Privacy Policy

Last updated: 25 June 2026

This is an informational English translation. The Polish version is legally binding.

1. Data controller

The controller of personal data processed in connection with the Laga mobile app and lagaidoprzodu.pl is Patryk Stopczyński, conducting business as StopQA, tax ID (NIP) 8943052144, address: ul. Daktylowa 11/20, 54-054 Wrocław, Poland, e-mail: support@lagaidoprzodu.pl.

2. Scope

This policy explains what data we collect, why we process it, who we share it with, and your rights. It supplements the Terms of Service.

3. Data we process

• Phone number — login and OTP SMS verification; account identifier.
• Profile data — first name, last name, e-mail, role (coach or player).
• Team data — team name, optional crest image, schedule, squad, shirt numbers, roles (captain, goalkeeper), attendance responses, match lineups.
• Data visible within a team — coaches see players’ names and phone numbers in the squad; members see names and team-related data.
• Push token — device identifier for team event notifications (with consent).
• Coach subscription data — purchase identifiers and access status via RevenueCat and Apple/Google stores (coaches only).
• Technical and diagnostic data — error reports (Sentry), product analytics (PostHog), basic server logs.
• On-device data — login session, read cache, and offline attendance queue; cleared on logout.

We do not collect date of birth at registration, GPS location, or contact list access. We do not read your SIM card number — you enter your phone number yourself.

4. Purposes and legal bases (GDPR)

• Providing the app service — Art. 6(1)(b) GDPR (contract).
• Authentication and security — Art. 6(1)(b) and (f) GDPR.
• Coach subscription — Art. 6(1)(b) GDPR.
• Push notifications — Art. 6(1)(a) GDPR (consent).
• Analytics and diagnostics — Art. 6(1)(f) GDPR (legitimate interest).
• Support and complaints — Art. 6(1)(f) GDPR.

5. Device permissions and local data

• Camera — scan team invite QR codes; images are not stored on our servers.
• Photo library (read) — select team crest; uploaded as team logo.
• Photo library (save) — save generated match lineup PNG locally.
• Push notifications — team event alerts; token stored while enabled.
• Maps navigation — opens external maps with event address text; no GPS collection.
• Phone calls — coach may tap a player number; we do not record calls.

6. Sharing lineups outside the app

Coaches may generate a lineup graphic (PNG) with player names and share it via the system share sheet. We do not control where it is published. The coach is responsible for compliance with law, including minors’ image rights.

7. External sources (90minut.pl)

League tables and schedules may be fetched from public 90minut.pl pages. We do not send user personal data to 90minut.pl.

8. Processors

We use trusted providers including SMSAPI.pl, DigitalOcean, Supabase, Sentry (EU), PostHog (EU), RevenueCat, Apple, Google, and Expo.

9. Transfers outside the EEA

We generally process data in the EEA. Some providers may process data elsewhere using GDPR-compliant safeguards.

10. Retention

Account data is kept until account deletion. Coach deletion also removes their team data. Subscription records are kept as required by law.

11. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection, and complaint to the Polish supervisory authority (UODO). Delete your account in the app: Account → Delete account, or e-mail support@lagaidoprzodu.pl.

12. Security

We use HTTPS/TLS, secure session storage, and access controls. No method is 100% secure; we apply reasonable measures.

13. Changes

The current version is at lagaidoprzodu.pl/privacy/en. Material changes will be communicated in the app or by e-mail.