GJ Soccer Privacy Policy

1. Data controller and contact details

The data controller for the GJ Soccer project is Gianfranco Giannotta, Mergozzo (VB), Italy.

For privacy, rights and security: info@g-j-s.it or +39 351 773 4848. No data protection officer (DPO) has been appointed.

2. Data processed

Depending on the role and the features actually enabled, we may process:

• name, email address, role, date of birth and technical data required for authentication and security;
• football and school profile, activities, progress, XP, goals and voluntary check-ins;
• parent–child links, safeguarding requests, consent records and versions of accepted documents;
• clubs, teams, staff roles, calendar, communications, documents and private files when Club Hub is enabled;
• for the Tutor Marketplace: application, public profile, optional photo or video, declared qualifications and experience, subjects, languages, availability, prices, onboarding and 15-minute demo outcome, approved subjects, chats, requests, bookings, lessons and reviews;
• questions voluntarily submitted to AI, subject, derived age range, level, moderation outcome and minimal metadata; GJ Soccer does not save the text of the question or answer in its own database;
• orders, amounts, payment status and refunds when sales are enabled; full card details remain with the payment provider;
• security logs, audits and reports needed to prevent abuse and protect users.

Optional GJ Soccer Feedback, for adults aged 18 or over: if you choose to send it, we process the category, app or website area, language, message, request ID, “account” or “visitor” class, status and handling dates. For accounts, we temporarily verify the session and age; for every submission, we temporarily use the network address to create a secret anti-abuse HMAC code. We do not add a name, email address, account ID, IP address or device to the stored feedback. Do not enter personal, sensitive or children’s data in the text.

Only after an optional consent choice on the public website, we record one event for that browser tab: a random code, the time and the “public website” category. The code is transformed into a hash in the database. The counter does not record pages visited, referrer, account, name or email, and we do not use it for advertising or profiling. Only after a separate consent in the app, the app may also send one operational first-open signal, separated into native and Web versions, without linking it to an account.

The app can open the file picker or camera only after an explicit action by the adult. It does not request location or microphone access and uses neither advertising SDKs nor advertising identifiers in the verified version.

3. Purposes and legal bases

• Providing requested accounts and features: performance of the service and steps taken before entering into a contract.
• Safeguarding minors, security and abuse prevention: legal obligations and legitimate interests in providing a safe environment.
• Payments and records: performance of a contract and accounting or legal obligations, only when sales are active.
• Optional features or media publication: specific, revocable consent when required.
• Optional website and app analytics: consent under Article 6(1)(a) GDPR. Refusal does not limit the website or app. The minimal first-open signal is used only to measure aggregate starts of published versions, without profiling or account linkage.
• Optional feedback and abuse prevention: legitimate interests under Article 6(1)(f) GDPR in understanding real problems, improving GJ Soccer and protecting the channel from automated submissions. Not sending feedback does not limit the service; you may object by contacting us.
• Support and protection of rights: performance of the service, legitimate interests and legal obligations.

A parent’s authorisation of a minor’s account is separate from each optional privacy consent.

4. Providers and disclosures

When a feature is enabled in the version being used, we use the providers listed for that version. Supabase may manage authentication, databases and private files; OpenAI may be used in AI journeys reserved for adults; Stripe only when payments and tutor payouts are enabled; and Google Play only when Android distribution begins.

For the optional website counter and the app first-open signal, Supabase acts as a processor in the project’s EU region (Ireland). The database receives only the event type and a hash of the random code; during the HTTPS request, the provider’s technical logs may also contain the IP address, user-agent and network metadata. GJ Soccer does not use those logs to identify visitors.

For GJ Soccer Feedback, Supabase receives the request and stores the text and minimal metadata described above. Only the authorised GJ Soccer Founder can read and classify the queue, without added identity or IP data. Feedback is not sent to OpenAI, used for advertising or profiling, or shared with clubs or other users.

When Tutor transactions are active, Stripe may receive the identity, contact, verification, payment, transaction and payout data needed to collect payment from the parent and pay the tutor. Full card and bank-account details remain with Stripe according to the services actually used.

If a tutor voluntarily connects Google Calendar, GJ Soccer will use the permissions granted to create or update the lesson event and its Google Meet link. Access and refresh tokens will be stored encrypted and can be revoked by disconnecting Google; we do not access other Calendar data beyond the authorised scopes.

When an AI journey reserved for adults is enabled, OpenAI receives the content entered by the adult and the minimal data described above. Requests are sent with store:false; this is not the same as Zero Data Retention, and the provider’s abuse-monitoring logs may be kept for up to 30 days unless a different approved agreement applies. Data is not used to train models by default, unless the OpenAI account holder provides separate consent. Direct AI remains disabled for minors.

Some providers may process data outside the European Economic Area. Before enabling a feature in production, we verify the contract, region and applicable safeguard, such as an adequacy decision or standard contractual clauses.

5. Retention and deletion

Profile data is retained while the account is active and for the time strictly necessary to handle outstanding requests, security needs and applicable obligations. On deletion, access is suspended, links and consents are revoked, and some data is deleted or made no longer attributable to the user.

The website and app analytics choices remain on the device for six calendar months. If accepted on the website, the random session code lasts only until the tab closes or consent is withdrawn; its database hash expires after 31 days. If accepted in the app, the first-open signal hash expires after 90 days and may be added to a daily total without identifiers. An automatic process removes expired hashes in the next hourly cycle. In the current configuration, Supabase API technical logs remain available for no more than 24 hours; only aggregate totals without identifiers may be retained to compare use over time.

GJ Soccer Feedback content is deleted at the earlier of 12 months after creation and 90 days after closure. Anti-abuse HMAC codes become eligible for deletion after 48 hours and are removed in the next hourly cycle. Supabase technical logs follow the 24-hour maximum stated above.

When a Study or Football AI journey is enabled in the version being used, uploaded raw files are deleted after processing and the planned technical checks; only the authorised result and minimal metadata needed for security, counters and audit may remain.

Tutor Marketplace chats will be kept for up to 180 days from the last message and then deleted or made no longer attributable to users, unless a report, dispute, security risk or applicable obligation requires longer limited retention. Bookings, payments, payouts, refunds and proof of acceptance may follow applicable accounting or rights-protection periods.

Proof of acceptance, pseudonymised audit data and essential accounting information may be retained for the period required by law or needed to protect rights. Providers and backups follow separate technical deletion cycles. We do not promise immediate deletion from backups.

Full instructions are available on the Account deletion page.

6. Your rights

You may request access, rectification, erasure, restriction, portability and object to processing; you may withdraw consent without affecting processing carried out beforehand. You may also lodge a complaint with the Italian Data Protection Authority.

You can reject, review or withdraw website analytics at any time through “Review analytics choices” in the footer, and app analytics through Profile > Account, documents and deletion. Withdrawal prevents new measurements and removes local analytics codes from the device.

Write to info@g-j-s.it. We may ask for proportionate identity verification, without requesting passwords or access codes by email.

7. AI and automated decisions

When AI is active, it may make mistakes and will not replace parents, teachers, coaches, doctors or other professionals. GJ Soccer will not use it for decisions with legal or similarly significant effects concerning the selection, discipline or worth of a child.

When the feature is available, you will be able to report an answer through the app tools or support. The report will retain the category and necessary metadata, not the full text of the answer in the GJ Soccer database.

8. Tutor Marketplace in preparation

An application may be reviewed by authorised people using the profile, declared documents or experience, the 15-minute demo and an assessment form. The outcome and approved subjects will be recorded; onboarding is not a solely automated decision and does not guarantee assignments or earnings.

When the service is active, the approved profile and verified reviews may be visible to parents. Chats, bookings and lessons will be accessible only to the adults involved and authorised staff for support, safety or disputes. Tutor transactions remain in preparation until payments, payouts and the Google connection are shown as active in the version being used.