Privacy Policy for [APP_NAME]

Last updated: [DATE]

This Privacy Policy describes how [COMPANY_NAME] ("we", "us", or "our") collects, uses, discloses, and safeguards information when you use the SportBooster mobile application and related services (the "Services"). If you do not agree with the terms of this Privacy Policy, please do not access the Services.

1. Who We Are

• Controller: [COMPANY_NAME]
• Address: [COMPANY_ADDRESS]
• Contact: [PRIVACY_EMAIL]
• Website: [WEBSITE_URL]

2. What We Collect

We only collect data necessary to provide and improve the Services.

• Account & Profile
  • Email address, name, club membership identifiers
  • Authentication identifiers (user ID)
• User‑Generated Content
  • Photos, images, and documents uploaded by users (e.g., player avatars, training photos, certificates)
• Usage & Diagnostics
  • Server logs, error logs, and basic performance data
• Payments (if applicable)
  • Processed by Stripe; we do not store full payment card details

We do not knowingly collect sensitive categories (e.g., health, precise location) unless explicitly enabled and disclosed.

3. How We Use Data

• Provide and operate the Services (authentication, profiles, club membership, media storage)
• Maintain safety, security, and fraud prevention
• Customer support and service communications
• Service analytics (aggregate and non‑identifying)
• Legal compliance and enforcement

Legal bases under GDPR (where applicable): performance of a contract, legitimate interests, consent (where required), and compliance with legal obligations.

4. Data Sharing and Processors

We do not sell personal data. We share data only with trusted processors to run the Services:

• Supabase (authentication and database)
• Cloudflare R2 (media storage)
• Stripe (payments)
• Redis/Upstash or equivalent (caching)
• Hosting/CDN providers (e.g., Vercel or equivalent)

These processors act on our instructions and are bound by contractual safeguards.

5. International Transfers

Where data is transferred across borders, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) as required by law.

6. Retention

We retain personal data only for as long as needed to fulfill the purposes outlined above, comply with laws, resolve disputes, and enforce agreements. User‑generated content is retained until deleted by the user or the account is deleted.

7. Your Rights

Subject to your local laws, you may have rights to access, rectify, erase, restrict, object, or port your data. You also have the right to withdraw consent where processing is based on consent. To exercise your rights, contact us at [PRIVACY_EMAIL].

8. Children’s Privacy

Our Services are intended for general audiences. If a feature targets minors, guardians or club administrators control and moderate uploads. If we learn we collected personal data from a child without appropriate consent, we will delete it.

9. Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit and access controls. No method of transmission or storage is 100% secure.

10. Account & Data Deletion

You can request deletion of your account and associated personal data via in‑app controls (see Data Deletion Policy) or by contacting [PRIVACY_EMAIL].

11. Changes

We may update this Policy from time to time. The latest version will be posted at https://mysportbooster.com/legal/privacy. Material changes will be notified in the app or by email.

12. Contact

Questions or requests: [PRIVACY_EMAIL]

Service‑specific details

• Media: user uploads (e.g., player avatars, training photos) stored in Cloudflare R2 under keys associated to your account/club.
• Authentication: Supabase manages authentication identifiers and session tokens.
• Payments: If you purchase subscriptions or licenses, Stripe processes payment data; we store references and non‑sensitive metadata only.