Privacy policy

In short

• We process data so that the app works: your account, profile, games, chat and arrival at the court. We do not sell it, we do not use it for advertising, and the app contains no advertising or tracking tools.
• We use location only around a game you take part in, and automatic arrival checks only if you turn them on. We keep your position on a game's map only while the sharing window is open, at most until 30 minutes after the start, and arrival-check points for 72 hours at the latest.
• Conversations are deleted automatically: a game's chat 14 days after the game ends, other conversations after 180 days.
• You can delete your account in the app or without it. Deletion is permanent; what we keep longer for legal or safety reasons is set out below.
• You have the right of access, rectification, erasure, portability, restriction of processing, objection and complaint to a supervisory authority.

Who the controller is

The controller is David Miličević, Zagreb, Croatia. Squadly is developed and run by a private individual; when Squadly becomes a company or a registered sole trader, we will say so here.

For any question about privacy or to exercise your rights, write to privacy@joinsquadly.com. We have not appointed a data protection officer at present, so I personally answer messages to that address.

What this policy covers

This policy applies to the Squadly app on iOS and Android, to the joinsquadly.com website and its subpages, and to communication with us by e-mail.

It does not apply to other services that you choose to use: the App Store and Google Play, signing in with Apple or Google, and apps you share a link into (for example WhatsApp). They have their own privacy policies.

The app introduces some of the features described here (for example notifications, purchases, the game map and the arrival check) step by step. The processing described for a feature starts only once that feature is available in your version of the app.

Which data we process and why

For each group of data we state what we process, why, on which legal basis and for how long. The legal bases come from Article 6(1) of the General Data Protection Regulation (GDPR): performance of a contract with you (point b), a legal obligation (point c), legitimate interest (point f) and consent (point a).

Account and sign-in

Data

E-mail address, password (stored only as a secure hash), sign-in method (e-mail, Apple or Google), the name Apple sends on first sign-in, sign-in sessions with IP address and device and browser details.

Purpose

Creating and protecting the account, signing in, confirming sign-in on a new device, password recovery, preventing abuse.

Basis

Performance of a contract; for IP addresses and security logs, our legitimate interest in protecting accounts and the service.

How long

While the account exists. We delete unconfirmed sign-ups after 7 days, and accounts whose registration was not completed (username, date of birth and gender) after 30 days. We delete revoked session tokens after 30 days; active sessions last until you sign out or they expire.

If you sign in with Apple using “Hide My Email”, the only address we see for you is Apple’s relay address.

Profile

Data

Username, display name, profile photo, description, date of birth, gender (with a “Prefer not to say” option), sports and your level in each sport, privacy and notification settings.

Purpose

Your identity in the community, checking the minimum age of 16, and checking the game criteria a host sets (age, gender, level).

Basis

Performance of a contract.

How long

While the account exists; you can change them in the app.

We do not show your date of birth or gender to other users. When you join a game restricted by age or gender, the other participants can infer from this that you meet the criterion.

Friends, blocks and squads

Data

Friends and friend requests, blocked users, squads and memberships, invitations, polls and votes, a squad’s regular weekly games.

Purpose

The app’s social features and your safety (blocking).

Basis

Performance of a contract; for blocking, also our legitimate interest in user safety.

How long

Until you or another user changes them, or while the account exists; requests and invitations wait until you answer them. Polls are deleted together with the message they were posted in (see Chat). We delete a squad after 6 months without activity, with warnings in the squad’s chat 30 and 7 days before; we do not delete a squad that has a regular weekly game, an upcoming game or an open poll.

Games

Data

Court, date and time, title and description, criteria (age, gender, level), host and participants, join requests, attendance confirmations, reminders, “On my way” with an arrival estimate in minutes (the estimate contains no location), and nudges.

Purpose

Organising and playing games.

Basis

Performance of a contract.

How long

We delete a game and the data linked to it (participants, requests, invitations, chat, reminders, “On my way”, nudges) 14 days after the game ends. Your rating of the game and level votes remain after that, with no link to the game (see Ratings), and the attendance record for 12 months (see Arrival check).

Location

We process location only for the features below and only with the operating system’s permission, which you can withdraw at any time in your device settings. We do not derive location from your IP address.

Home (optional)

You set your home point yourself to get suggestions for nearby courts and games. Alongside the exact point we keep a rounded copy (about 1 km), used for suggestions and for a squad’s approximate area. Only you see the exact point. The place name is determined by the operating system’s geocoder (Apple or Google). We keep it until you change it or delete your account. Basis: performance of a contract.

Game map

If you turn on location sharing for a game, the host and participants of that game (except blocked users) see your position from 2 hours before until 30 minutes after the start. We keep only your latest position, with no movement history, and delete it when the sharing window of all your games has closed, or immediately when you turn on ghost mode. Basis: consent, which you withdraw with one tap.

Arrival check

For the no-show rule (see automated decision-making) we record location points from 20 minutes before until 20 minutes after the start. If you tap “On my way” or “Share location”, this applies to that game; an automatic check without a tap runs only if you turn it on separately. We delete the points themselves after 72 hours at the latest, and earlier once your arrival has been decided; derived data (the shortest distance from the court and the accuracy) stay with the attendance record, which we keep for 12 months after the decision, together with your contest of a no-show, if there is one. Basis: performance of a contract for a check you start with a tap, consent for the automatic check.

Presence on the map

When you were last active on a game’s map (shown to others rounded to the minute) and whether ghost mode is on; we keep this while the account exists. We keep statistics on map opening for 30 days.

Record of consents

When you gave or withdrew consent to location use, for which game, and which version of the text you saw. We keep it while the account exists, because we must be able to demonstrate consent (Art. 7(1) GDPR). Basis: a legal obligation.

Chat

Data

Messages (text, images, voice messages, video, stickers, polls, shared games), reactions, replies, forwards, pinned messages, read and typing indicators.

Purpose

Communication between players.

Basis

Performance of a contract.

How long

The chat of a confirmed game is available until 24 hours after the game ends, and of an unconfirmed game until it ends; it is deleted together with the game 14 days after it ends. Private and squad conversations are deleted 180 days after a message is sent, or earlier if all participants clear the history (7 days after the last of them does). A message deleted “for everyone” immediately loses its content and attachments.

Message notifications contain the sender’s name and the name of the game or squad, but not the text of the message. A copy of the conversation is also kept on the participants’ devices until the app deletes it under the same rules.

Ratings, reviews and level assessment

Data

Court reviews (rating and text), your rating of a game you played, teammates’ votes on your level.

Purpose

Information about courts for the community and a more accurate player level.

Basis

Performance of a contract; for votes and public reviews, the community’s legitimate interest in fair games and accurate information.

How long

While the author’s account exists. Court reviews are visible to all users, with your username and photo. We do not show your rating of a game to others. We do not show who voted on your level.

Reports and moderation

Data

A report (who reports, whom, the reason, a description), a snapshot of the reported content (for example a message and a few messages around it), moderation decisions (warning, content removal, suspension, ban) with reasons, requests for another review and an internal log of administrator actions.

Purpose

Community safety, handling reports and meeting obligations under the Digital Services Act.

Basis

Legitimate interest in user safety; a legal obligation where one applies.

How long

Open reports until resolved. Closed reports without a measure 180 days, with a measure 730 days. Moderation measures 730 days, and a permanent ban for as long as it lasts. We keep the log of administrator actions (for example a resolved report or an approved court suggestion) for as long as it is needed as evidence of lawful handling and for defending legal claims; at present we do not delete it automatically.

Notifications

Data

The device identifier for notifications (Firebase), platform, app language and version, in-app notifications and your notification settings.

Purpose

Sending the notifications you have turned on.

Basis

Performance of a contract; notifications arrive only with your permission in the operating system.

How long

After you sign out, the device no longer receives your account’s notifications, and we delete the identifier at the next notification for your account or after 60 days without use at the latest. We delete in-app notifications after 7 to 30 days, and those waiting for your answer when you answer or when they no longer apply.

Coins and purchases

Data

Your coin balance, transaction history (including the tickets that existed until 2 November 2026 and the one-time refund of bought tickets in coins), purchase details from the store (product, transaction identifier, store receipt) and, once available, the Premium subscription.

Purpose

Verifying and recording purchases, preventing fraud.

Basis

Performance of a contract; a legal obligation for accounting records where the law requires it.

How long

While the account exists. After the account is deleted, only the store’s purchase identifier remains (the transaction identifier, and for Google Play also the purchase token), with no link to you, so that the same purchase cannot be used twice. If the law requires us to keep accounting data for longer, we will keep it for as long as the law requires.

Payments are processed by Apple and Google. We do not see your card details.

Security and abuse prevention

Data

IP address and request details in the servers’ technical logs, a hash of the IP address and e-mail address for limiting requests and sign-in attempts, and device integrity checks when enabled (Apple App Attest, Google Play Integrity).

Purpose

Protecting accounts and the service against attacks, fraud and automated abuse.

Basis

Legitimate interest in the security of the service.

How long

Rate limits 1 hour, device check results 30 days, technical logs at infrastructure providers according to their periods, usually a few days to a few weeks.

Error diagnostics

Data

Crash and error reports from the app (type of error, app and system version, a random installation identifier that is not linked to your account). Before sending, we remove e-mail addresses, tokens, location and message content from the reports.

Purpose

Finding and fixing errors.

Basis

Legitimate interest in the app working correctly.

How long

According to the service provider’s (Sentry’s) period, at most 90 days.

Court suggestions

When you suggest a court, we process its name, description, location and up to 4 photos. If we approve the suggestion, the photos become public photos of the court, without your name (see the Terms of use). We delete rejected suggestions after 14 days, and other suggestions when you delete your account. Basis: performance of a contract.

Support and e-mail

When you write to us, we process your address, the content of your message and our reply in order to resolve your question, complaint or request. Cloudflare forwards messages sent to our addresses to our mailbox at Google (Gmail). We keep the correspondence for as long as it is needed to resolve the matter and to show how it was handled, at most 3 years; consumer complaints and our replies for at least one year, as the Croatian Consumer Protection Act requires. Basis: performance of a contract, a legal obligation (consumer complaints) or legitimate interest. We send e-mail only when it is needed for your account (confirmation, sign-in, recovery) and we do not send promotional messages.

This website

The joinsquadly.com website sets no cookies, does not use the browser’s local storage and has no analytics or advertising tools. The website is delivered by Cloudflare, which processes your IP address and technical request details in order to deliver the site and protect it against attacks. If Cloudflare’s security system suspects automated traffic, it may set a technical cookie for the check (for example cf_clearance). Basis: legitimate interest in delivering the site securely.

Data on your device

The app keeps a copy of your conversations, games and profile on your device so that it works quickly and offline. It keeps your sign-in details and the list of accounts you are signed in to on that device (e-mail address, username and photo) in the system’s protected storage (Keychain on iOS, Keystore on Android). When you sign out, the app deletes your account’s data from the device and removes the account from the list, and everything is also deleted when you delete the app. The local copy is protected by your device lock. So that the app fetches only what has changed, the server keeps a record of which data changed, without their content, for 90 days.

What other users see

• Your profile can be opened by friends, teammates and, while the setting “Invites from players you don't know” is on (it is on by default), other users you have not blocked. On your profile they see your username, display name, photo, description, sports and level, the number of games played, how many friends you have and a few of them, and your games in the next 30 days that they are allowed to see themselves (public ones, and those they take part in or are invited to). Friends and teammates can also retrieve the date your account was created.
• All users: the court reviews you write, with your username and photo.
• Participants in a game: your participation, attendance confirmation, “On my way” with an arrival estimate and, if you turn it on, your location on that game’s map.
• Participants in a conversation: the messages you send.
• Nobody but you sees your date of birth, gender, e-mail address or exact home location; administrators see them only when strictly necessary for safety or support.

Your profile photo is stored at a public address so that it can be shown in the app.

Data we receive from others

We do not receive all data about you from you:

• Apple and Google, when you sign in with their account: your e-mail address (with Apple’s “Hide My Email”, the relay address), the name Apple sends on first sign-in, and the account identifier.
• The App Store and Google Play, when you buy something: the product, transaction identifier, purchase receipt, and subscription or refund details.
• Other users: reports concerning you (with a description and a snapshot of the content), votes on your level, a host’s or teammate’s mark of whether you turned up, invitations and friend requests, removal from a game and blocks, and what others write about you in messages.
• Your device’s operating system: the place name for your home point (Apple’s or Google’s geocoder).

We do not collect any of these data from publicly accessible sources.

Automated decision-making

Two decisions in the app are made automatically. They are necessary for performing the contract with you (Art. 22(2)(a) GDPR), because without them the no-show rule and levels could not be applied in the same way to everyone. For both, you can ask for a person to review the decision, give your point of view and contest the decision by writing to support@joinsquadly.com.

No-show, block and leaving games

A no-show is recorded automatically (see the Terms of use). Arrival is proven when at least one location point from the check window, taking its accuracy into account, falls within 100 metres of the court; the point must be accurate to at least 50 metres and must not be a fake location (these are the current values). If arrival is not proven, the no-show is recorded after 24 hours, unless within that period you prove you were there or the host or a teammate whose arrival was confirmed marks you as present. It is not recorded if fewer than 2 players were confirmed at the court; if you are under 18, it is recorded only when someone marks you as absent and an administrator confirms it. Two no-shows within 60 days automatically block joining and opening games until 60 days after the first and take you out of future games that start more than 24 hours later. You can contest a no-show within 7 days: a person decides on the contest, and a contest sent in the app stops the count until it is decided.

Level assessment

Your level can change by one step when enough teammates you actually played with (your arrival and theirs were confirmed) vote that it is higher or lower: at least 3 teammates from at least 2 games, by a two-thirds majority, with votes from games with more players counting for less. Voting is open for 72 hours after the game. Your level affects whether you can join a level-restricted game without the host’s approval. This is profiling within the meaning of the GDPR.

Content moderation (warnings, suspensions, bans) is always decided by a person. An automatic filter only rejects banned terms in usernames, display names, descriptions, and in the names and descriptions of games and squads, and the number of requests is limited; neither the filter nor the limit imposes measures on an account.

Who we disclose data to

We do not sell data. We disclose it only to service providers that help us provide the service, and only for that purpose. Most of them process data on our behalf, as processors. Apple and Google, when you sign in with their account and when you buy something, and Google as the provider of our mailbox, also process data as independent controllers, under their own privacy policies.

Supabase

Database, sign-in, file storage and server functions. Data are stored in Frankfurt (Germany).

Hetzner Online

The server for real-time messaging (chat, positions on a game’s map, typing indicators), in Nuremberg (Germany). It does not store messages permanently; it holds them for a few minutes at most in order to deliver them.

Cloudflare

Delivery of this website, DNS, protection of the connection to the real-time messaging server and forwarding of e-mail sent to our addresses.

Vercel

The page for e-mail confirmation and opening the app from links (auth.joinsquadly.com).

Google (Firebase, Google Maps, Google Play, Gmail)

Notifications, sign-in with Google, maps and geocoding on Android, device integrity checks, purchases through Google Play, and the mailbox that receives messages sent to our e-mail addresses.

Apple

Notifications on iOS, sign-in with Apple, maps and geocoding on iOS, device integrity checks and purchases through the App Store.

RevenueCat

Managing subscriptions and purchases once they are available. It receives only your account identifier and store receipts.

Sentry

App error reports, without e-mail addresses, tokens, location or message content.

E-mail delivery provider

Sending e-mails for account confirmation, sign-in and password recovery.

We may also disclose data to public authorities when the law or a valid order requires us to, and when it is necessary to protect someone’s life or safety.

Transfers outside the European Economic Area

Some providers (Supabase, Google, Apple, Cloudflare, Vercel, RevenueCat, Sentry) are based in the United States, or their data may travel outside the EEA, even when the data are stored in the EU. We base such transfers on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, for providers certified under it, or on the standard contractual clauses adopted by the European Commission. You can request a copy of the safeguards at privacy@joinsquadly.com.

Deleting your account

You can delete your account in the app (Settings → Account → Delete account) or without it, following the instructions on the Delete your account page. Deletion usually completes within a minute and cannot be undone. Your profile, sign-in, friends, memberships, participations, attendance records and coins are deleted. Only the data listed on that page, with the reason and period, are kept longer.

Your rights

Under the GDPR you have the right:

• of access to your data and a copy of it (Art. 15);
• to rectification of inaccurate data (Art. 16), most of which you can do yourself in the app;
• to erasure (Art. 17);
• to restriction of processing (Art. 18);
• to data portability for the data you gave us, in a machine-readable format (Art. 20);
• to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7);
• not to be subject to a decision based solely on automated processing without the possibility of human review (Art. 22, see above).

Send your request to privacy@joinsquadly.com. To protect your account, we will check that the request really comes from you, usually with a message to the account’s e-mail address. We answer without undue delay and within one month at the latest; we may extend complex requests by a further two months, and we will tell you if we do.

You have the right to lodge a complaint with a supervisory authority. In Croatia this is the Agencija za zaštitu osobnih podataka (AZOP), the Croatian data protection authority, Selska cesta 136, 10000 Zagreb, azop.hr. You may also contact the supervisory authority of the country where you live or work.

Minimum age

Squadly is intended for people aged 16 and over. You enter your date of birth when you create your account. If we learn that an account belongs to someone under 16, we will delete it. We give additional protection to users aged 16 to 18: a no-show is recorded for them only by an administrator’s decision. If you suspect an account was created by a younger person, let us know at reports@joinsquadly.com.

Do you have to give us your data

To create an account we need an e-mail address (or sign-in with Apple or Google), a username, date of birth and gender (with a “Prefer not to say” option); without them we cannot enter into the contract and create your account. If you choose “Prefer not to say” for gender, you cannot join men-only or women-only games directly. Location, profile photo, description, home and notifications are optional; without them some features do not work.

How we protect data

All traffic between the app, the website and the servers is encrypted (TLS). Access to data in the database is restricted by rules that let each user reach only their own data and what they are allowed to see. We store passwords only as a secure hash, and notifications do not carry message content. Administrator access is limited to what is necessary, and administrators’ moderation actions are logged. If a personal data breach puts your rights at risk, we will notify the supervisory authority and you, as the GDPR requires.

Changes to this policy

We will change this policy when the app or the law changes. The date of the last change is at the top of the page. We will tell you about significant changes in the app or by e-mail before they take effect.

Contact

Privacy and rights: privacy@joinsquadly.com. General support: support@joinsquadly.com. Content reports: reports@joinsquadly.com.