Privacy Policy

Last updated: April 2026

FinalCup ("we", "our", "the App") is a mobile application for managing sports and esports tournaments, developed in Switzerland. Protecting your personal data is a priority for us.

1. Data Controller

FinalCup
Switzerland
Contact: contact@finalcup.app

2. Data Collected

We collect only the data necessary for the App to function:

• Account data: email address and password (securely stored via Supabase Auth), or login via Google OAuth (email and name from Google account) or Sign in with Apple (real email or Apple relay email).
• Tournament data: tournament names, scores, standings, participant names, tournament configurations, match events (goals, cards, etc.) linked to players.
• Player and team data: names, sports practiced, positions, team compositions.
• Cloud backup data: a copy of your local data (players, teams, tournaments) saved on our servers if you are signed in to a FinalCup account.
• Push notification tokens: a unique technical identifier of your device (Expo Push Token) is stored on our servers to enable push notifications. This token is deleted upon logout.
• Analytics data: we use Google Analytics (via Firebase) to collect anonymized usage data (screens viewed, in-app actions, sessions). This data does not personally identify you and is used solely to improve the App.
• Advertising data: the free version displays advertisements via Google AdMob. AdMob may collect advertising identifiers and technical device data to personalize ads. On iOS, tracking requires your explicit consent through the ATT (App Tracking Transparency) prompt. You can manage your ad preferences in your device settings.
• Subscription data: if you subscribe to Premium, the subscription is managed by RevenueCat, which processes transaction data sent by Google Play Store or Apple App Store. We do not store your payment information.
• Crash reports: in case of a technical error, an anonymized report is sent via Sentry (device type, OS version, error trace). These reports do not contain personally identifiable data.

We do not collect any geolocation data, contacts, photos, or any sensitive data.

3. Purpose of Processing

Your data is used exclusively to:

• Allow you to create and manage tournaments, players, and teams.
• Synchronize your data across devices via the cloud.
• Enable tournament sharing with other users.
• Automatically back up your data to prevent loss.
• Send you notifications (match reminders, tournament updates).
• Improve the App through anonymized analytics data.
• Display relevant advertisements (free version only).
• Diagnose and fix technical issues.

4. Legal Basis

Processing your data is based on your consent (voluntary account creation) and on the performance of the contract (providing the FinalCup service), in accordance with the Swiss Federal Act on Data Protection (FADP) and the European Union General Data Protection Regulation (GDPR).

5. Hosting and Subprocessors

Your data is processed by the following services:

• Supabase (database, authentication, cloud backup, push tokens) — servers located in Europe (Ireland, AWS eu-west-1).
• Infomaniak (finalcup.app website) — servers located in Switzerland.
• Google Firebase / Google Analytics (anonymized usage analytics) — Google infrastructure.
• Google AdMob (ads in free version) — Google infrastructure.
• RevenueCat (Premium subscription management) — United States.
• Sentry (anonymized crash reports) — United States.
• Expo (push notifications) — United States.
• Resend (transactional emails: account verification, password reset) — United States.

We do not sell, rent, or share your data with any third party for commercial purposes. The above subprocessors process your data only as described in their respective services.

6. Data Retention

• Account data: kept as long as your account is active. Deleted within 30 days of a deletion request.
• Push tokens: deleted when you log out or delete your account.
• Analytics data: retained according to Google Analytics retention policies (26 months by default).
• Local data: stored only on your device. We do not have access to it unless you enable cloud backup by signing in to a FinalCup account.

7. Your Rights

In accordance with FADP and GDPR, you have the following rights:

• Access: obtain a copy of your personal data.
• Rectification: correct inaccurate data.
• Deletion: request the deletion of your account and all your data. You can delete your account directly from the App (My Account → Delete my account) or by contacting us by email.
• Portability: receive your data in a structured format.
• Objection: object to the processing of your data.

To exercise these rights, contact us at contact@finalcup.app.

8. Security

We take appropriate technical and organizational measures to protect your data: password encryption, HTTPS connections, secure token-based authentication, Row Level Security policies on the database, database functions with restricted privileges (SECURITY DEFINER), rate limiting on sensitive operations.

9. Children's Data

FinalCup is not specifically directed at children under 13. We do not knowingly collect data from minors under 13. If you are a parent and believe your child has provided us with data, please contact us to have it deleted.

10. Cookies

The FinalCup mobile app does not use cookies. The finalcup.app website does not use any tracking or advertising cookies.

11. Changes

We reserve the right to modify this privacy policy at any time. The date of the last update is shown at the top of this page. In case of substantial changes, we will notify you through the App.

12. Contact

For any questions about this policy:
contact@finalcup.app