Privacy Policy

Section 1Data controller

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal data under the EU General Data Protection Regulation (GDPR) and applicable local law (including Dutch AVG where relevant).

Section 2Data we collect

2.1 Account and profile

• Email address
• Name (first name, last name, optional display name / nickname)
• Authentication identifiers from email/password, Google Sign-In, and/or Sign in with Apple
• Timestamps for Terms of Service and Privacy Policy acceptance
• Onboarding completion status

2.2 Team and app content

Depending on how your team uses Trofio, this may include:

• Team membership, roles, and permissions
• Club and team details you create or join
• Events, matches, RSVPs, and related notes
• Tasks and assignments
• Fines, payments recorded in-app, and fine rules
• Invite codes associated with teams you administer or join

2.3 Device and notifications

• Push notification device tokens
• Basic device / platform information needed to deliver notifications and keep the app secure
• Diagnostic information when the app fails (if crash reporting is enabled in a future release)

2.4 Usage data

We may process technical logs such as IP address, timestamps, and API request metadata when provided by our hosting and authentication providers, for security, abuse prevention, and reliability.

We do not sell your personal data. We do not use your data for cross-app advertising tracking. Trofio’s App Store privacy manifest declares that tracking is not used.

Section 3Why we process data (legal bases)

Section 4How we share data

We share personal data only with processors and platforms needed to run Trofio:

Team data you contribute (for example RSVPs, fines, or event participation) is visible to other members of that team according to team roles and permissions.

We do not share your personal data with third parties for their own marketing.

Section 5International transfers

Our processors may process data in the EEA, the United Kingdom, the United States, or other countries. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s equivalent transfer mechanism.

Section 6Retention

• Active accounts: we retain account and team-related data while your account exists and as needed to provide the Service.
• Account deletion: when you delete your account in the app, we remove your auth identity, profile, and device tokens. Sole-admin teams you own may be dissolved (including that team’s events, fines, and tasks). On other teams, your membership may be anonymized so team history remains usable for remaining members.
• Backups and logs: residual copies may remain in encrypted backups or security logs for a limited period, then are deleted or overwritten according to our processors’ retention cycles.
• Legal holds: we may retain limited data longer when required by law or to establish, exercise, or defend legal claims.

Section 7Your rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens)

You can update profile details in Account settings, and request deletion via Account → Delete account (see our account deletion page). For other requests, email trofioapp@gmail.com.

Section 8Children

Trofio is intended for team organizers and adult players. We do not knowingly collect personal data from children under 16 (or the minimum age required in your country) without appropriate parental authority. If you believe a child has provided data, contact trofioapp@gmail.com and we will take appropriate steps.

Section 9Security

We use industry-standard measures appropriate to the risk, including encrypted transport (HTTPS/TLS), access controls (including row-level security in the database), and authentication via reputable providers. No method of transmission or storage is 100% secure.

Section 10Changes to this policy

We may update this Privacy Policy from time to time. We will change the “Last updated” date above and, where required, notify you in the app or by other reasonable means. Continued use of the Service after an update constitutes acceptance of the revised policy where permitted by law.

Section 11Contact