Footbar Privacy Policy

Last updated: [October 20, 2025]

Preamble

Welcome to Footbar. The protection of your personal data is a priority for us. This privacy policy explains what data we collect through our mobile applications (iOS and Android), why we collect it, and how we use and protect it.

This policy applies to all users of our services.

Important note regarding minors:

The age of digital majority (the age at which a minor can consent to the processing of their data alone) varies by country (e.g., 13 in the United States, 16 by default in most of the European Union, or 15 in France).

Our application is designed for use by players aged 8 and older. Our policy is therefore as follows: for any user who has not reached the age of digital majority in their country (or a minimum of 16 in the EU and 13 in the United States), account creation and acceptance of this policy must be carried out by a parent or legal guardian. The latter consents, on behalf of the minor, to the collection and processing of their data.

When we use the terms "you" or "your", they refer to the user (if they have reached the age of majority in their country) or the parent acting on behalf of the child.

Table of Contents:

The data we collect
Why do we use your data (Purposes) and on what legal bases?
Who can receive your data? (Recipients and Sharing)
Is your data transferred outside the European Union?
How long do we keep your data? (Retention periods)
How do we protect your data? (Security)
Marketing, advertising and communications
Use of your photos for promotional purposes
Technologies and SDKs used in the application
What are your rights regarding your data?
Protection of minors
Links to third-party services
Policy updates and Contact

1. The data we collect

We collect various types of personal data about you, which we can group as follows:

1. Data you provide directly to us:

Identification and account data: When you create your user account: your first name, last name, email address, date of birth (for age verification), and a password (which is securely stored and hashed).
Profile data (optional): Any information you choose to add to your profile to enrich it: profile picture, gender, height, weight, city, country, preferred field position, preferred foot, and your favorite club.
Communication data: The content of your messages when you contact our customer service (especially via tools like Intercom).

2. Data generated by your use of our services (Application and Sensor):

Performance and game data: Technical and statistical information related to your performance during your matches or training sessions, generated by the Footbar sensor: individual and collective statistics (speed, distance, shots, passes, etc.), session location data (match location), date and time of the session.
Visual data (where applicable): Match videos (potentially entire matches or excerpts) that you, or a partner tournament organizer, might send us, particularly for Research and Development (R&D) purposes.

3. Data we collect automatically (Application technical data):

Device and connection data: When you use our mobile applications: your IP address, your device type and model, your operating system (iOS, Android) and its version, and your time zone.
Application usage data: Information about how you interact with the application: screens viewed, features used, time spent, error reports ("crash logs") in case of a technical problem.

4. Subscription-related data:

We do not directly collect or process your payment data (credit card number). When you subscribe to a premium subscription, transactions are securely managed by Apple's (App Store) or Google's (Play Store) payment platforms.
We (via our subscription management provider Purchasely) only receive information confirming your subscription status (e.g., active, canceled, expiration date) to manage access to your premium services.

2. Why do we use your data (Purposes) and on what legal bases?

Footbar processes your personal data only for specific purposes and on a valid legal basis, in accordance with the GDPR.

1. Based on the performance of our contract (our Terms of Use):

Provide the Footbar service: Manage the creation and security of your user account; record, analyze and display your performance data (your match statistics); allow you to consult your session history.
Manage the community and public aspect of the application: The nature of our service is to allow you to compare yourself with the community. This implies that your profile is public by default within the application (visible to other users) and that you appear in the general rankings (where your name/nickname is displayed). You have a "private mode" in your account settings to hide most of your profile information.
Manage your premium subscription: Activate or deactivate your access to premium features, in connection with purchase confirmations received from application stores (via Purchasely).
Provide customer support: Answer your questions and resolve your technical problems (especially via Intercom).

2. Based on your specific Consent (Opt-in):

Authorize access to your data via our API: Allow third-party applications or partners (for example, an application from your club) to access your profile and performance data. This access is only possible after your explicit authorization for each partner via a secure authentication protocol (OAuth2).
Direct marketing from our partners: Send you by email offers for products or services from our partners (if you have checked a specific box for this).
Use of your photos for promotional purposes: Use your match photos for our external communication (see section 8).

3. Based on our Legitimate Interest (Opt-out):

Improve our products and services (R&D): Analyze performance data (including match videos) in an aggregated or anonymized manner to train our artificial intelligence algorithms and develop new functionalities.
Marketing of our own services (Footbar): Send you by email information and special offers concerning exclusively Footbar products; create targeted advertising audiences on third-party platforms (like Meta) to promote our services (see section 7).
Application Analysis and Security: Ensure the security of our services, prevent fraud, detect bugs and analyze application usage to improve ergonomics.
Sharing and valuing data with the sports and economic ecosystem: Share profile and performance data (pseudonymized or aggregated) with football ecosystem players (clubs, federations, recruiters) for statistical analysis or talent detection purposes; and with commercial partners (sports brands) for trend analysis purposes.
- You have a right to object which you can exercise at any time to stop this sharing (see section 10).

4. Based on a Legal Obligation:

To respond to a legal request from a judicial authority or to manage our accounting obligations.

3. Who can receive your data? (Recipients and Sharing)

Your data is never sold. It may be shared with:

Our subprocessors (Processors): Service providers who process data on our behalf and according to our instructions (for example, our host Google Cloud Platform, our customer support tools like Intercom, or subscription management like Purchasely).
Advertising platforms (for our marketing): We share your hashed email with partners like Meta (Facebook/Instagram) to create similar audiences (see section 7).
Partners (via API): Partners you have explicitly authorized (via OAuth2) to access your data.
Partners (based on Legitimate Interest): The sports and commercial ecosystem players (clubs, brands) mentioned in section 2, unless you object.
Legal authorities: If the law requires us to do so.

4. Is your data transferred outside the European Union?

Our main servers, where your account and performance data are stored, are located within the European Union (in Belgium, via Google Cloud Platform), regardless of your country of residence.

However, to provide a global service (such as customer support via Intercom or advertising via Meta), we use providers who may be based in other countries, particularly the United States.

If you reside in the European Economic Area (EEA): These transfers of data outside the EEA are governed by robust legal safeguards (such as the European Commission's Standard Contractual Clauses).
If you reside outside the EEA: Your data will be transferred to the European Union (our servers in Belgium) for processing. By using our services, you consent to this transfer and processing in the EU, as well as to transfers to our providers (e.g., in the United States) necessary for the operation of the service.

5. How long do we keep your data? (Retention periods)

We only retain your personal data for as long as necessary for the purposes for which it was collected.

Your account and performance data: We keep them as long as your Footbar account remains active, to allow you to track your progress.
In case of inactive account: If you do not use your account (no login) for three (3) years, we will consider your account inactive. We will send you a notification to inform you, and without a response from you, we will proceed with the deletion of your identifiable personal data (your name, email, profile information, etc.).
Retention of anonymized data (R&D): After the deletion of your account and your identifiable data, we reserve the right to retain your raw performance data (sensor statistics and measurements), but only in a completely anonymized manner. This data, which no longer allows you to be identified, is kept for research, statistical purposes, and for the training and improvement of our algorithms.
Marketing data: We keep your email for this purpose for three (3) years after your last interaction with us, or until you unsubscribe.
Audience analysis data: They are kept for a period not exceeding 25 months.

6. How do we protect your data? (Security)

The security of your data is our priority.

Hosting: Your data is hosted on Google Cloud Platform's (GCP) secure infrastructure in Belgium.
Technical and organizational measures: We implement appropriate security measures, including:
- Encryption of your data during transit (SSL/TLS).
- Hashing (pseudonymization) of your passwords.
- Strict access controls to limit access to your data to authorized persons only.
- Pseudonymization or anonymization of data when possible (especially for R&D).

7. Marketing, advertising and communications

1. Email Communications (Prospecting)

For our own services (Legitimate Interest): We may use your email to send you information about our Footbar products and services.
For partner services (Consent): We will only send you partner offers if you have explicitly consented (opt-in).
In all cases, you can unsubscribe at any time by clicking on the "Unsubscribe" link at the bottom of each email.

2. Targeted Advertising and Lookalike Audiences (Meta) In order to promote our services to new audiences, we may share your email address with partners like Meta (Facebook/Instagram). Your email address is always shared securely and "hashed" (pseudonymized) before any transfer. This sharing (based on our legitimate interest) has two objectives:

Custom Audiences: To exclude you from our acquisition campaigns.
Lookalike Audiences: To allow Meta to find profiles similar to yours to show them our advertisements. You can object to this use at any time by exercising your right to object (see section 10).

8. Use of your photos for promotional purposes

This section does not concern your profile picture, but any other photo of you in action or during matches. We will only use these photos for our external communication (social networks, advertisements) with your explicit and specific consent, which will be requested on a case-by-case basis. You have the right to withdraw this consent at any time by contacting us.

9. Technologies and SDKs used in the application

Our application uses no trackers or mobile advertising identifiers (such as Apple's IDFA or Google's AdID) for targeted marketing purposes.

However, we use software bricks (SDKs) for functional reasons:

1. Essential SDKs (Necessary for operation):
- Purchasely: To manage your premium subscription status.
- Intercom: To allow you to use our customer support module ("chat").
2. Analytics Tools (Our internal use):
- We collect usage data (screens viewed) and crash logs based on our legitimate interest to understand how the application is used, improve its stability and ergonomics. This data is not used for advertising targeting.

10. What are your rights regarding your data?

Depending on your place of residence, you have specific rights regarding your personal data. We are committed to respecting the rights granted by major regulations, including the GDPR in the European Union and similar laws (such as the CCPA in California).

The exercise of these rights is free of charge.

We recognize the following rights, which are guaranteed to our European users and which we extend as far as possible to all our users:

Right of access: The right to request a copy of the data we hold about you.
Right to rectification: The right to correct inaccurate information (you can largely do this from your account settings).
Right to erasure: The right to ask us to delete your data (for example, if you delete your account).
Right to restriction of processing: The right to temporarily "freeze" the use of your data if you dispute its accuracy.
Right to object: The right to object to processing based on our legitimate interest (such as the use of your email for Meta audiences or data sharing with clubs or brands).
Right to withdraw consent: The right to withdraw your consent at any time for processing that depends on it (such as API access by a third party).
Right to data portability: The right to retrieve the data you have provided to us (your statistics) in a structured format (CSV type).
Right to lodge a complaint: If you believe that your rights are not being respected, you have the right to lodge a complaint with your local data protection authority.
- For example: if you reside in the European Union, you can contact the authority in your country (such as the CNIL in France, the AEPD in Spain, etc.).
Additional Rights (e.g., California Residents) Residents of certain territories (such as California) may have additional rights, such as the right to opt-out of the "Sharing" of their information for targeted advertising purposes. Our practices (described in section 7 on advertising) and your right to object are designed to respect these rights.

How to exercise your rights? To exercise any of these rights, please contact us at the email address: help@footbar.com. We will respond within one (1) month. We may ask you for proof of identity if we have reasonable doubt, in order to protect your data.

11. Protection of minors

Protecting minors is a priority for Footbar. In France, the age of digital majority is set at 15 years old.

Our application is designed to be used by players from the age of 8. Therefore, for any user under 15 years old, account creation and acceptance of this privacy policy must be carried out by a parent or legal guardian.

During registration, if the age entered is under 15, the registration process must be completed by the legal guardian. The legal guardian consents, on behalf of the minor, to the collection and processing of their data.

If you are a parent and you discover that your child has created an account in violation of this rule, please contact us immediately.

12. Links to Third-Party Services

Our application may contain links to external services (e.g., social networks) that are not managed by us. Our privacy policy only applies to our application. If you click on a third-party link, we advise you to consult that service's privacy policy.

13. Updates to this Policy and Contact

Updates We may modify this privacy policy to adapt it to changes in our services or new regulations. In the event of substantial changes, we will inform you proactively (e.g., via an in-app notification or by email).

Contact If you have any questions about this policy or wish to exercise your rights, please do not hesitate to contact our team at the following address: help@footbar.com.