Who we are
Effective 15 September 2026. This policy covers the Club Park app, its service and these support pages. Club Park is operated by Stefan Lenga, the controller responsible for the personal information described here. Contact clubparkapp@gmail.com for privacy questions or requests.
Account and profile information
When you use account features, we create an account identifier, including for a guest account. We store the profile names and username you provide, your surname-visibility choice, supported club, authentication sessions and connected Apple or Google account identifiers.
Optional Apple or Google sign-in supplies a signed identity token to verify your account. The sign-in provider may include your email address or profile details in its response. Our account database uses the provider identifier rather than a stored email address to link your account. We do not receive your Apple or Google password. Apple refresh tokens are encrypted for connection management and revocation.
Your device stores app preferences, cached football information, local profile choices, pending edits and account credentials. Credentials are stored using the iOS Keychain. Optional country and season-ticket choices are held on your device.
Predictions, friends and matchdays
We store predictions, results and points, friend requests and connections, followed matches, and the ground visits and Going choices you choose to sync. These are places and plans you record yourself; they are not a record of your phone’s GPS movements. We also store blocks and reports submitted through the app.
If you enable notifications, we store device notification addresses, delivery information and your notification preferences. Live Activities use their own notification addresses and selected matches.
When you choose to check in at a match, the app asks iOS for a fresh precise location and sends the coordinates, accuracy and capture time to our service to check that you are near the ground. The service keeps the account, ground, fixture and successful check-in time, but does not retain those raw device coordinates. The app does not continuously track your movements.
If you set a home postcode for ground-trip distances, the postcode and calculated routes are stored on your device for that account. Apple Maps processes the postcode and route endpoints to calculate directions. Deleting your account also removes its saved postcode and routes from this device.
If you connect an FPL team, we store the team identifier and name against your Club Park account and request its published Fantasy Premier League information. Club Park does not ask for your FPL password. Disconnecting or deleting your account removes that connection.
Support and technical information
If you email us, we receive your email address, message and any attachments you provide. Reports may contain information about you and another member. We use Gmail to receive and respond to these messages.
Our hosting infrastructure processes connection and diagnostic information, including IP addresses, request paths, device or browser information and technical logs, to deliver and protect the service. These public pages do not set cookies, load analytics scripts or use advertising trackers. Club Park does not sell your personal information or use it for targeted advertising.
Why we use information
We use account, prediction, notification and social information to provide the features you request. Where UK or EU data-protection law applies, our basis is performance of our contract with you, or steps you ask us to take before that contract.
Security, essential service operation, abuse prevention, troubleshooting and handling reports are based on our legitimate interests in running a reliable and safe service. We consider those interests alongside your rights. We process information when necessary to meet legal obligations, including responding to applicable privacy-rights requests.
You choose whether to use optional sign-in, social and notification features. iOS permissions control access to relevant device features; permission is not a blanket consent to other uses of your information. You can turn off notifications in iOS Settings.
Who can see your information
Your display name, username, supported club and prediction results can appear to other members in profiles, friend discovery and leaderboards. Your surname is hidden from other members unless you choose to show it. Accepted friends can see the visits and Going choices you share.
The service operator and providers supporting the relevant feature process information needed to operate it. Support messages and reports are not posted publicly. We may disclose information where legally required, to respond to a lawful request or to protect people and the service. In-app reports and captured public profile details are available to the service operator for investigation.
Providers and external services
Railway hosts our API and database. Apple provides platform services, notifications, maps and optional sign-in. Google provides optional sign-in and Gmail for support. Their handling of information for their own services is described in their privacy policies.
When you choose Google sign-in, Google may process contact information, including name, email address and phone number, account and contact identifiers, device identifiers, approximate location inferred from your IP address, usage and technical information to provide sign-in, prevent fraud and analyse its service. Club Park does not request your phone’s address book.
Weather requests go from your device to Open-Meteo with the stadium coordinates and relevant date, not your device’s GPS location. Open-Meteo also receives connection information such as your IP address. Apple Maps, directions and links you open may process information under the relevant provider’s policy. Using the system calendar editor lets you choose whether to save an event; Club Park does not upload your calendar contents to its server.
Provider privacy information: https://railway.com/legal/privacy, https://www.apple.com/legal/privacy/, https://policies.google.com/privacy and https://open-meteo.com/en/terms.
Where information is processed
Our production API and database are hosted on Railway in the Netherlands. Railway and its subprocessors may also process service, security and support information in other countries, including the United States. Apple, Google and other services you choose operate internationally. Railway’s data-processing terms provide for applicable international-transfer safeguards, including standard contractual clauses and the UK addendum, or the Data Privacy Framework where applicable. See https://railway.com/legal/dpa.
You can contact us for information about the safeguards relevant to your information. Provider privacy information is linked above.
How long information is kept
Account records, predictions and shared activity are kept while your account exists. You can delete your account in Account settings, including a guest account, or contact clubparkapp@gmail.com for help. Signing out or uninstalling does not remove server records.
Infrastructure backups expire within 27 days. Information removed from the live database can remain in those restricted recovery copies until they expire. Deletion records must be reapplied before restored data is served.
Railway makes operational logs available to us for 30 days on our current plan. Railway’s own service and security records are governed by its policies; the log-viewing window is not a promise that every provider record is erased at that point.
Support messages and reports are kept for as long as needed to resolve the issue, address an appeal, comply with a legal obligation or establish or defend a legal claim. The period depends on the issue, its resolution and any continuing legal need. You may ask us about retention or request deletion. Local app data follows your device and iOS storage controls.
Closed in-app moderation reports are removed after 90 days. A deletion retry receipt containing a random request identifier and a one-way credential hash is removed after seven days. An encrypted Apple revocation token is retained only until Apple accepts revocation, then removed.
A restricted deletion record containing an account identifier and deletion date is retained for 35 days to prevent a backup restoration from restoring a deleted account. Apple notification retry identifiers are removed after eight days.
Your choices and rights
You can edit your profile, choose whether to show your surname, remove friends and change notification permissions. Contact clubparkapp@gmail.com to request access, correction, erasure, restriction or portability of your information, or to object to processing based on legitimate interests. These rights depend on the applicable law. We may ask for information needed to verify your identity.
Providing information is optional, but account and social features need the information used to operate them. We do not use your information to make solely automated decisions that have legal or similarly significant effects on you.
You can complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or your local data-protection authority.
Children and policy changes
Club Park is not directed at children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate.
We will update the effective date when this policy changes and provide additional notice for material changes where required.
Questions? Contact Club Park.