This policy explains what personal data SportApp processes, why and for how long. It covers the sportapp.io website, the organizer admin at manage.sportapp.io, the results service at app.sportapp.io, the SportApp mobile app, and the API and MCP.
Controller
Appis Oy (Business ID 2738633-7), Itäpuisto 9, 28100 Pori, Finland, [email protected].
For tournament data (teams, players, referees, registrations), the tournament organizer is the controller and Appis Oy processes the data on the organizer’s behalf under the appendix to the Terms of Service. Questions about a tournament’s data are best sent to the organizer first. You can also contact us and we will pass your request on.
What data we process and why
Organizer accounts
Name, email, phone number (if given), organization, role, and sign-in and billing details. We need them to provide the Service and for billing (contract and legal obligation). We keep the data as long as the account exists, and billing and accounting records for the period required by the Finnish Accounting Act (up to 10 years).
Tournament data
Teams, players (for example name, shirt number and photo), team officials, referees, scorekeepers, registrations, registration payment details, results and statistics. We process them on the organizer’s behalf. The data stays in the Service until the organizer deletes it or asks for it to be deleted.
Results, schedules, standings and statistics, and players’ names and photos if the organizer adds them, are public on app.sportapp.io, in the SportApp app and through the API. The organizer decides what it publishes and is responsible for the permissions to publish data about minors.
Contact and support requests
Name, email, organization, phone (optional) and your message. Form data is stored in our own customer service system IISI. We use it to reply to you (legitimate interest). We keep contact and support request data while the matter is being handled, and after that only as long as needed for possible follow-up questions, quality assurance of the service or legal obligations.
App users
The app doesn’t need an account. The tournaments you follow and your settings are stored on your phone. If you allow notifications, the app sends our server the identifier needed to send notifications and device details such as the model, language and time zone. The identifiers and device details needed to send notifications are kept as long as they are needed to provide the notification service. Unused and unnecessary identifiers are deleted or anonymised.
Visitor statistics
We use Google Analytics, and Firebase Analytics in the app, to see how the pages and the app are used. They are used only with your consent, and Google keeps the data for at most 14 months. More in the Cookie Policy.
Who we share data with
We don’t sell personal data.
We use service providers that process data on our behalf and only as needed:
- servers and databases: UpCloud, Helsinki (Finland)
- security and content delivery: Cloudflare
- payments: Stripe
- analytics and fonts: Google
- videos: Vimeo (only when you press play)
- email delivery and error tracking
- app distribution: Apple App Store and Google Play
If an organizer connects its own AI tool to SportApp through MCP, the data it asks for goes to the tool’s provider under the organizer’s responsibility.
Some providers also operate outside the EU, for example in the United States. In that case the transfer is based on the EU-U.S. Data Privacy Framework or the Commission’s standard contractual clauses. We may also disclose data to authorities when the law requires it.
Security
All connections are encrypted (HTTPS). You sign in to the admin with one-time codes, and access rights depend on your role. We process IP addresses and technical logs to protect the Service and prevent misuse (legitimate interest).
Your rights
You can ask for:
- access to your data and a copy of it
- inaccurate data to be corrected
- your data to be deleted
- processing to be restricted
- your data to be transferred in a machine-readable format
You can also object to processing based on legitimate interest and withdraw your consent at any time. Send your request to [email protected]. We reply within one month. We may ask you to prove your identity. We can’t delete data the law requires us to keep.
If you think we process your data unlawfully, you can complain to the Finnish Data Protection Ombudsman (www.tietosuoja.fi) or the authority in your own EU country.
Changes
We update this policy when needed. The date at the top shows the latest version.