Privacy Policy
Last updated: September 30, 2026
Who we are
Squadra Academy is the controller for your personal data. For anything related to your personal data, reach us at privacy@squadraacademy.app.
What data we collect
We only collect what the app needs to function: account details (name, email, phone if you choose to add one); player-profile details (name, position, jersey number, date of birth if provided); training and match responses (going/not going, comments); player photos, only with consent (the player's own if they're an adult, or their guardian's if they're a minor); push device tokens, if you turn on notifications; and the content of any message you send through the feedback form. We don't ask for national ID numbers, home addresses, or medical data.
Why we process it, and on what legal basis
Member details, the roster, the schedule, and attendance responses are processed on the basis of the team's legitimate interest in organizing and running itself. A player's date of birth is optional and used only for age categories and the minors policy. Players' photos are processed only with explicit consent — the player's own if they're an adult, or their guardian's if they're a minor — revocable at any time. Push tokens are processed with your consent. Accounts for ages 15-17 are created with the young person's own consent, as permitted under Greek Law 4624/2019. Accepting the Terms of Use and Privacy Policy is recorded together with the version of the text you accepted.
Minors and the guardian's role
A minor player's details are entered by team staff under the team's legitimate interest in organizing itself. A linked guardian has full visibility and control: they see the child's information, respond on the child's behalf, manage photo consent, and can request deletion/anonymization of the child's data from the "My Children" screen. No accounts are created for children under 15.
Where your data is stored
All data is hosted in the European Union (Frankfurt, Germany) via Supabase. The app itself runs on Vercel (fra1 region); static assets may be served through a global CDN, none of it personal data. Emails are sent via Resend. Errors are logged via Sentry (EU region), with sensitive fields scrubbed and no session replay. Every provider is bound by a Data Processing Agreement (DPA).
How long we keep your data
Members and players who leave a team: their data is anonymized 12 months after departure, unless deletion is requested sooner. Expired or cancelled invitations: deleted after 90 days. In-app notifications: cleared after 6 months. Audit logs: kept for 24 months. Database backups: kept on a rolling 30-day basis.
Your rights, and how to exercise them
You have the right to access, correct, delete, port, and object to the processing of your data. In the app: download a copy of your data from Settings -> "Download my data"; delete your account from Settings -> "Delete account"; correct your own details from your profile, or your child's details as their guardian. For a child under guardianship, the guardian exercises these rights from the "My Children" screen or by contacting team staff. You also have the right to complain to the Hellenic Data Protection Authority.
Players' photos
A photo may only be uploaded for a player once explicit consent exists, either in the app or in writing: the player's own if they're an adult, or their guardian's if they're a minor. Consent can be revoked at any time; revoking it immediately deletes the photo file. A guardian can revoke it from the "My Children" screen; in every case (including for an adult player, or where consent was given in writing) you can ask for it to be revoked by contacting the team's staff or privacy@squadraacademy.app.
Cookies
We use only strictly necessary session cookies, to keep you signed in. We don't use analytics, advertising, or tracking cookies, so no cookie-consent banner is needed.
Security
We apply security measures such as encrypted connections (HTTPS), row-level access control at the database layer so each user only ever sees what they're entitled to, and rate limiting on sensitive actions. No system is completely unbreakable; if a security incident affecting your data ever occurs, you'll be notified as required by law.
Changes to this policy
We may update this Privacy Policy from time to time. Each version carries a date at the top of the page. If a change is material, you'll be asked to accept the new version the next time you sign in.
Contact and complaints
For anything about your personal data, reach us at privacy@squadraacademy.app. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).