Privacy Notice

Last updated: July 10, 2026

This Privacy Notice explains how Pranay Prasad ("we", "us"), operating Group Chat FC (the "Service"), handles your personal data. We act as the data controller for personal data processed to provide the Service.

1. Data we collect

• Account data: your Google account identifier, email address, display name and avatar (from Google sign-in).
• App content: leagues you create or join, match results you enter, comments, and other in-app activity.
• Technical data: IP address, device/browser type, log data, and basic usage telemetry.
• Support data: messages you send us and any information you include in them.
• Payment data: handled by Paddle (see "Sharing" below); we receive limited billing metadata such as your subscription status, plan, country and last-4 of card, but not full card details.

2. How we use it

• To create and operate your account and leagues (contract).
• To display fixtures, standings, awards and notifications (contract).
• To keep the Service secure and prevent fraud/abuse (legitimate interests).
• To provide customer support (contract / legitimate interests).
• To improve the product using aggregated usage data (legitimate interests).
• To comply with legal obligations (legal obligation).

3. Legal basis

We rely on: performance of a contract (to run the Service you signed up for), our legitimate interests (security, product improvement), your consent where applicable (e.g. optional cookies), and legal obligations (e.g. tax records).

4. Sharing

We share personal data only with:

• Subprocessors that host and run the Service: our cloud hosting and database providers, authentication provider (Google Sign-In), and email/notification providers.
• Paddle.com Market Ltd as our Merchant of Record for the sale of subscriptions and Season Passes, including payment processing, subscription management, invoicing and tax compliance.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

5. International transfers

Some subprocessors may be located outside your country, including outside the UK/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep account and league data for as long as your account is active. If you delete your account, we delete or anonymise personal data within a reasonable period, except where we must keep it to comply with legal obligations (e.g. tax invoices retained by Paddle).

7. Your rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us via the support channel in the app. We aim to respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege database policies (row-level security). No system is 100% secure.

9. Cookies

We use strictly-necessary cookies and local storage to keep you signed in and remember your default league. We use PostHog (EU hosting, IP anonymised) for privacy-friendly product analytics — no advertising cookies, no cross-site tracking. Paddle may set cookies during checkout as described in Paddle's own privacy notice.

10. Children

The Service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Do not use the Service if you are under that age.

11. Changes

We may update this Notice from time to time. Material changes will be communicated in-app or by email.

12. Contact

Data controller: Pranay Prasad. For privacy questions or requests, contact us via the in-app support channel.