Privacy Policy — Hattrick

Application name: Hattrick
Package name: com.dmait.hattrickapp
Developer: Damir Ibra (damirdeveloper)
Contact: hattrickdoo@gmail.com
Last updated: 26 April 2026

This Privacy Policy describes how the Hattrick mobile application (“Hattrick”, “the App”, “we”, “us”) — published on Google Play by damirdeveloper (Damir Ibra) — collects, uses, stores, and protects information when you use the App.

1. Who the App is for

Hattrick is a club-management application for football (soccer) clubs. It is used by three types of users: club administrators (ADMIN), coaches (TRENER), and parents of players (RODITELJ). Accounts are created by the club administrator; the App is not intended for direct sign-up by the general public.

2. Information we collect

Account data: full name, email address, phone number, role (ADMIN / TRENER / RODITELJ), and a securely hashed password.
Player data (entered by the club): child’s first name, last name, date of birth, category/age group, optional photo, and parent contact information. This data is entered by the club administrator on behalf of the parent.
Attendance, membership-fee, and medical/insurance status records that the club maintains for its operations.
Photos you choose to upload from the camera or photo gallery (e.g. player avatars, training images).
Push-notification token issued by Expo / Google so we can deliver club notifications (e.g. training reminders, membership reminders).
Technical data: device type, OS version, and crash/diagnostic logs needed to keep the App stable.

We do not collect precise location, contacts, SMS, call history, advertising IDs, or biometric data.

3. How we use this information

To authenticate users and authorise role-based access (admin/coach/parent).
To let the club manage categories, players, attendance, membership fees, and medical/insurance records.
To send push notifications related to club activities (training, payments, announcements).
To allow upload and display of player/training photos inside the App.
To diagnose crashes and improve the App.

We do not sell personal data, and we do not use it for advertising or profiling.

4. Children’s data

Hattrick stores information about minor players (children registered in the football club) on behalf of the club and the child’s parent or legal guardian. This data is entered only by the club administrator, who is responsible for obtaining the parent’s consent before entering such data. Parents may request correction or deletion of their child’s data at any time by contacting us at the email address above, or by asking their club administrator.

5. Service providers

We use the following third-party processors strictly to operate the App. They process data on our behalf under their own privacy and security terms:

Supabase (database, authentication, file storage) — supabase.com/privacy
Expo / Expo Application Services (EAS) (build, OTA updates, push delivery) — expo.dev/privacy
Google Firebase Cloud Messaging (Android push delivery) — policies.google.com/privacy
Google Play Services (app distribution, integrity) — policies.google.com/privacy

6. Permissions we request

Camera — to take photos for player/training avatars.
Photo library / media images — to pick existing photos for upload.
Notifications — to deliver club push messages.
Vibrate / receive boot completed — to support push notifications on Android.

You can revoke any permission at any time in your device settings.

7. Data retention

Account and club data are kept for as long as the club uses the App. If a user account is deleted by the club administrator, the personal data associated with that account is removed from the active database. Backups are rotated regularly and overwritten over time.

8. Your rights

You may request access to, correction of, or deletion of your personal data, or withdraw consent for push notifications, by contacting us at hattrickdoo@gmail.com. We will respond within a reasonable time frame and in accordance with applicable law (including the Serbian Law on Personal Data Protection and the EU GDPR where applicable).

9. Account & data deletion

To delete your account and associated personal data, send an email to hattrickdoo@gmail.com from the email address registered in the App, with the subject “Account deletion — Hattrick”. We will delete the account within 30 days. Player records entered by the club may be deleted by the club administrator from inside the App.

10. Security

Data is transmitted over HTTPS/TLS. Passwords are stored in hashed form by our authentication provider (Supabase). Access to data inside the database is restricted by role-based Row-Level-Security policies.

11. Changes to this policy

We may update this Privacy Policy. The “Last updated” date at the top of this page will reflect the most recent change. Material changes will be announced inside the App.

12. Contact

Hattrick — published by damirdeveloper (Damir Ibra).
Email: hattrickdoo@gmail.com