MyCoachPlanner Privacy Policy

MyCoachPlanner Privacy Policy Effective date: 13 October 2026 1. Who is responsible and how to contact us FUNTACTIC DOO BEOGRAD-NOVI BEOGRAD, Radoja Dakića 11, Beograd, Serbia, is the controller for MyCoachPlanner account, security, billing, support, and its own operational processing. Contact support@mycoachplanner.app for privacy questions or requests. For roster, athlete, and related coaching content entered by a coach or club, that coach or club is the controller and FUNTACTIC acts as its processor to provide MyCoachPlanner. FUNTACTIC may separately be a controller for limited security, audit, or legal-obligation purposes. A coach or club must have appropriate authority and a lawful basis for personal data it enters, including private data about minors. A minor's private roster entry does not itself require an in-app parental-consent workflow; this does not remove any consent or other legal requirement applicable to that coach or club. An authorized coach or club may create a time-limited Live Score public link showing team names, scores and game statistics. Quick Game individual public rows contain jersey numbers and game statistics at every age, never player names or photographs. Regular roster-based games show individual rows only where purpose-specific public box-score approval is recorded; otherwise team-level Live Score remains available. Names and approved photographs are off by default. For a regular game, an authorized coach may separately enable them only after confirming that all rostered players are adults and that appropriate publication authority exists. Minors and uncertain-age players remain jersey-number-only. Public views omit private roster identifiers and profile links. A jersey number can still identify a player to someone familiar with the team. These public settings do not change private coach or club roster access. Where separately approved and validly agreed by the responsible coach or club, the Customer Data Processing Addendum sets out the processor terms for that customer-controlled content. Acceptance of the Terms or acknowledgement of this Privacy Policy alone does not make that Addendum effective. 2. Information processed Account and identity data include name, email, account identifiers, organization and workspace membership, login and session records, and Terms/Privacy evidence. Coaching data can include teams, seasons, rosters, athlete details and optional photographs entered by a coach or club, practices, exercises, plays, game events, and reports. If an adult-identity Live Score link is explicitly enabled, approved names and photographs may be viewed by anyone with that link until it expires or is revoked. Billing data include billing country, selected plan, order, invoice or transaction references, subscription status, payment-confirmation evidence, and refund or dispute records. MyCoachPlanner's payment integration does not receive or store full card numbers or CVV. Paddle handles card entry; its events may contain limited card metadata such as brand/type, last four digits, expiry and cardholder name. The verified event data can be retained in MyCoachPlanner's payment-event inbox for processing and reconciliation. Support data include requests and correspondence you send; please do not send card details or passwords. Operational data include limited service, security, audit, error, and availability records. Offline game commands may also be stored in the browser for later synchronization; they are not authentication-session records. 3. Why the data is processed Account, workspace, and session data are used to provide and secure the service, authenticate users through our self-hosted Keycloak, enforce membership and tenant separation, and administer subscriptions. Billing data are used to process purchases through Paddle where available, provide or remove paid authority only after verified payment events, answer billing questions, and meet applicable accounting, tax, refund, chargeback, and legal obligations. Support data are used to answer requests. Limited operational logs are used to maintain availability, investigate faults, prevent abuse, and protect accounts and the service. For FUNTACTIC's controller activities, the legal bases are performance of the service contract for account and service delivery, applicable legal obligations for required billing/legal evidence, and legitimate interests in security, abuse prevention and reliable operation where those interests are not overridden by individual rights. Support processing follows the nature of the request and the applicable contract, legal obligation or legitimate interest. Processing of coach/club-controlled roster and athlete content is performed on that controller's documented instructions under the applicable processing terms. Acknowledging this notice is not blanket consent to all processing. 4. Providers and access Hetzner hosts the production server and database in Nuremberg, Germany. Encrypted database base backups and associated offsite write-ahead logs (WAL) are stored in private Hetzner Object Storage in Nuremberg, Germany for recovery. Access to application object storage and backup storage is separated. Keycloak is self-hosted authentication software on the production server, not a separate external identity provider. For eligible international purchases processed through Paddle, Paddle is the Merchant of Record and an independent controller for its own buyer and payment processing. Paddle's own privacy notice describes its processing and international disclosures; its retention is not set by MyCoachPlanner's local log settings. Grafana Cloud receives limited operational and backup-health telemetry for service reliability, security and backup alerting. The production Grafana stack is in AWS eu-west-2 (United Kingdom). The current Free plan has standard 14-day retention for telemetry held by Grafana; this does not set retention for application records, local operational or security logs, or encrypted backups. Grafana may use international or onward processing. Its published Data Processing Agreement, version 2026.04.02, describes EU Standard Contractual Clauses and UK transfer mechanisms where applicable. FUNTACTIC has signed and emailed that agreement to Grafana; Grafana's receipt and the agreement's effectiveness have not yet been independently verified. Hostinger provides the support@mycoachplanner.app mailbox for receiving and replying to support requests. Its Data Processing Addendum covers Email Services and discloses subprocessors including AWS EMEA, Google Cloud EMEA, Cloudflare, MailChannels and Proofpoint. This list does not mean each subprocessor handles this mailbox. Support correspondence may be processed by Hostinger and applicable subprocessors in their locations; the exact physical storage location of this mailbox has not been verified. Hostinger's Addendum includes EU Standard Contractual Clauses and UK transfer mechanisms for transfers to which they apply. FUNTACTIC operates from Serbia, and authorized personnel in Serbia may access limited data for support, security, billing and operations. Hosting in Germany does not mean all processing or access stays in the EU/EEA. Grafana and Hostinger may involve international or onward processing, subject to applicable transfer requirements and safeguards. Their EU or UK contractual mechanisms must not be assumed to cover access from Serbia or every transfer involving Serbia; that treatment requires separate legal validation. Information about applicable safeguards and how to obtain a copy can be requested through the privacy contact above. We do not intentionally send coaching content to operational telemetry. We do not sell user or athlete data. 5. Retention We retain account and coaching content while needed to provide the service. After an account or workspace closes, applicable data is deleted or anonymized when it is no longer needed to complete closure, meet legal obligations, protect the service, resolve disputes, or meet legitimate operational requirements. A submitted request is not treated as completed until applicable deletion has been performed and verified. Continued retention is limited to the relevant purpose; closure does not automatically erase records belonging to another controller or workspace. Session data is retained only as needed for authentication and security, subject to normal session expiry and logout behavior. Operational, security and audit logs are retained only for the limited period needed for reliability, security, fraud prevention, investigation or legal obligations. Encrypted backups in Hetzner Object Storage follow the production backup lifecycle for recovery; they are not used to restore deleted data into ordinary active use. Billing and legal evidence is retained according to applicable accounting, tax, refund, chargeback and other legal requirements. We review retained data and delete or anonymize it when the relevant purpose or obligation ends, subject to a valid, documented preservation requirement. 6. Your rights and choices Subject to applicable law and verification of identity, you may request access, correction, deletion, restriction, objection, or portability. You may also complain to an appropriate data-protection authority. Contact support@mycoachplanner.app. For coach/club-controlled athlete or roster content, we may refer the request to the responsible coach or club and assist it in responding. We will explain any legal limitation or retained evidence rather than silently refusing a request. 7. Changes The service displays the current version and effective date of this notice. If it changes, a new immutable version is published and the service separately records acknowledgement of the current notice where required. An acknowledgement is evidence that the notice was read, not a general legal basis for every processing activity.