Privacy Policy
Last updated: 13 June 2026
This Privacy Policy explains how Futsalaki Ltd collects, uses, and protects your personal data when you use the Futsalaki mobile app and website. We are committed to processing your data in accordance with the General Data Protection Regulation (GDPR) and the applicable laws of the Republic of Cyprus.
1. Identity and Contact Details of the Data Controller
Futsalaki Ltd ("Futsalaki", "we", "us", "our") is the Data Controller responsible for your personal data. Registered address: Aitolon 18, Imperial Mansions, Flat 202, Nicosia 1101, Cyprus Contact email: nicolas@futsalaki.com Website: https://futsalaki.com
2. What Data We Collect and Why
We only collect personal data that is necessary for the operation of our platform. The table below sets out the categories of data we process, the purpose, and the legal basis under the GDPR. Display Name — Used to identify you within the app and to other players. Legal basis: Article 6(1)(b) — performance of a contract. Email Address — Used for account authentication, transactional emails, and account recovery. Legal basis: Article 6(1)(b) — performance of a contract. Phone Number — Used for account verification. Legal basis: Article 6(1)(b) — performance of a contract. City — Used to show you localised content and available venues. Legal basis: Article 6(1)(b) — performance of a contract. Profile Photo — Optionally uploaded by you to personalise your account. Legal basis: Article 6(1)(a) — consent. Push Notification Token — Stored to send you real-time in-app alerts about match activity, score confirmations, and disputes. Legal basis: Article 6(1)(a) — consent (you may withdraw at any time via device settings). Match Scores and Dispute History — Records of reported match scores and any disputes raised between teams. Legal basis: Article 6(1)(b) — performance of a contract. Payment Data — Processed securely by Stripe on our behalf. We do not store card details on our systems. Legal basis: Article 6(1)(b) — performance of a contract.
3. Walk-in Customer Data (Venue-Collected)
When a sports venue uses the Futsalaki platform to record a walk-in booking (i.e. a customer who appears in person rather than booking through the app), the venue may enter that customer's name and phone number into the system. In this context: • The venue acts as the Data Controller for the walk-in customer's personal data. • Futsalaki acts as a Data Processor on behalf of the venue. Walk-in customers who have not registered on the Futsalaki platform should contact the venue directly to exercise their data protection rights. Futsalaki will cooperate with any such requests received through the venue.
4. Marketing Communications
With your explicit consent, we may send you email communications about new features, promotions, or platform updates. You may withdraw your consent to marketing communications at any time by clicking "unsubscribe" in any email we send, or by contacting us at nicolas@futsalaki.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Service Providers (Sub-Processors)
We share your personal data with the following trusted service providers solely for the purpose of delivering the Futsalaki platform. All sub-processors are bound by data processing agreements and comply with applicable data protection law. Supabase Inc. — Database hosting and backend infrastructure. Servers located within the European Union. Purpose: storing user accounts, match data, and notifications. Privacy policy: https://supabase.com/privacy Vercel Inc. — Web application hosting. Purpose: hosting the Futsalaki web dashboard. Privacy policy: https://vercel.com/legal/privacy-policy Stripe Inc. — Payment processing. Purpose: processing match booking payments. Stripe does not give Futsalaki access to full card details. Privacy policy: https://stripe.com/privacy Expo (Expo Go / EAS) — Mobile push notification infrastructure. Purpose: delivering push notifications to iOS and Android devices. Privacy policy: https://expo.dev/privacy
6. International Data Transfers
Some of our sub-processors are based outside the European Economic Area (EEA), including the United States. Where personal data is transferred to countries not recognised by the European Commission as providing an adequate level of protection, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Article 46(2)(c) GDPR. You may request a copy of the applicable transfer mechanisms by contacting us at nicolas@futsalaki.com.
7. Data Retention
We retain your personal data for as long as your account remains active and for a period of five (5) years thereafter, unless a longer retention period is required or permitted by law (for example, for accounting, tax, or legal compliance purposes). Match score history and dispute records are retained for the same period to support the integrity of the platform's statistical records. You may request deletion of your account and personal data at any time (see Section 8 — Your Rights).
8. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights: Right of Access (Article 15) — You may request a copy of the personal data we hold about you. Right to Rectification (Article 16) — You may request correction of inaccurate or incomplete personal data. Right to Erasure (Article 17) — You may request deletion of your personal data, subject to legal obligations that require us to retain certain records. Right to Restriction of Processing (Article 18) — You may request that we limit how we use your data in certain circumstances. Right to Data Portability (Article 20) — You may request your data in a structured, machine-readable format. Right to Object (Article 21) — You may object to processing based on legitimate interests. Right to Withdraw Consent (Article 7(3)) — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at nicolas@futsalaki.com. We will respond within 30 days. You also have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus: http://www.dataprotection.gov.cy
9. Cookies
The Futsalaki web dashboard (https://futsalaki.com) uses essential session cookies solely to maintain your authenticated session. These cookies are necessary for the website to function and cannot be disabled. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.
10. Children's Privacy
The Futsalaki platform is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at nicolas@futsalaki.com and we will delete it promptly.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encrypted data transmission (TLS), access controls, and regular security reviews of our infrastructure. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you via the app or by email. The date at the top of this page indicates when the policy was last revised. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.
13. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact: Futsalaki Ltd Aitolon 18, Imperial Mansions, Flat 202 Nicosia 1101, Cyprus Email: nicolas@futsalaki.com If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus: Website: http://www.dataprotection.gov.cy Address: 1 Iasonos Street, 1082 Nicosia, Cyprus
Futsalaki Ltd · Aitolon 18, Imperial Mansions, Flat 202, Nicosia 1101, Cyprus · nicolas@futsalaki.com