Privacy Policy

Pro Clubs FC is an independent community app that helps a football club squad organise availability, lineups and match results. It is operated by Ran Aloni, operating Pro Clubs FC personally, who is also the data controller for the personal data described in this policy. The operator is an individual based in Israel; there is no company and no business establishment anywhere else, and no postal address is published — email is the published channel for privacy and legal notices. This policy explains exactly what the app stores and why.

• Account data: your email address and an encrypted password, handled by our authentication provider. We never see your password.
• Player card: gamertag, initials, profile picture, and your two preferred playing positions.
• Club data: the club you belong to, your role (founder, manager or player), invite codes you used, and the date you joined.
• Availability: the dates and hours you mark yourself available.
• Lineups, matches and statistics: formations, positions you were assigned, scores, goals, assists and other match statistics, including results imported from the game's public club servers.
• Content you create: announcements and emoji reactions.
• Legal acceptance: the date and version of the Terms of Use and Privacy Policy you accepted.
• Safety records: reports you submit or that are submitted about you (reason and optional notes), members you block, and moderation actions taken in your club.
• Notifications: your notification preferences, whether you granted browser notification permission, and a device notification token for each device you enable notifications on. A token identifies a device, not a person.
• Support requests: the name, email address and message you send through the support form.
• Email verification: a short-lived, one-way record used to check the eight-digit code we email you at sign-up, plus how many attempts were made. The code itself is not stored in readable form and expires within minutes.
• Time zone: the time-zone name your device reports, so hours can be converted correctly across daylight saving. Other members are only ever shown an offset such as GMT+2 — never your city, region or country.
• Transfer Market entries: if you create a listing or a club vacancy, the text and choices you enter there, applications, invitations, trials and their outcomes. The Market is currently switched off and not open to members.
• System and audit records: records of significant actions such as role changes, moderation decisions and platform updates, kept so club history and safety decisions can be checked later. These cannot be edited or deleted from inside the app, by anyone.
• Historical traffic counters: daily counts of pages opened in broad areas of the app, collected by an earlier in-app counter that has been removed. No cookie, device identifier, IP address, location, browser detail or referring address was stored with them. The existing totals are kept but nothing is added to them.

We do not collect precise location data, contacts, or advertising identifiers, and we do not sell personal data.

• To create and secure your account and keep you signed in.
• To show your club the squad, availability grid, lineup and match history.
• To let managers organise the team and moderate content.
• To send the notifications you switch on.
• To check that the email address you signed up with is really yours.
• To meet legal obligations and handle abuse reports and support requests.

The legal ground for each purpose above: creating and running your account, and delivering the core club/squad service you asked for, relies on our contract with you. Service security, abuse prevention, essential aggregate operation of the app and handling support requests rely on our legitimate interests, balanced against your rights. Optional device notifications rely on your consent, and you can withdraw it at any time by turning them off. Where the law requires us to do something (for example responding to a lawful request), that is our legal obligation. This is a plain-language summary, not legal advice, and does not remove any stronger right you have under the law of the country where you live.

Your gamertag, picture, positions, availability, lineup place and match statistics are visible to the members of your club only. Your email address is visible only to you — other members never see it. Reports you submit are visible to the founder and managers of your club, and to the operator's moderators. Nothing in the app is publicly listed on the internet today.

If the Transfer Market is switched on in future, only the details you deliberately put in a listing — such as your gamertag, positions, regions and your own description — would be visible to other signed-in members looking for players. Your email address, your city and your exact time zone name are never part of that.

A small number of moderators appointed by the operator can see reported content and moderation records across clubs, to deal with abuse. Being a club founder or manager does not give anyone that access.

Notifications are off until you enable them. The app asks your browser or device for permission, stores your choice and a device token so a notification can reach that device, and lets you turn match reminders and announcements on or off separately. Turning notifications off removes the device token. You can also revoke permission in your browser or device settings at any time.

The app currently shows no advertising. No advertising network, tracking SDK, fingerprinting technique, analytics cookie or third-party analytics tool is integrated, so no advertising identifier or tracking profile is created and nothing is shared with an ad network. If that ever changes, we will update this policy and the version above before it goes live.

The app hosting platform, Lovable, provides the operator with aggregate traffic figures for the project as a whole — visitors, page views, device type, country and referring site — the same kind of reporting most hosting providers offer. Those reports are aggregate and this app does not use them to build a profile of any member. We cannot promise anything about how the hosting platform itself measures them: like most hosting and measurement services, its technical logs and measurement may involve information such as an IP address, device or network details, handled under the provider's own policy. The app itself does not run its own page-view counting and does not track what an individual member does; a small number of historical daily totals collected by an earlier, now-removed in-app counter (broad page category only) remain in the database unchanged but are no longer added to.

For running the service and for aggregate usage statistics, the app does store one basic piece of account activity: a single “last active” time per account, refreshed at most every 15 minutes while you use the app. It is not visible to other members or to club managers, and the operator sees it only as totals — for example how many accounts were active today, in the last 7 days and in the last 30 days, how many accounts and clubs exist and how many people signed up. No IP address, location, device fingerprint, browsing history or click tracking is stored for this, and the time is deleted with your account.

There is nothing to buy in the app: no payment provider is connected and there is no premium plan, so the app stores no purchase, card or billing data. Optional voluntary support through an external service (such as Buy Me a Coffee) is processed entirely by that service under its own privacy policy.

The list of what this app stores on your own device is on the cookies and device storage page.

The app runs on Lovable Cloud, which uses Supabase for authentication, database and file storage; data is processed on their infrastructure under their security controls. The same provider sends the verification and sign-in emails. Club match results are fetched from the game publisher's public club endpoints using only the club identifier you configure. Web fonts are loaded from Google Fonts, which receives the request needed to serve the font. Device alerts, when a device is set up for them, pass through the push service built into your own browser.

Your account details, club records, uploaded files and the provider's backups are stored in the backend provider's European region (EU Central, Frankfurt, Germany). That region was set when this project was created and cannot be moved.

The app runs on a Lovable Business plan, and the data processing agreements of the hosting platform and the underlying database platform apply to this project. Where information crosses a border, those agreements include international-transfer safeguards, such as standard contractual clauses where applicable, and cover the providers working behind them. The main storage region is as stated above; this policy does not claim that no processing at all takes place outside that region.

Data tables are protected by row-level security rules on the server, written so that a member reads the data of their own club and changes only their own records. Those rules are reviewed as features are built rather than certified by an external audit. Moderator powers are checked on the server every time and cannot be granted from the app. Profile pictures live in a private storage bucket and are served through short-lived signed links. Traffic is encrypted in transit. No app can promise that it will never be breached, and this policy does not make that promise; if something serious happens we will tell affected people.

We keep your active account data while your account is active. If you delete your account, from Profile settings or using the account deletion page, your public profile and access are removed immediately, and routine deletion of the rest (login, email, gamertag, initials, profile picture and image files, availability and reactions) is completed within 30 days, subject to security, legal or dispute exceptions and to how long our hosting provider keeps its own backups. Where a match result would otherwise break, only anonymous team-level statistics are kept and your entry is replaced with "Deleted Player" with no link back to you.

• Closed support requests: kept 12 months.
• Completed recruitment conversations and applications: kept 6 months.
• Routine notifications: kept 90 days.
• Moderation reports: kept 12 months; serious or ongoing cases are kept only as long as the case needs it.
• Club news and match history: kept while needed for club history, anonymising former or deleted players where possible.
• Aggregate traffic totals: may be kept long-term.
• Evidence submitted for a club-ownership claim: kept 90 days after the case closes, unless a dispute or investigation needs it kept longer.

Security logs and provider backups are not itemised here beyond what is stated above, because we have not independently verified our hosting provider's exact backup and log retention schedule from the outside; until that is confirmed, assume they follow the provider's standard backup/log schedule. This is the one retention item still marked open on the operator's private checklist.

You must be 16 or older to create an account. We do not ask for or store a date of birth; instead, sign-up requires you to confirm you meet this minimum age before an account can be created. The app is not directed at young children, and we do not knowingly collect information from anyone below this age. If you believe an underage person has an account, contact us and we will remove it.

You can access, correct, export or delete your personal data, and you can object to processing based on our legitimate interests. Most of it is editable directly in the app; for anything else, email support@proclubsfc.com. Mandatory privacy rights that apply in your country of residence are preserved regardless of the governing law stated below. This section is a plain-language summary and is not legal advice.

Our Terms of Use choose Israeli law, as the law of the country where the individual operator is based, without prejudice to any mandatory consumer-protection or data-privacy rights you have under the law of the country where you live. This policy does not take away any data-protection or consumer right you have where you live, and you can always complain to your local data-protection authority.

Data controller: Ran Aloni, operating Pro Clubs FC personally, based in Israel. Pro Clubs FC is run by one individual rather than a registered company, and no formal Data Protection Officer is appointed.

For privacy, personal-data or support requests, email support@proclubsfc.com, or use the support form in the app.

If this policy changes materially we will update the effective date and version above and ask you to accept the new version in the app.