Privacy policy

Who is responsible

Beintech is the controller of the personal data described here.

For anything about your data, write to beintech.io@gmail.com. We answer within one month, as required by article 12(3) of the GDPR.

What we collect

Account details: your name, email address and profile picture, passed to us by Clerk when you sign in. We never see or store your password.

Player profile: your skill level, position, the days you are usually free, an optional description, and the postcode you play from. We store the four-digit postcode and the coordinates of that postcode's centre — never a precise position.

Activity: the games you join or organize, invitations you send and receive, attendance recorded by organizers, ratings and MVP votes, your XP history and badges.

Optional mobile push notifications: if you enable them, we associate your installation identifier, platform and Expo push token with your account to deliver notifications. Notification contents and delivery metadata pass through Expo and Apple Push Notification service (APNs) on iOS or Google Firebase Cloud Messaging (FCM) on Android.

Technical data: our host keeps short-lived server logs that include IP addresses, for security and to keep the service running.

What we do not collect

No payment details, because no payment ever passes through Futsify.

No precise location. If you allow your browser to share one, the coordinates are matched to the nearest Belgian postcode on your own device and only that postcode is sent to us. The coordinates themselves never leave your browser and are not logged.

No analytics, advertising or cross-site tracking of any kind.

Why we are allowed to use it

Performing the contract with you (article 6(1)(b)): running your account, showing you games, letting you join and organize them, and telling other players who is on the list.

Your consent (article 6(1)(a)): using your browser’s location and optional email or mobile push notifications. You can disable push in the app’s Settings or your device’s notification settings; disabling push does not delete your account or in-app notifications.

Our legitimate interests (article 6(1)(f)): keeping the service secure and preventing abuse. Attendance and ratings are visible to other players because a matchmaking app only works if people can see who reliably turns up; you can delete your account at any time if you would rather not be listed.

Who else sees it

Other players see your first name, last initial, profile picture, level, position, city, rating, and the games you are on the list for. Your email address is never shown to other users.

Clerk handles sign-in, Neon stores application data and Vercel hosts the service. Optional mobile push also uses Expo and Apple APNs or Google FCM. Push providers may process identifiers, notification contents and delivery metadata outside the EEA; we do not promise EEA-only processing or a particular transfer safeguard for every provider. Provider information: docs.expo.dev/push-notifications/faq/, apple.com/legal/privacy/ and firebase.google.com/support/privacy.

We do not sell data, and we do not share it for advertising.

How long we keep it

Your account and profile are kept until you delete them. Game history and ratings are kept for 24 months after the game, notifications for 6 months, and consent records for 5 years so we can show what was agreed and when.

Expo keeps notification contents only in memory and queues while handing them to Apple or Google, not in a database. Apple and Google apply their own retention policies. Disabling push unregisters this installation from Futsify delivery; deleting your account also removes its push registrations. This does not promise immediate deletion of provider-held identifiers or already delivered notifications.

Deleting your account removes your profile, your participation history, your invitations, your XP and your badges immediately. Ratings you wrote about other players stay on their cards with your name removed, because that history belongs to them too.

Your rights

You have the right of access (article 15), rectification (16), erasure (17), restriction (18), portability (20) and objection (21).

Access and portability: Settings has a button that downloads everything we hold about you as a JSON file, immediately. Rectification: edit your profile in Settings. Erasure: delete your account in Settings.

For restriction or objection, or if anything above does not work for you, write to beintech.io@gmail.com.

If you are not satisfied with how we handle a request, you can lodge a complaint with the Belgian Data Protection Authority: Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.

Security

Traffic is encrypted in transit. Authentication is handled by Clerk rather than by us, so no password ever reaches our systems. Access to the production database is restricted to the people who operate the service.

If a breach ever puts your rights at risk, we will notify the supervisory authority within 72 hours and tell you directly where the law requires it.

Children

Futsify is not intended for children under 16. In Belgium, information-society services may rely on a child's own consent from the age of 13, but we have set the floor at 16 because the service exposes a player's name and activity to other adults.

If you believe someone under 16 has an account, write to beintech.io@gmail.com and we will remove it.

Changes

When this policy changes materially, the version number at the top changes and you are asked to agree again the next time you sign in. Consent records keep the version you agreed to.