Privacy policy

Who we are

Effective 1 October 2026. This policy covers ClubPark on iOS and Android, its service and these support pages. ClubPark is operated by SDL MEDIA LIMITED, the controller responsible for the personal information described here. Contact clubparkapp@gmail.com for privacy questions or requests.

Account and profile information

When you use account features, we create an account identifier, including for a guest account. We store the profile names and username you provide, your surname-visibility choice, supported club, authentication sessions and connected Apple or Google account identifiers. If you choose a profile photo, we upload and store a copy. Google sign-in can supply a profile picture, which we use if your ClubPark account has no photo. You can replace or remove your photo in Account settings.

Optional Apple or Google sign-in supplies a signed identity token to verify your account. The sign-in provider may include your email address or profile details in its response. Our account database uses the provider identifier rather than a stored email address to link your account. We do not receive your Apple or Google password. Apple refresh tokens are encrypted for connection management and revocation.

Your device stores app preferences, cached football information, local profile choices, pending edits and account credentials. Credentials are stored using the iOS Keychain on iPhone. On Android, credentials are encrypted using keys protected by the Android Keystore. Optional country and season-ticket choices are held on your device.

Predictions, friends and matchdays

We store predictions, results and points, friend requests and connections, followed matches, and the ground visits and Going choices you choose to sync. These are places and plans you record yourself; they are not a record of your phone’s GPS movements. We also store blocks and reports submitted through the app.

If you enable notifications, we store device notification addresses, delivery information and your notification preferences. On iPhone, Apple Push Notification service delivers alerts and Live Activities use their own notification addresses. On Android, Firebase Cloud Messaging uses a Firebase installation identifier to deliver alerts and ongoing notifications for the matches you follow. The Android app also reports whether notifications are allowed, notification-channel settings, whether Live Updates can be promoted, and whether background operation is restricted, so the service can avoid sending notifications that cannot be shown.

When you tap Check in at a match, the app asks your device for a fresh precise location and sends the coordinates, accuracy and capture time to our service to check that you are near the ground. This is a one-time request while you use the app, not background location tracking. The service keeps the account, ground, fixture and successful check-in time, but does not retain those raw device coordinates. The app does not continuously track your movements.

On iPhone, if you set a home postcode for ground-trip distances, the postcode and calculated routes are stored on your device for that account. Apple Maps processes the postcode and route endpoints to calculate directions. Deleting your account also removes its saved postcode and routes from this device.

If you connect an FPL team, we store the team identifier and name against your ClubPark account and request its published Fantasy Premier League information. ClubPark does not ask for your FPL password. Disconnecting or deleting your account removes that connection.

Support and technical information

If you email us, we receive your email address, message and any attachments you provide. Reports may contain information about you and another member. We use Gmail to receive and respond to these messages.

Our hosting infrastructure processes connection and diagnostic information, including IP addresses, request paths, device or browser information and technical logs, to deliver and protect the service. While ClubPark is open, it updates the last-active time for your account; we use this to measure aggregate service activity. These public pages do not set cookies, load analytics scripts or use advertising trackers. ClubPark does not sell your personal information or use it for targeted advertising.

Why we use information

We use account, prediction, notification and social information to provide the features you request. Where UK or EU data-protection law applies, our basis is performance of our contract with you, or steps you ask us to take before that contract.

Security, essential service operation, abuse prevention, troubleshooting and handling reports are based on our legitimate interests in running a reliable and safe service. We consider those interests alongside your rights. We process information when necessary to meet legal obligations, including responding to applicable privacy-rights requests.

You choose whether to use optional sign-in, social and notification features. Your device permissions control access to relevant features; permission is not a blanket consent to other uses of your information. You can change notification and location permissions in your device settings.

Who can see your information

Your display name, username, profile photo, supported club and game results can appear to other members in profiles, friend discovery and leaderboards. Your surname is hidden from other members unless you choose to show it. Accepted friends can see the visits, Going choices and stadium stamps you share, including the ground, match and check-in time. A recent stamp can therefore show friends which stadium you attended.

The service operator and providers supporting the relevant feature process information needed to operate it. Support messages and reports are not posted publicly. We may disclose information where legally required, to respond to a lawful request or to protect people and the service. In-app reports and captured public profile details are available to the service operator for investigation.

Providers and external services

Railway hosts our API and database. Apple provides iPhone platform services, notifications, maps and optional sign-in. On Android, Google sign-in uses Google Play services and Sign in with Apple opens Apple’s web sign-in page. Google also provides Firebase Cloud Messaging for optional Android notifications and Gmail for support. Their handling of information for their own services is described in their privacy policies.

When you choose Google sign-in, Google may process contact information, including name, email address and phone number, account and contact identifiers, device identifiers, approximate location inferred from your IP address, usage and technical information to provide sign-in, prevent fraud and analyse its service. ClubPark does not request your phone’s address book.

For Android notifications, Firebase processes the installation identifier, app version and technical information such as operating-system version, device model and SDK versions to deliver and maintain the service. ClubPark enables notification registration after notifications are allowed. ClubPark does not include Firebase Analytics or enable message-delivery export to BigQuery.

Maps inside the iPhone app use Apple Maps. Maps inside the Android app use MapLibre with OpenFreeMap tiles based on OpenStreetMap data. Map requests identify the area displayed on screen, and the map provider receives connection information such as your IP address. ClubPark does not send your device’s GPS position to OpenFreeMap. Directions open in Apple Maps on iPhone or Google Maps on Android; the destination is passed to that app or website, where its own permissions and privacy policy apply.

Weather requests go from your device to Open-Meteo with the stadium coordinates and relevant date, not your device’s GPS location. Open-Meteo also receives connection information such as your IP address. External links open under the relevant provider’s policy. Using the system calendar editor lets you choose whether to save an event; ClubPark does not upload your calendar contents to its server.

Provider privacy information: https://railway.com/legal/privacy, https://www.apple.com/legal/privacy/, https://policies.google.com/privacy, https://firebase.google.com/support/privacy, https://openfreemap.org/privacy/ and https://open-meteo.com/en/terms.

Where information is processed

Our production API and database are hosted on Railway in the Netherlands. Railway and its subprocessors may also process service, security and support information in other countries, including the United States. Apple, Google and other services you choose operate internationally. Railway’s data-processing terms provide for applicable international-transfer safeguards, including standard contractual clauses and the UK addendum, or the Data Privacy Framework where applicable. See https://railway.com/legal/dpa.

You can contact us for information about the safeguards relevant to your information. Provider privacy information is linked above.

How long information is kept

Account records, profile photos, predictions and shared activity are kept while your account exists. A profile photo is removed from the active service when you replace or remove it, or delete your account. You can delete your account in Account settings, including a guest account, or contact clubparkapp@gmail.com for help. Signing out or uninstalling does not remove server records.

Infrastructure backups expire within 27 days. Information removed from the live database can remain in those restricted recovery copies until they expire. Deletion records must be reapplied before restored data is served.

Railway makes operational logs available to us for 30 days on our current plan. Railway’s own service and security records are governed by its policies; the log-viewing window is not a promise that every provider record is erased at that point.

Support messages and reports are kept for as long as needed to resolve the issue, address an appeal, comply with a legal obligation or establish or defend a legal claim. The period depends on the issue, its resolution and any continuing legal need. You may ask us about retention or request deletion. Local app data follows your device and operating-system storage controls.

Closed in-app moderation reports are removed after 90 days. A deletion retry receipt containing a random request identifier and a one-way credential hash is removed after seven days. An encrypted Apple revocation token is retained only until Apple accepts revocation, then removed.

A restricted deletion record containing an account identifier and deletion date is retained for 35 days to prevent a backup restoration from restoring a deleted account. Apple notification retry identifiers are removed after eight days.

Your choices and rights

You can edit your profile, choose whether to show your surname, remove friends and change notification permissions. Contact clubparkapp@gmail.com to request access, correction, erasure, restriction or portability of your information, or to object to processing based on legitimate interests. These rights depend on the applicable law. We may ask for information needed to verify your identity.

Providing information is optional, but account and social features need the information used to operate them. We do not use your information to make solely automated decisions that have legal or similarly significant effects on you.

You can complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or your local data-protection authority.

Children and policy changes

ClubPark is not directed at children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate.

We will update the effective date when this policy changes and provide additional notice for material changes where required.