Privacy Policy

Account data: email address, username, supported club, fan level, and points. If you sign in with Google, we receive your name, email, and profile picture from Google.

Content data: posts, comments, debate replies, match chat messages, poll votes, player ratings, watch party activity, and reports you submit.

Usage data: pages visited, features used, device/browser type, approximate location (from IP), and timestamps, used to operate and improve the service.

Notification data: your notification preferences and, if enabled, push subscription tokens.

• Provide core features: feed, clubs, live matches, debates, ratings, watch parties, rivalry system.
• Authenticate you and keep your account secure.
• Send match alerts, goal notifications, and club/rivalry updates you opted into.
• Moderate content — including automated AI-assisted moderation of posts and replies.
• Compute points, fan levels, and club dominance results.
• Analyse aggregate usage to fix bugs and improve the product.

We process your data on the following bases: performance of our contract with you (account, core features), legitimate interests (security, moderation, product improvement), consent (push notifications, optional analytics), and legal obligations (responding to lawful requests).

Some features use AI models: content moderation of posts and debate replies, and the AI football assistant. The text you submit to these features is processed by our AI provider solely to return the result. We do not use your content to train models. Do not submit personal data about other people to the assistant.

We do not sell your personal data. We share it only with:

• Infrastructure providers (cloud hosting, database, authentication) that process data on our behalf under contract.
• AI providers, for moderation and assistant features, limited to the submitted text.
• Other users — your username, club, level, and public content are visible to the community by design.
• Authorities, where legally required or to protect safety and rights.

We keep account and content data while your account is active. When you delete your account, personal identifiers are removed or anonymised within 30 days; content tied to public fixtures (e.g. match chat, debate archives) may be retained in anonymised form. Backup copies expire within 90 days.

You can:

• Access, correct, or export your data via your profile or by emailing us.
• Delete your account and associated personal data.
• Withdraw consent for push notifications at any time in your device/browser settings.
• Object to or restrict certain processing, and lodge a complaint with your data protection authority (EEA/UK users).

Requests: legal@fash.app. We respond within 30 days.

We use encryption in transit, row-level access controls on our database, and least-privilege access internally. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as required by law.

Fash is not directed at children under 13 (or 16 in the EEA/UK). We do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Data may be processed in countries outside your own, using appropriate safeguards (such as standard contractual clauses). We may update this policy; material changes will be announced in-app before taking effect.