Privacy Policy

This Privacy Policy explains how Rushkick ("we", "us", "our") collects, uses, and protects your personal data when you use the Rushkick mobile and web applications and related services (the "Service"). It applies to all users globally and is intended to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA), among others.

1. Who we are

Rushkick is the data controller for the personal data we collect about you. You can reach us at hello@rushkick.com.

2. What we collect

Account data

• Email address and password (passwords are stored as salted hashes, never in plain text)
• Display name and profile photo, if you choose to provide one

Content you submit

• Leagues, teams, players, fixtures, results, rules, and any photos or notes you upload

Technical data

• Device type, operating system, app version, and crash diagnostics
• IP address and approximate location (derived from IP, not GPS)
• Basic usage events (e.g. screens visited) used to improve the product

We do not knowingly collect data from children under 13.

3. Why we use it

• To provide and operate the Service (legal basis: performance of a contract)
• To authenticate you and secure your account (legal basis: legitimate interest in security)
• To diagnose crashes and improve reliability (legal basis: legitimate interest)
• To respond to your support requests (legal basis: legitimate interest)
• To comply with legal obligations (legal basis: legal obligation)

We do not sell your personal data, and we do not use it for behavioural advertising.

4. Sub-processors

We use the following service providers to operate the Service. Each is bound by a data processing agreement and processes data only on our instructions:

• Supabase — authentication, database, and file storage. Hosted in the European Union. See supabase.com/privacy.
• Apple App Store / Google Play — distribution of the mobile app and related crash diagnostics, subject to their respective privacy policies.

If we add or change sub-processors, we will update this policy.

5. Sharing

Personal data is shared only with the sub-processors listed above, with other members of a league you join (limited to your display name, photo, and league activity), or where required by law. We never sell or rent your data.

6. International transfers

Your data is primarily stored in the European Union. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to keep it longer for legal or accounting reasons. League content you contributed may remain visible to other league members in an anonymised form.

8. Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email hello@rushkick.com. We will respond within 30 days.

9. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive fields, and access controls. No system is perfectly secure, but we work hard to keep your data safe and will notify you and the relevant authorities of any breach as required by law.

10. Children

The Service is not directed to children under 13 (or under 16 in some jurisdictions). If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We may update this policy. If we make material changes, we will notify you in the app or by email before the changes take effect.

12. Contact

Questions or requests? Email hello@rushkick.com.