HOW WE USE YOUR DATA
Privacy
Policy
This policy explains what data the Ofsy iOS app processes, why it is used and the choices available to you.
1. Data controller and contact
Data controller: Celal Berkay Altunel
Privacy and support: support@ofsy.app
2. Data we process
| Category | Data and purpose |
|---|---|
| Account and age eligibility | Email address, password-verification data and account/session identifiers; plus your date of birth, the record that you are at least 13, the active policy version and the record time. Used to create and protect the account, enforce 13+ product eligibility and wish you a happy birthday. We do not collect identity documents or parent information. |
| Player profile | Mandatory setup collects a shirt name, a shirt number you explicitly choose and your main position. A legacy or optional username, dominant foot, team nickname and profile photo may also be stored when you previously supplied them or when the related feature is available. Used to represent you within your club. |
| Club and match | Club membership and role, match date/time/venue, attendance, squads, draft, score, goals, assists, MVP vote, OP, rating, streaks, badges and standings, used to provide the product. |
| Device preferences | Limited settings such as onboarding and appearance are stored in UserDefaults on your device. Match reminders run locally and depend on iOS notification permission. |
| Safety and support | Report/block records and information you include in support messages, used to respond to requests, prevent abuse and enforce community rules. |
Your profile photo is optional and stored in private file storage. It can be viewed only by you, players who share an active club with you, a club manager reviewing your application, and authorised internal moderators. If either person blocks the other, photo access is removed in both directions. Ofsy does not directly browse your photo library; you make your selection using the iOS system photo picker.
When avatar safety review is required, only the final 512×512 JPEG that you cropped on your device and that has had metadata removed is processed by OpenAI for inappropriate-content review; the original camera or library file is never sent. The result is used only to accept or reject the photo and does not automatically penalise the account. If review is unavailable, the new photo is not uploaded and the existing avatar remains. During controlled TestFlight testing, no photo is sent to OpenAI while this external review is disabled.
3. Sources and legal bases
Data comes from you, match actions by authorised players in your club and performance calculations derived from those actions. Processing needed to operate your account and product is based on performing our service contract; safety, abuse prevention and service integrity rely on legitimate interests; specific choices rely on consent where required by law. If you do not provide mandatory account and profile fields, account setup or club features cannot be completed.
Club and match features show the relevant profile and football information to the players who need it for those features. Technical infrastructure services process data only as needed to operate Ofsy. We do not sell personal data or use advertising SDKs or cross-app or cross-site advertising tracking.
4. Retention and account deletion
Account and active product data are kept while your account is open. You can start deletion from Profile → Settings → Delete account. The flow removes your optional avatar and Auth account, and deletes or disconnects your profile and personal attendance, vote, lineup and rating links. Shared club and match history may remain without attribution to your account to preserve the club record; club ownership may transfer to another active member where needed.
A non-identifying hashed transaction receipt may be retained for no more than 24 hours to safely reconcile network responses during deletion. A photo attached to an open avatar report is preserved until review is complete; moderation evidence is scheduled for deletion 30 days after the report closes and is deleted within 90 days at the latest. We may retain a SHA-256 digest—not the contents—of a removed file to prevent it from being uploaded again. Other support correspondence, reports and safety records are kept only as long as needed to resolve the request, prevent abuse, meet legal obligations or defend rights, then deleted or de-identified.
5. Your choices and rights
You can edit profile details in the app, remove your avatar, change notification permission in iOS Settings and report or block users. To request access, correction, deletion, restriction, objection, portability or other applicable rights, email support@ofsy.app. We may ask for reasonable information to verify your identity and request. Your right to complain to the competent data-protection authority remains available where applicable.
6. Security, children and automated outputs
We use measures such as encrypted transport, access control and row-level authorisation, but no system can guarantee absolute security. Ofsy is for people aged 13 and over. Before account creation we ask for your date of birth; whether you are 13 or over is worked out on your device, and the date is kept on your account. We do not request identity documents or parent information. If you are under 13, no account is created and the date is never sent anywhere. Ratings, OP, badges and standings are entertainment and club-organisation outputs derived from football activity; they are not automated decisions that produce legal or similarly significant effects.
7. Changes
If this policy changes, we will publish the updated text and effective date here and provide further notice where legally required. Visit Support if you have questions.