safeguards are in place.

6. Data retention

  • Personal data and team data: for as long as the account exists.
  • Crash logs and FCM tokens: kept temporarily and rotated.
  • After an account is closed, its data is deleted within 30 days at the latest.

7. Data subject rights

You have the right:

  • to access your personal data,
  • to have inaccurate data corrected,
  • to erasure (the “right to be forgotten”),
  • to restriction of processing,
  • to data portability,
  • to object to processing,
  • to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

To exercise your rights, contact us at ahoj@sportuj.app.

8. Data security

  • Data is stored in secured Firebase databases (Google Cloud, EU).
  • Only authorized persons have access.
  • All communication runs exclusively over encrypted connections (HTTPS/TLS).

9. Cookies and analytics

The sportuj.app website uses only cookies related to Google Analytics for traffic analysis. The website does not collect any other personal data.

10. Age limit and children’s data

Own account

Only a person who has reached the age of 15 may create their own user account in the Sportuj.app app. By creating an account, the user confirms that they meet this requirement. We do not allow persons under 15 to create their own account.

Managed child profiles

The app is used by sports clubs whose members include children under 15. For them, the app offers a managed profile — a child’s entry on the team roster that is created and managed exclusively by their legal guardian. Only a person who has their own account in the app can create a managed profile; by creating it, they become the legal guardian of that profile.

For a managed profile, we keep only:

  • the child’s name as it should appear on the roster,
  • the year of birth — optionally, for assigning an age category. We keep the year, not the date of birth, and the legal guardian does not have to provide it at all.

For a managed profile, we do not keep an email address, phone number or sign-in credentials. The child does not sign in to the app and cannot do so — the profile has no sign-in credentials. All communication that would otherwise go to the user, i.e. notifications and emails, is delivered to the legal guardians.

In addition, the same record of team activity is created for the child as for any other member — team membership, attendance at events and attendance statistics.

The legal basis is consent given by the legal guardian under Article 8 GDPR, expressed by creating the managed profile.

What others can see about the child

In a team the child belongs to, other members can see the child’s name on the roster and their attendance at events. The contact details shown for the child are those of their legal guardian — the guardian is listed in the team as the contact person, so the coach knows who to reach out to. None of this is accessible or searchable outside the team.

The legal guardian can at any time in the app:

  • correct or complete the details of the managed profile,
  • remove the child from a team, which also removes the other team members’ access to the child’s data,
  • add another legal guardian using a one-time link that is valid for 24 hours and can be revoked,
  • give up their own authorization for the profile; the last legal guardian cannot give it up, so that the profile is never left without someone managing it.

To request deletion of a managed profile and all data about the child, write to ahoj@sportuj.app from the legal guardian’s email address; we will carry out the deletion within 30 days. The rights under Section 7 are exercised on the child’s behalf by their legal guardian.

Own account of a person under 15

If we find out — whether through our own checks or because a legal guardian, a team admin or another user has notified us — that a person under 15 has created their own account, we will:

  1. disable the account without delay,
  2. delete the account and all personal data associated with it without undue delay, and within 30 days at the latest,
  3. inform the legal guardian of the deletion, if we know who they are and have their contact details.

We carry out the deletion on our own initiative — there is no need to request it separately. You can report a suspicion that a person under 15 is using their own account at any time at ahoj@sportuj.app; we will look into every such report without undue delay.

This procedure does not apply to managed child profiles created by a legal guardian under this section — those are kept in the app lawfully.

11. Closed teams and removing users (blocking)

Sportuj.app is not an open social network. All user content — messages on the team board, comments and direct communication — is available exclusively within a closed group, that is, the specific team the user is a member of. A person can become a team member only by invitation or with the approval of a team admin; the content is not publicly accessible or searchable outside the team.

Removing a member from the team serves as the way to block a user who behaves inappropriately. A team admin can remove any member from the team at any time without giving a reason. The removed user:

  • immediately loses access to the team, its events, its board and all team communication,
  • can no longer contact members of that team through the app,
  • cannot rejoin the team without a new invitation or the approval of an admin.

Because all communication in the app is limited to the team’s closed group, removal from the team has the same effect, as far as the other members are concerned, as blocking the user.

You can report inappropriate behavior or objectionable content to your team admin or directly to us at ahoj@sportuj.app. We review every report no later than 48 hours after receiving it and, depending on its severity, remove the objectionable content, remove the user from the team or close their account.

12. How to delete your account and data

If you wish to delete your account and all associated data, you can:

  1. go to Profile → My account → Delete account in the app, or
  2. send a request to ahoj@sportuj.app from your registered email address.

Once confirmed, the account will be removed and all data anonymized or deleted within 30 days.

13. Changes to this policy

We will inform you about changes to this policy by email or by a notification in the app.