Effective date: 2026-05-05 · Last updated: 2026-10-14
Ελληνικά (σύνοψη): Η KickR επεξεργάζεται δεδομένα λογαριασμού, προφίλ, φωτογραφίες, ματς/κρατήσεις, τηλέφωνα επικοινωνίας κράτησης, δεδομένα ιδιοκτητών γηπέδων, tokens ειδοποιήσεων και (προαιρετικά) τοποθεσία στη συσκευή για Nearby. Υπεύθυνος επεξεργασίας: Konstantinos Michaelides, Κύπρος. Δικαιώματα GDPR: επικοινωνία const.michaelides@gmail.com ή διαγραφή λογαριασμού. Αρχή: Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Κύπρος).
This Privacy Policy explains how personal data is collected and used when you use KickR (iPhone app, Android app, and related websites at links.kickr-app.com and legacy Firebase Hosting domains, together the “Service”).
KickR is operated by Konstantinos Michaelides, an individual (“I”, “me”, “my”), based in Cyprus. I am the data controller under the EU GDPR and Cypriot law for personal data processed through KickR.
Data controller: Konstantinos Michaelides (Cyprus)
Support: kickr.application@gmail.com
Privacy / legal / data-subject requests:
const.michaelides@gmail.com
Supervisory authority (Cyprus): Commissioner for Personal Data Protection — www.dataprotection.gov.cy.
KickR helps people organise football matches: create and join lobbies, invite players via links, browse fields, request or manage bookings with venues, optional nearby-distance sorting, push notifications about lobby activity, profile/venue photos, and field-owner tools (venue profiles, calendars, external/phone blocks).
| Category | Examples (as implemented in KickR) |
|---|---|
| Account & auth | Firebase Authentication UID; email/password, Google Sign-In, or Sign in with Apple on iPhone; email verification status; guest (anonymous) sessions that persist on the device. |
| Profile | First/last name, display name/nickname, account email, profile photo URL in Firestore users. |
| Photos | Profile and venue images in Firebase Storage; may appear in lobbies/rosters or public venue listings. Automated safety scanning (Google Cloud Vision SafeSearch where enabled); user photo reports; moderation queue / quarantine / rejection metadata. |
| Match & lobby | Field, format, times, pricing, participants, join/leave, guest join requests, random team assignments, squad-fill checkpoints/status, cancellation reasons, late-leave flags where applicable. |
| Booking contact | Host contact name and booking phone for certain bookings — shared with the relevant field owner so they can contact you about the reservation. |
| Owner / venue | Owner applications; venue name, address, map pin (GeoPoint), postal code, contact phone, schedules, field details, venue photos; external/walk-in time blocks entered by owners. |
| Push notifications | FCM device tokens on the user profile; used for lobby join alerts and squad-fill phase reminders when notification permission is granted. |
| Location (optional) | Approximate/precise device location only while using Nearby on Select Field (after in-app explanation + system permission). Used on-device for distance/sorting. Not stored on KickR servers in the current version. Map/geocode queries may go to Google Maps services. |
| Device / local | Language preference, guest resume match id, limited local prefs (SharedPreferences). |
| Security / ops | Upload rate limits (quota docs), Cloud Function / diagnostic logs, abuse-prevention signals. |
| Support | Emails you send to support or privacy addresses; account-deletion requests. |
Match visibility: new matches are created as private (invite-based). A public/discoverable mode may be offered later; until then, private matches are not listed for open discovery in the app.
Personal data is not sold.
KickR runs on Google infrastructure. Data may be processed in the EEA and/or other countries. Where required, transfers rely on safeguards provided under Google’s service terms (for example Standard Contractual Clauses or other lawful mechanisms described by Google).
Reasonable technical and organisational measures are used (access controls, HTTPS in transit via the platforms we use, upload quotas, photo safety checks). No service is 100% secure. Protect your credentials and device.
Under GDPR (where applicable) you may request access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Contact const.michaelides@gmail.com or use account-deletion.html. You may complain to the Cypriot Commissioner or another competent EU authority.
KickR is not directed at children under 16 (or a higher age required by local law). Do not use the Service if you are under that age.
Public pages and match invite links are hosted at
https://links.kickr-app.com
(and legacy football-organizer-flutter.web.app /
football-organizer-flutter.firebaseapp.com). Invite URLs look like
https://links.kickr-app.com/m/<matchId>. Opening an invite may show limited match summary
information needed to join.
On iPhone, deletion starts in the profile menu and removes the account immediately, including the Sign in with Apple link. You can also request deletion via that menu or https://links.kickr-app.com/account-deletion.html (works without installing the app). See that page for what is removed and what may remain briefly (e.g. anonymised booking history, legal holds).
This Policy may be updated. The “Last updated” date will change. Material changes may be highlighted in the app or on the website where practical.
Privacy:
const.michaelides@gmail.com
Support:
kickr.application@gmail.com
This document describes KickR’s current practices for transparency (GDPR Art. 13/14 and Google Play User Data expectations). It is not a substitute for personalised legal advice.