Privacy Policy

Who we are

Football Core is developed and provided by Mykhailo Khodukin (an individual, Ukraine) — “we”.

Personal data questions: privacy@footballcore.app.

For account data we are the controller. For data that a coach, club or academy enters about their players, the coach or club decides the purpose (controller) and we process it on their behalf (processor).

Data we process

Wellness data may relate to health — a special category of data. We process it only with your explicit consent (for a child — the parent’s consent): you provide it voluntarily and can stop at any time.

We do not collect location, phone contacts or payment data, and we use no advertising or analytics trackers.

Purposes and legal bases

• Providing the service (team records, sync between devices, coach–player communication) — performance of a contract (the Terms).
• Emails with codes for confirmation and password reset — performance of a contract.
• Wellness — explicit consent of the player or parent.
• Security and abuse prevention (logs, sign-in rate limits) — our legitimate interest.
• Compliance with the law — legal obligation.

Children

Football Core is used by youth teams, so we take special care of children’s data.

• A child under the age of digital consent in their country (13 to 16 in the EU) uses Player Core only with parental permission; we recommend that a parent creates or supervises the account (the “parent” role).
• The coach or club entering a child’s data is responsible for having parental consent or another legal basis.
• Parents may at any time request access to, correction or deletion of their child’s data: privacy@footballcore.app.

Who can see the data

• Coaches and staff of the team (workspace) — their team’s data.
• A player — only their own data and their current team’s schedule. Other players’ data is not available to them.
• Parents — the data of the child (children) they were invited for.
• Coach notes about a player are never shared with players or parents.
• We do not sell data or share it for advertising.

Service providers

We use reputable providers that process data only on our instructions:

Some providers are US companies. Transfers outside the EU rely on the European Commission’s Standard Contractual Clauses (SCCs) and/or the EU-U.S. Data Privacy Framework.

How long we keep data

• For as long as your account or the coach’s workspace exists.
• After a deletion request — deleted within 30 days; residual copies in providers’ backup systems expire on their standard schedules.
• The copy on your device is removed when you sign out of Player Core or clear the app data.
• Server logs — within the providers’ retention periods (usually up to 90 days).

Your rights

You have the right to: access your data and get a copy; correct it; erase it (“right to be forgotten”); restrict processing; object to processing; receive your data in a machine-readable format (portability); withdraw consent at any time.

Send requests to privacy@footballcore.app from your account email — we reply within 30 days. How to delete your account — see this page.

You may also lodge a complaint with a supervisory authority: in Ukraine — the Ukrainian Parliament Commissioner for Human Rights; in the EU — the data protection authority of your country.

Security

All connections are encrypted (HTTPS). Passwords are stored only in protected (hashed) form. Server-side access rules prevent seeing or changing other people’s data: a player cannot change the coach’s data, and a coach of another team cannot see yours. No system is absolutely secure, so we will notify incidents affecting your data as required by law.

Cookies and local storage

We do not use advertising or analytics cookies. The apps store in your browser or device only what they need to work: your sign-in session, a copy of your data for offline use, your chosen language and theme.

Changes to this policy

We will announce significant changes in the app or by email in advance. The date of the last update is shown at the top of this page.