Legal

Privacy Policy

MatchUp mobile application and matchup-team.com · Last updated: 11 September 2026

This Privacy Policy explains what personal data we collect when you use the MatchUp mobile application (“MatchUp”, “the app”) and our website, why we collect it, who we share it with, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR).

1. Who we are

The controller of your personal data is:

2. What data we collect

We never see or store your payment card details. Card data is entered and processed exclusively by our payment provider (Stripe). We only receive the result of the payment and a customer record identifier.

We receive data directly from you, automatically when you use the app or website, from Google or Apple when you use one of these sign-in methods, from Stripe regarding payment status, and from the coordinator and other participants regarding attendance, game results and ratings.

Your name, email address or phone number and the data needed for bookings and payments are required to create an account and book games — without them we cannot provide the service. Access to location and notifications is optional.

If you bring guests, we do not collect their personal data — the coordinator only records their attendance under your booking.

MatchUp is intended for users aged 18 and over. We do not knowingly collect personal data from children. If we become aware that a user under the age of 18 has provided us with personal data, we will take steps to delete the data and restrict the account.

3. Legal bases for processing

• Performance of a contract (Art. 6(1)(b) GDPR) — creating your account, booking games, processing payments and refunds.
• Consent (Art. 6(1)(a) GDPR) — access to your device location and push notifications, as well as the waitlist and non-essential cookies, where used. You can withdraw your consent at any time in your device or website settings.
• Legitimate interest (Art. 6(1)(f) GDPR) — security of the service, prevention of abuse and fraud, handling requests and ensuring compliance with the rules.
• Legal obligation (Art. 6(1)(c) GDPR) — retention of accounting and tax records and disclosure of data to public authorities where required by law.

Booking confirmations and messages about game cancellations or changes, refunds and security issues are service-related messages, not advertising.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who we share data with

We do not sell or rent your personal data and we do not share it for advertising purposes. We use the following processors, each of which receives only the data necessary for its function:

• Google Firebase (Google Ireland Limited / Google LLC) — authentication, push notifications and storage of profile pictures.
• Stripe (Stripe Payments Europe, Limited and affiliates) — payment processing and refunds.
• Google Maps (Google Ireland Limited) — displaying the map and the location of venues.
• Hetzner Online GmbH (Germany) — hosting of our servers and database.
• Cloudflare (Cloudflare, Inc. / Cloudflare Ireland Ltd.) — hosting and delivery of the matchup-team.com website, protection against attacks and bots.
• Resend (Resend, Inc., USA) — sending service emails: sign-in emails, booking and payment confirmations, notices about game changes and cancellations. Emails are sent from servers in the EU (Ireland); delivery logs and metadata are stored in the USA.
• Brevo (Sendinblue SAS, France) — sending waitlist emails. Data is stored on servers within the EU.

Other participants in a game you join can see your first name, profile picture and public profile information, including your statistics and reviews left about you, unless you hide them in the privacy settings in the app. They cannot see your email address, phone number, location or payment information.

The coordinator receives the information necessary to organise the game and record attendance and the result.

We may also share data with:

• professional advisers where necessary to comply with legal obligations or protect our rights;
• courts and public authorities where required by law;
• a successor entity in connection with a reorganisation, merger or sale of the company;
• other recipients with your consent.

Some of these providers may process data outside the European Economic Area. Such transfers are covered by the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework or another safeguard permitted by Chapter V of the GDPR.

5. How long we keep data

• Account and profile data — for as long as your account exists; what we keep after deletion is described in section 7 and on the account deletion page.
• Booking and payment records — for the period required by Czech accounting and tax legislation, even after your account is deleted.
• Participation data, complaints and account restrictions — for as long as your account exists and for any additional period necessary to resolve disputes and protect our rights.
• Support communications — until your request has been resolved and for any additional period necessary to handle potential claims.
• Technical logs — for a limited period necessary for security and diagnostics.
• Waitlist email address — until you unsubscribe or until 12 months after launch, whichever comes first.
• Game chat messages — for 12 months after the game takes place, after which they are deleted; a reported or hidden message may be kept longer where this is necessary to handle the report.

6. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict processing or object to it;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights, write to matchupsportapp.team@gmail.com or matchupteam@seznam.cz. We will respond within one month.

You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

7. Deleting your account

You can delete your account directly in the app, or request deletion by email. The procedure and what exactly is deleted are described on the account deletion page.

Deleting your account also cancels your upcoming bookings (with a full refund before the cancellation deadline, without a refund after it — see the Terms of Use). We then send you one confirmation email summarising the cancelled bookings and refunds; it is the last email we send to that address.

When you delete your account, we delete your email address, phone number, sign-in identifier, profile picture and push notification tokens. Your name, profile details, statistics, ratings and reviews remain in a deactivated profile that nobody can open or sign in to; in the line-ups of games you played, other participants see only your first name and the initial of your surname. We keep them on the basis of our legitimate interest in preserving the game history and other players’ statistics and in handling possible disputes. You can object to this processing by writing to us.

Data required to complete an active booking, issue a refund, resolve a dispute or comply with legal obligations may be retained for as long as necessary. Such data will then be deleted or anonymised.

8. Cookies

The matchup-team.com website uses strictly necessary cookies and similar technologies to operate the website, maintain security (including bot protection) and remember your selected settings, such as the language.

We do not currently use analytics or other non-essential cookies. If we introduce them, they will be enabled only with your consent, which you will be able to change or withdraw at any time.

9. Security

All communication between the app and our servers is encrypted in transit (HTTPS/TLS). Access to production data is limited to authorised members of our team.

We take reasonable technical and organisational measures to protect your data. However, no method of transmitting or storing information can guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy. The current version is always available at this address, with the date of the last update at the top. If a change materially affects you, we will notify you in the app or by email.

11. Waitlist and launch emails

If you leave your email in the waitlist form on matchup-team.com, we process it separately from your app account:

• What we collect — your email address, the language of the website and the date, time and IP address of your confirmation.
• Why — to send you the launch announcement and an invitation to use the app. We do not use these addresses for anything else and we never pass them to third parties for their own marketing.
• Legal basis — your consent (Art. 6(1)(a) GDPR), given by ticking the box and then confirming your subscription through the link in the email we send you (double opt-in).
• Withdrawing consent — every email contains an unsubscribe link; you can also write to us and we will delete your address from the list.
• Processor — Brevo (Sendinblue SAS, France), servers in the EU.

12. Contact

Questions about privacy: matchupsportapp.team@gmail.com · matchupteam@seznam.cz