Privacy Policy
This policy explains what personal data the TabellToppen app (“the app”) processes, why, and your choices. The app is developed and provided by Johan Wellander (“I”, “we”), who is the data controller.
Contact: johanwellander98@gmail.com
1. What the app does
TabellToppen lets you create tournaments among friends, log matches across several sports, and follow standings and statistics. You can use it only on your device, or sign in to share tournaments with friends via an invite code.
2. Data stored only on your device
Without signing in, your tournaments, sports, players, matches and app preferences (e.g. dark mode, board settings, a cached Pro status) are stored locally on your device. We do not receive this data. It stays until you use Settings → Clear all data on this phone or uninstall the app.
3. Data we process when you sign in
Signing in is optional and is done with Sign in with Apple or Sign in with Google. When you sign in and use shared tournaments, we store in our cloud database:
- Account data: a unique user ID, the email address provided by Apple or Google (with Apple this may be a private relay address), and your name if the provider shares it.
- Profile: your display name (initially taken from your Apple/Google name or email, editable in Settings).
- Tournament content you create or join: tournament names and settings, invite codes, membership and role (owner/member), sports, player names (and, if linked, which player is you), matches including dates/times, teams, scores and results.
- Technical data needed for sign-in and sync: authentication/session tokens and standard server logs (e.g. IP address, timestamps) kept by our hosting provider for security and operation.
Other members of a shared tournament can see that tournament’s content, including player names, match results and members’ display names.
4. Subscriptions (TabellToppen Pro)
TabellToppen Pro is an optional auto-renewing yearly subscription purchased through the App Store (or Google Play). Payment is handled entirely by Apple (or Google); we never see your card or payment details. We use RevenueCat to validate purchases and determine whether Pro is active. RevenueCat receives an app user ID (your account’s user ID when signed in, otherwise a random anonymous ID), purchase/transaction information from the store, and basic device and app information (e.g. platform, app version, country/currency) needed to process subscriptions.
5. Service providers (processors)
- Supabase — authentication and database hosting, located in the EU (Ireland, AWS eu-west-1).
- Apple — Sign in with Apple, App Store purchases and app distribution.
- Google — Sign in with Google (and Google Play purchases on Android).
- RevenueCat — subscription purchase validation and entitlement status.
Each provider processes data under its own terms and privacy policy. Some providers (e.g. RevenueCat, Apple, Google) may process data outside the EU under appropriate safeguards such as Standard Contractual Clauses.
6. What we don’t do
- No advertising and no ad networks.
- No third-party analytics or tracking SDKs, and no tracking across other companies’ apps or websites (no use of the advertising identifier).
- We do not sell or rent your personal data.
7. Why we process data (legal basis)
We process data to provide the features you ask for — sign-in, syncing and sharing tournaments, and the Pro subscription (performance of a contract) — and to keep the service secure and working (legitimate interest). We may disclose data if required by law.
8. Retention
Cloud data is kept for as long as your account exists. When you delete your account, your data is deleted immediately from our live database; it may remain in our hosting provider’s routine backups for a short period until those are overwritten. Purchase records held by Apple/Google and RevenueCat are retained by them as required for accounting and legal purposes. Local data stays on your device until you clear it or uninstall the app.
9. Deleting your account
You can delete your account at any time in the app: Settings → Account → Delete my account. This permanently deletes:
- your login (authentication account) and profile;
- every shared tournament you created, including its sports, players and matches — for all members;
- your membership in tournaments created by others (the owner’s tournament stays, but it is no longer linked to your account).
Deleting your account does not cancel an App Store subscription. Cancel it in your Apple ID settings (Settings → your name → Subscriptions). You can also email us to request deletion.
10. Your rights
Under the GDPR you may request access to, correction, deletion or restriction of your personal data, object to processing, and request data portability. Contact us at the email above. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.
11. Children
The app is not directed at children under 13. If you believe a child has provided personal data without parental consent, contact us and we will delete it.
12. Changes
We may update this policy. The effective date above shows the current version; material changes will be announced in the app or on this page.