← OverGame
OverGame Privacy Policy
Effective date: 16 September 2026
1. Introduction and data controller
This Privacy Policy explains how OverGame ("we", "the App") collects, uses and protects the personal data of people who use the OverGame mobile application for iOS and Android.
Data controller: Andrea De Piccoli — email dev.overgame@gmail.com.
2. Data we collect
2.1 Data you provide
- Account: name, email address, password (stored only in encrypted form by the authentication provider)
- Profile: display name, profile photo, kit size, playing position and shirt number
- Teams: name, sport, logo, members and roles
- Events: title, date, location (an address or coordinates you pick on the map), responses and attendance
- Payments and fines: amounts, descriptions and status recorded within the team. The App does not process payments between members and does not collect credit card details
- Medical certificates: documents and expiry dates you choose to upload. These are health data (Art. 9 GDPR), processed only on the basis of your explicit consent, given by uploading the document, and visible only to you and to the team's owners/admins
2.2 Data from third-party services
- Sign in with Google: name, email, profile photo
- Sign in with Apple: name, email (including Apple's private relay address)
- Premium subscriptions: from the App Store or Google Play we receive the product and transaction identifiers and the purchase date. Payment is handled entirely by Apple or Google: we never receive your payment details
2.3 Data that stays on your device
- Location: if you allow it, your current location is used only to centre the map when you pick an event's location. It is neither stored nor sent to our servers
- Camera and photos: used only when you choose to scan a QR code or upload an image or document
- Notifications: reminders (upcoming events, certificate expiry) are local notifications scheduled on your device
2.4 Usage statistics
To understand how the App is used and improve it, we use Google Analytics for Firebase, which collects statistical usage data:
- What: screens visited and main actions (e.g. signing in, creating a team or an event, recording a payment or a fine, buying Premium) without their content: titles, amounts, names and notes are never sent
- Technical information: device model and operating system, App version, language, approximate country/region (derived from the IP address, which is not stored), a random installation identifier and your account's internal identifier (not your name or email)
- No advertising identifiers (IDFA/Android advertising ID) and no data sharing with Google for advertising purposes
- Retention: at most 14 months, after which the data is deleted automatically
- How to turn them off: Profile → Options → Usage statistics. When turned off, the App stops sending data and deletes the installation identifier
The App does not show ads, does not track you across third-party apps and websites, and does not collect advertising identifiers.
3. Purposes and legal bases
- Providing the service (account, teams, events, payments, fines, certificates): performance of a contract (Art. 6(1)(b) GDPR)
- Medical certificates: explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time by deleting the document
- Managing subscriptions: performance of a contract
- Security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR)
- Usage statistics to improve the App: legitimate interest (Art. 6(1)(f) GDPR); you can object at any time by turning them off in Options
4. Who we share data with
We do not sell your data. We share it only with:
- Other members of your teams: name, profile photo, role, event attendance, and the team's payments and fines. Medical certificates are visible only to owners/admins
- Technical providers processing data on our behalf: Supabase (database, authentication, file storage), Google (Sign in with Google; Google Analytics for Firebase for usage statistics), Apple (Sign in with Apple), Apple App Store and Google Play (subscriptions), OpenStreetMap (map tiles, no personal data)
- Authorities, where required by law
5. Transfers outside the EU
Some providers may process data outside the European Union. In those cases the transfer is based on the European Commission's Standard Contractual Clauses or on an adequacy decision.
6. Security
- Encrypted connections (HTTPS/TLS)
- Database-level access rules: each user sees only the data of the teams they belong to
- Medical certificates stored in a private space that is not publicly accessible
7. Retention and account deletion
We keep your data for as long as your account is active. You can delete your account at any time:
- In the App: Profile → Options → Delete account
- Without the App: by following the instructions on this page
Deletion immediately removes your profile, photo, team memberships, event responses, medical certificates, and personal fines and payments. Teams you own are transferred to another member or, if there are no other members, deleted. Backup copies are overwritten within 30 days.
Subscriptions purchased through the App Store or Google Play are not cancelled automatically: cancel them from your store account settings.
8. Your rights
Under the GDPR you can request access to, rectification, erasure, restriction or portability of your data, object to processing and withdraw your consent. Write to dev.overgame@gmail.com: we reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
9. Children
The App is intended for users aged 14 and over. We do not knowingly collect data from children under 14: if you believe this has happened, contact us and we will delete it.
10. Changes
We may update this Privacy Policy. We will notify you in the App of any significant changes.
11. Contact
Last updated: 18 September 2026