Privacy Policy

1. Who we are

Friendlify is operated by Doppietta Digital Ltd. In this policy, “Friendlify”, “Doppietta”, “we”, “us” and “our” mean Doppietta Digital Ltd. Doppietta is the controller of the personal data described in this policy, except where another organisation explains that it acts as a separate controller.

For privacy questions or requests, support@doppietta.digital.

2. Scope of this policy

This policy applies to the Friendlify mobile application, the Friendlify website and related support, account-confirmation and account-deletion services. It covers people who create or use an account, represent a Team or Club, publish or respond to a Friendly, send a message, buy Friendlify Pro, contact support or otherwise use the service.

Apple, Google and other third-party services have their own privacy notices for data they collect directly. Their handling of that data is not controlled by this policy.

3. Personal data we collect

Depending on how you use Friendlify, we collect:

• Account data: email address, authentication information, display name, account status and records of accepting current account requirements.
• Team and Club data: names, sport, category, level, description, selected city, region and country, and optional Club logos or Team badges.
• Friendly and match data: availability, dates, times, format, level, home or away preference, venue details, notes, facilities, requests, invitations, proposals and match history.
• Messages: text sent in a Friendlify conversation and related read or workflow status.
• Notification data: notification choices, installation identifier, device platform, push token and delivery status when notifications are enabled.
• Subscription data: Friendlify Pro product, entitlement status, renewal or expiry information and limited provider event information. We do not receive or store your full payment-card details.
• Support and safety data: correspondence you send us and, where a safety or moderation record is created, its status and relevant details.
• Technical and security data: session, request, delivery and error information needed to operate, protect and troubleshoot the service.

We do not use your device GPS or collect background location. Friendlify does not request access to your contacts, camera or microphone. The audited service does not use advertising, cross-app tracking or third-party analytics SDKs.

4. How we use personal data

We use personal data to:

• create, verify, secure and recover accounts;
• let authorised representatives create and manage Teams and Clubs;
• publish and discover relevant Friendlies, including by distance and compatible match details;
• process requests, invitations, proposals and confirmations;
• keep match conversations together and deliver service notifications;
• process and restore Friendlify Pro access and provide Pro features;
• provide support, protect users, moderate content where necessary and prevent misuse;
• maintain, troubleshoot and improve the reliability and security of Friendlify; and
• comply with legal obligations and establish, exercise or defend legal claims.

5. Our lawful bases

UK data-protection law requires us to identify a lawful basis for each use of personal data. Depending on the activity, we rely on:

6. Location data

Friendlify uses a location you select from a city and region catalogue for your Club, and you may enter venue information for a Friendly. We store the selected place and its catalogue coordinates so we can show nearby opportunities and calculate distance. We do not obtain your live location from your device.

Compatible users may see a Team's city, region and distance. Exact venue address, postal code and raw coordinates are not included in the audited public discovery results. Only enter a private address if it is appropriate to use it for organising the Friendly.

7. Messages and user content

Team, Club and Friendly information is visible to other users where needed for discovery and match organisation. Messages are text-only and are made available to the Teams participating in the relevant conversation. Do not include sensitive or unnecessary personal data in descriptions, notes, venue details or messages.

Optional logos and badges are uploaded to private storage, processed for safety and suitability, and displayed when approved. Authorised reviewers may access submitted media and moderation information where review is necessary.

8. Subscriptions and purchases

Friendlify Pro is bought through the Apple App Store or Google Play. Apple or Google processes the payment under its own terms. RevenueCat helps us validate purchases, restore access and manage entitlement status. We receive subscription product, status and expiry information, but not your full payment-card details.

9. Who we share data with

We disclose personal data only where needed for the purposes described above, including to:

• other Friendlify users, for Team discovery and shared Friendly, request, invitation, match and conversation workflows;
• Supabase, for authentication, database, storage, realtime and server functions;
• RevenueCat, to manage store purchases and Friendlify Pro entitlements;
• Apple and Google, for app-store purchases and device push delivery as applicable;
• Expo, to route push notifications to Apple or Google;
• Resend, through Supabase Auth, to deliver transactional authentication and password-recovery emails;
• our support-mailbox provider, to respond to correspondence;
• our website and infrastructure providers, to serve and secure the website and service; and
• professional advisers, regulators, courts or authorities, where reasonably necessary or required by law.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

10. International transfers

Some providers may process personal data outside the United Kingdom. Where a disclosure is a restricted transfer under UK data-protection law, we will use a route permitted by law, such as an applicable adequacy regulation or appropriate contractual safeguards, and assess additional protections where required. You can contact us for more information about safeguards relevant to your data.

11. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide the service, preserve appropriate shared match records, resolve support or safety issues, maintain security, comply with law and establish or defend claims.

The period depends on the type of record, whether an account remains active, whether other Teams need a shared record, the sensitivity and risk of the data, provider log settings, and applicable legal or operational requirements. When data is no longer required, we delete it or remove the information that identifies you.

12. Account deletion

You can request permanent deletion in the app or through the authenticated Friendlify account deletion page. We delete your Auth account, profile, account acceptances, owned media, notification registrations and local subscription entitlement association, together with open or unshared workflows that no longer need to exist.

A limited shared match or conversation record may remain in anonymised, non-identifying form where another Team legitimately needs that history. In that case, your Team is converted to a “Deleted team” record, identifying Team and location details are cleared, your message text is removed or redacted, and your sender identity is removed. Limited deletion-job status, de-linked provider event information and a one-way account hash may remain for security, retry safety and late billing-event protection.

Where a moderation or safety record involving the account needs to remain, identifying links, report details and moderator notes are removed in the implemented deletion process; a limited deleted-target marker may remain where necessary to preserve the record safely.

Deleting your Friendlify account does not cancel an Apple App Store or Google Play subscription. Store subscriptions must be cancelled separately with the relevant store.

13. Security

We use technical and organisational measures designed to protect personal data, including authenticated access, database access rules, private media storage, server-side authorisation and encrypted network connections. No online service can guarantee absolute security. Please use a strong, unique password and tell us promptly if you suspect unauthorised account access.

14. Your privacy rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for access to your personal data and a copy of it;
• ask us to correct inaccurate or incomplete data;
• ask us to delete personal data;
• ask us to restrict how personal data is used;
• receive certain data in a portable format;
• withdraw consent where processing relies on consent; and
• object to certain processing.

To exercise a right, support@doppietta.digital. We may need to verify your identity. Rights are not absolute, and we will explain if an exemption applies. You will not normally have to pay a fee, but the law allows a reasonable fee or refusal for requests that are manifestly unfounded or excessive.

15. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office. Information about making a complaint is available at ico.org.uk.

16. Age requirement

Friendlify accounts are for people aged 18 or over. Account onboarding requires users to confirm that they are at least 18 and are authorised to represent the relevant Team or Club.

17. Automated decision-making

Friendlify does not make decisions based solely on automated processing that produce legal or similarly significant effects. Search and discovery features use information such as sport, category, availability and distance to filter or order relevant opportunities, but they do not make a legally significant decision about you.

18. Website and device storage

The website uses browser storage when it needs to maintain a secure Supabase session for signup confirmation or authenticated account deletion. The mobile app stores session and notification-registration information on your device. We did not identify advertising, analytics or other non-essential cookies in the audited website. You can clear browser or app data through your device settings, although doing so may sign you out.

19. Changes to this policy

We may update this policy when Friendlify, our providers or legal requirements change. We will publish the revised policy here, change the “Last updated” date and, where appropriate, give additional notice or ask you to accept a new version before continuing to use the service.