Privacy Policy

Last updated: October 8, 2026 · Version 2.0

Footiiz is a football quiz game. This policy explains what data the app processes, why, who it is shared with, and how you stay in control. If this translation and the French version differ, the French version prevails.

In short: you need an account to play, so your progress is saved and you can play with others (leaderboard, friends, duels). We never sell your data. Your username, avatar and weekly score are visible to other players; your email address never is. Ads are only personalised if you agree, and you can delete your account from inside the app at any time.

1. Data controller

Hivan DAS, private individual
24 rue Henri Duvernois, 91270 Vigneux-sur-Seine, France
Contact: privacy@footiiz.app

2. Data we process

Your account and progress

Data	Purpose	Legal basis
Email address, password (stored hashed, never in plain text) or Google / Apple sign-in identifier	Create your account and sign you back in	Performance of contract
Username, chosen avatar, avatar frame	Identify you in the game and to other players	Performance of contract
Progress: XP, level, coins, day streak, badges, game statistics, collected cards, your club's name, crest and line-up, progress in game modes	Run the game and restore your progress on another device	Performance of contract
Photo picked from your gallery as an avatar	Personalise your profile. The image stays on your phone: it is never uploaded to our servers or shown to other players	Consent (system permission)

Playing with others

Data	Purpose	Legal basis
Username, avatar, frame, level and XP earned this week	Public weekly leaderboard and Top 10 rewards	Performance of contract
Friend code, friends list, friend requests sent and received	Add friends by username or code, friends leaderboard	Performance of contract
Answers and score during an online duel, duel result	Match two players in real time and decide the winner	Performance of contract
Your result in the daily TenaBall challenge	Show anonymous statistics (number of players, average)	Performance of contract

Notifications, ads, subscription and reliability

Data	Purpose	Legal basis
Device push token and app language	Let you know when a friend adds or challenges you	Consent (system permission, can be turned off)
Daily reminder and end-of-trial reminder	Scheduled on your phone, nothing is sent	Consent (can be turned off)
Advertising identifier (IDFA on iOS, AAID on Android) and ad delivery data	Show the ads that fund the free version	Consent, asked before the first ad, can be withdrawn
Footiiz Pro subscription status (active, trial, end date)	Unlock Pro benefits. Payment is handled by Apple or Google: we never see your payment details	Performance of contract
Crash reports (device model, OS and app version, technical stack trace) and performance measurements on about 10% of sessions	Fix crashes and slow screens	Legitimate interest (service reliability)

What Footiiz does not do

No data is sold, rented or passed on to data brokers.
No access to your contacts, location, microphone or calendar.
If you decline ad personalisation, no advertising identifier is read. Declining never removes any game feature.
Crash reports contain no email, username, IP address or screenshot.
Sharing a result poster goes through your phone's share menu: we don't know who you send it to.

3. What other players can see

Your username, avatar (except an imported photo), frame, level and weekly XP appear on the leaderboard and in friend searches. During a duel, your opponent sees your username and score. Your email address and sign-in identifiers are never shown.

4. Processors

We use the following providers solely to run the service. They may not use your data for their own purposes.

Supabase: authentication, database and real-time duels. Servers in the European Union. Supabase policy.
Expo (650 Industries), Apple and Google Firebase: delivering push notifications to your phone. Expo policy.
Sentry: crash reports and performance measurements, hosted in the European Union. A random per-install identifier, not linked to your account, is used to count affected devices. Sentry policy.
Google AdMob: ad delivery (see section 5).
Apple and Google: Sign in with Apple or Google if you choose it, and subscription payment through the App Store or Google Play. These companies apply their own policies.

5. Advertising

The free version of Footiiz shows ads provided by Google AdMob, mostly optional videos you choose to watch in exchange for an in-game reward. Footiiz Pro subscribers see none.

Before the first ad, a screen asks whether ads may be personalised:

If you agree, Google may use your device's advertising identifier to choose ads related to your interests. On iOS, the system also asks for tracking permission, which you can still refuse.
If you decline, ads are chosen without any data about you.

You can change your mind at any time: Profile → Settings → Legal → Ad preferences. For advertising data, Google acts as an independent controller: see Google's policy.

6. Transfers outside the European Union

Our database and crash reports are hosted in the European Union. Some providers (Expo, Google, Apple) may process data in the United States; these transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Retention

Account and progress: as long as the account exists. When you delete your account they are erased immediately; technical backups are purged within 30 days.
Weekly leaderboard: a week's scores are used to compute rewards, then erased along with the account.
Push token: deleted when you sign out or delete your account.
Crash reports: 90 days at most.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.

Delete your account and data

Directly in the app, without contacting us: Profile → Settings → Manage my account → Delete account. Deletion is immediate and permanent: account, progress, cards, club, friends and coins are erased. If you have an active subscription, also cancel it in your store settings: deleting your account does not stop billing.

For any other request, email privacy@footiiz.app. We reply within one month. You may also lodge a complaint with your local data protection authority (in France, the CNIL).

9. Security

Traffic with our servers is encrypted (HTTPS). Passwords are never stored in plain text. Database access is restricted by row-level rules: each player can only read and change their own private data.

10. Children

Footiiz is for people aged 13 and over. Where local law sets a higher age for consenting to personalised ads (15 in France, up to 16 elsewhere in the EU), a parent's agreement is needed below that age. We do not knowingly collect data from children under 13: if you think your child has given us data, email us and we will delete it.

11. Third-party content

Footiiz displays factual information about football players and clubs (names, statistics, photographs, logos) that remains the property of its owners. Footiiz is not affiliated with any club, league or federation. For any content request: contact@footiiz.app.

12. Changes

If we make a significant change, we will tell you in the app before it takes effect. The date at the top shows the latest update.