Privacy policy

1. Who is responsible for your data?

The controller of the data collected through the fivekick.be website and the FiveKick mobile app is Nabil Amghar, a natural person registered with the Crossroads Bank for Enterprises under number 1030.635.193, established at Jubellaan 306, 2800 Mechelen, Belgium, who can be reached at support@fivekick.be.

2. What data do we collect?

Data you provide

• Account: first name, last name, email address, password (never stored in readable form), profile photo (optional), city.
• Sports activity: teams, matches played, scores, availability, responses to call-ups.
• Messages: the content of the messages you exchange in your team's locker room and in private conversations.
• Reports: when you report someone's behaviour, the reason and the identity of the reported account, as well as the list of users you have chosen to block.

Data generated by your use of the app

• Rankings and progression: individual and team ELO score, level and XP, badges, match statistics.
• Match organisation: history of organised matches, chosen sports centre, time slot and match status. FiveKick does not collect any pitch payments and does not collect any bank details: booking and payment are made directly with the sports centre.
• Premium subscription: if you subscribe to FiveKick Premium, the plan you chose (monthly or yearly), the date of your first subscription, the renewal or expiry date and the status of the subscription (active, cancelled, payment failed). Payment is processed exclusively by Apple (App Store) or Google (Google Play): FiveKick never receives your card or bank account details.
• Notifications: technical push notification token and your notification preferences.
• Technical data: IP address, device identifier, sign-in dates and technical logs, for the security and proper operation of the Service.
• Location: if you allow it, your approximate location is used only to sort sports centres from nearest to farthest. It is processed on your device and is never stored in our databases or shared with third parties. You can refuse or revoke this permission at any time in your phone's settings: the app remains fully usable, and sports centres are then shown without sorting by distance.

Required data

Account data not marked as optional is required to create an account and use the Service: without it, we cannot provide the Service to you. Your profile photo, location and Premium subscription are optional.

3. Why do we use your data?

• To provide the service (performance of the contract): account creation, matchmaking, match organisation, putting you in touch with sports centres, call-ups and rankings.
• To keep you informed (performance of the contract): push notifications and transactional emails (match confirmation, cancellation, call-up, password reset).
• To manage your Premium subscription (performance of the contract): activating Premium benefits, showing the status of your subscription and sending you the confirmation email.
• To enable communication between players (performance of the contract): team locker room and private messages, to organise matches and team life.
• To secure the service (legitimate interest): preventing fraud and abuse, account security, handling reports and moderating content.
• To handle reports and disputed scores (legitimate interest): when a score is disputed or a report is filed, an administrator may view the conversation concerned, solely for that purpose.
• To show you the nearest sports centres (consent): sorting by distance, if you allow location access.
• To comply with our legal obligations: accounting and tax obligations related to our activity.

We do not use your data for advertising purposes and we do not sell it to anyone.

ELO, rankings and matchmaking are calculated automatically, but this produces no legal effects concerning you and does not similarly significantly affect you within the meaning of Article 22 of the GDPR.

4. Who has access to your data?

Your data is processed by technical service providers acting on our behalf:

• Google Ireland Ltd (Firebase) — database hosting, in data centres located in the European Union, and authentication (signing in to your account), which Google processes in the United States.
• Resend — sending transactional emails.
• Google (Google Maps Platform) — displaying maps and searching for addresses, when you use these features.
• Expo — delivering push notifications, via Apple's (APNs) and Google's (FCM) services.
• Vercel — hosting the fivekick.be website.
• Hostinger — hosting our mailbox (the emails you send us at support@fivekick.be).
• RevenueCat, Inc. — managing and verifying Premium subscriptions purchased in the app (a technical identifier of your account and the purchase history passed on by Apple or Google, without any payment data).

When you subscribe to Premium, payment is made through Apple or Google, which process your payment data as separate controllers, under their own privacy policies.

When you book a pitch, you provide your information directly to the sports centre concerned, which is the controller of that data for that booking, under its own policy.

In addition, some information from your profile (first and last name, photo, ELO, statistics, team and its crest) is visible to other users of the app: this is at the heart of how matchmaking works.

5. Does your data leave the European Union?

Our database is hosted in the European Union. Some service providers do, however, process data in the United States, in particular Google for authentication, as well as Resend, Expo, Vercel and RevenueCat; in that case, transfers are governed by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework. A copy of these safeguards can be obtained on request at support@fivekick.be.

6. How long do we keep your data?

• Account data: for as long as your account is active, then deleted or anonymised when the account is deleted, within 30 days at the latest.
• Subscription data: kept for as long as your account is active, then deleted along with it. As payments are collected by Apple or Google, our accounting records are their statements, which do not contain your personal data.
• Match history and rankings: kept in anonymised form after the account is deleted, to preserve the integrity of other players' rankings.
• Messages: kept for as long as the conversation exists. The app does not yet offer deletion of individual messages: to request that your messages be erased, write to us at support@fivekick.be. After your account is deleted, messages you have already sent may remain visible to the other participants in the conversation.
• Reports: kept while they are being handled, then for one year for moderation follow-up purposes.
• Support emails: kept for two years after the last exchange.
• Technical data: the notification token is kept until you sign out or delete your account; technical logs are kept for 30 days.

7. What are your rights?

Under the GDPR, you have the following rights:

• Access — obtain a copy of your data;
• Rectification — correct inaccurate data;
• Erasure — request the deletion of your data;
• Restriction — ask us to temporarily suspend the use of your data;
• Objection — object to processing based on our legitimate interest;
• Portability — receive your data in a reusable format;
• Withdrawal of consent — at any time, for processing based on consent (e.g. location, which can be revoked in your phone's settings).

To exercise these rights, write to us at support@fivekick.be. We respond within one month, which may be extended by two months if the request is complex.

If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority (DPA) — Rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.

8. Cookies

The fivekick.be website does not use any tracking or advertising cookies. Only cookies that are strictly necessary for technical operation may be set; they do not require consent.

9. Security

Your data is protected by appropriate technical and organisational measures: encrypted communications (HTTPS), secure authentication, database access rules that limit reading and writing to the people concerned, and administrative access restricted to authorised persons only. We continuously improve these measures as the service evolves.

10. Minors

FiveKick is reserved for people aged 16 or over. If you become aware of an account created by someone under 16, contact us so that it can be deleted.

11. Changes

This policy may change as the app evolves. In the event of a substantial change, you will be informed via the app or by email. The date of the last update appears at the top of this page.

This page is a translation of the French version, which prevails in the event of a difference in interpretation, without prejudice to the interpretation most favourable to the consumer.