Privacy policy

The developer and data controller is Shygo.Dev (Rasheed Bou Hamdan). Contact: info@matchday-tracker.com

What we collect

Account and identity. Sign-in is handled by Clerk, our authentication provider. When you sign in with Google, Apple, or an email code, we receive and store your display name, your email address, and your profile picture URL. You may optionally add your nationality and your date of birth. When you give a date of birth we store it, and the groups you play in see only your age, never the date.

Your football record. The matches you are added to, which side you played on, goals and assists credited to you, appearances, awards, the rating out of 10 each match works out for you, and whether you were man of the match. This is the point of the app.

Fitness data, only if you use the watch app. If you start a session on your watch, on a Galaxy Watch or an Apple Watch, Matchday records heart rate, step count, calories burned, distance, and exercise duration for that session, and attaches the summary to that match.

Precise location, only during a Galaxy Watch session. The Galaxy Watch app requests location access so it can measure distance and speed while you play. Location is used only while a session is running. We do not track your location in the background and we do not store a location history. On the Apple Watch, the workout measures distance itself, and Matchday never receives your location.

Notifications. If you allow notifications, we store a device push token so we can tell you about your next game or a live score.

How you use the app. So we can see where people get stuck and fix it, the phone app, on Android and iPhone, sends usage records to PostHog, our analytics provider. They cover that the app was opened, which screen you are on, and the things you do in it: joining and creating a group, claiming a player, setting up and running a match, logging goals, invitations sent and answered, sharing a recap, opening a spectator link, your answer to the notification permission prompt, and whether an update prompt appeared and was tapped. Each of these carries ids, counts and yes/no flags, and nothing else. If the app crashes, or hits an error it handles quietly, the crash report and the error stack trace go the same way, under the same "Share usage data" switch. Alongside all of this we receive your device model, Android or iOS version, app version, language, an identifier generated by the app for this install, and your IP address, from which an approximate location (country and city) is derived. We do not store a precise location from this, and we do not use an advertising ID.

The records say that a goal was logged, never who scored it; that a group was joined, never with which code. Once you sign in they are linked to your account by its id, display name and email address, so we can tell one person using the app three times from three people using it once, and help you when something goes wrong for you. Deleting your account removes them from PostHog.

The watch apps, on Wear OS and Apple Watch, carry no analytics provider. When you are signed in and "Share usage data" is on, they send a few usage records through the Matchday server, which passes them to PostHog under your account: which watch screen you opened and for how long, that a goal was logged and whether it waited for a connection, that the watch tile was shown, how signing in went, and crash reports. Turning "Share usage data" off stops them and drops any still waiting on the watch.

How you use this website. matchday-tracker.com sends visit records to PostHog too, so we can see which parts of the site people use. They cover the pages you open, where you came from, how far you scroll, what you click, and what you try in the demo on the home page. They never include a join code or a spectator link. By default the site sets no cookie and stores no identifier: a visit is counted with a hash that changes every day and cannot be traced back to you, and no location is derived from it. If you choose Accept on the cookie notice, the site stores an identifier in your browser so it can recognise you on a later visit, and your IP address is used to derive an approximate location (country and city). The site does not record your screen. Change your cookie choice.

What we do not do

• We show no adverts, and we include no advertising SDKs.
• We do not use analytics to profile you, target you, or build an advertising audience.
• We do not read the contents of what you type, and we do not record your screen.
• We do not sell your data, and we do not share it for advertising.
• We do not collect contacts, messages, photos, files, or your browsing activity outside the app and this website.

Who else sees it

• Other members of your group. Your display name, picture, and football record are visible to people in the groups you join, and so is the fitness summary of a match you track with a watch, including your heart rate. That is how a shared record works.
• Spectators. If an organiser shares a live match link, anyone with that link can watch the score and see player names for that match, without an account. Spectators never see fitness data.
• Clerk, our authentication provider, processes your sign-in and identity data on our behalf.
• Google Firebase Cloud Messaging delivers push notifications.
• PostHog processes the usage records described above, on our behalf, on its European servers.
• We disclose data otherwise only where the law requires it.

Health Connect and Apple Health

On the phone, Matchday can write a finished match's exercise, steps, calories, and distance into Android's Health Connect, so your game shows up alongside the rest of your activity. This only happens if you grant Health Connect permission, and we write to it rather than read from it. You can withdraw that permission at any time in Health Connect.

On the Apple Watch, Matchday asks Apple Health for your heart rate, steps, distance, and active calories, and reads them only for a match you are tracking. It saves that match as a football workout in Apple Health. This only happens if you allow it, and you can withdraw access at any time in the Health app on your iPhone. Data from Apple Health is used to show your match and is never used for advertising or sent to our analytics provider.

Where it is stored

Data is held in Microsoft Azure in West Europe. It is sent over HTTPS.

How long we keep it

We keep your account data until you delete your account. Deleting your account scrubs your personal details: your display name becomes "Deleted account", and your email and picture are removed. Match history itself is kept, because it belongs to the group rather than to one person, and removing it would rewrite other people's records.

How to delete your account, step by step.

Your choices

• See or correct your data: in the app, under Settings.
• Delete your account: in the app, under Settings. This also asks Clerk to delete your identity. Full instructions here.
• Turn off notifications, location, Health Connect, or Apple Health access: in your device settings, at any time.
• Turn off usage data: in the app, under Settings, Privacy and data, Usage data. It takes effect straight away and needs no account, so a spectator can turn it off too.
• Change your cookie choice on this website: use the link under "How you use this website" above. Declining keeps the site free of cookies.
• Ask us directly: email info@matchday-tracker.com and we will respond.

Depending on where you live you may have rights to access, correct, export, or erase your personal data, and to object to processing. The email above is how to exercise them.

Children

Matchday is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, email us and we will remove it.

Changes

If this policy changes we will update the date at the top. Significant changes will be announced in the app.