Privacy Policy

Last updated: 13 June 2026

1. Who is responsible for your data

Konakick is the data controller for personal information you provide. Contact us about privacy matters at privacy@konakick.com.

2. What we collect

Account data: email address, manager name, optional avatar, hashed password (or OAuth identifier if you sign in with Google).
Activity data: votes, chat messages, substitution calls, certificates you create.
Payment data: for Pro subscribers, Stripe handles your card details — we only store the Stripe customer ID and subscription status.
Technical data: IP address, browser type, basic device info, error logs.

3. How we use it

To run the service: show your votes, chat, leaderboard, certificates.
To send transactional emails (sign-up confirmation, password reset, billing receipts).
To prevent abuse and keep the platform safe.
To comply with legal obligations.

We do not sell your personal data. We do not use your data to train third-party advertising profiles.

4. Legal bases (UK / EU users)

We rely on: contract (to provide the service you signed up for), legitimate interests (security, anti-abuse, product improvement), consent (optional cookies, marketing emails if you opt in), and legal obligation (e.g. tax records).

5. Who we share data with

Supabase — database and authentication hosting.
Stripe — payment processing for Pro subscriptions.
Mailgun (via Lovable) — sending transactional email.
API-Football — read-only fixture data (no personal data sent).

We may also disclose data when required by law or to protect the rights and safety of users and the public.

6. How long we keep it

Account data is kept while your account is active. If you delete your account we remove or anonymise your personal data within 30 days, except where we are required to keep certain records (e.g. tax) for longer.

7. Your rights

You can access, correct, export, or delete your personal data from your account page or by emailing privacy@konakick.com. UK/EU users can also complain to their data protection authority (in the UK, the ICO).

8. International transfers

Our suppliers may process data outside the UK/EEA. Where they do, we rely on their standard contractual clauses or equivalent safeguards.

9. Children

Konakick is not intended for children under 13. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

We will post material changes to this policy here and, where appropriate, notify you by email.