Privacy policy
Last updated: August 23, 2026
This is a translation of the French policy, provided for convenience. Gameday is published in France and governed by French law: in case of any difference, the French version is the one that applies.
Gameday is a football club's app: the staff posts the playbook, the call-ins and the depth chart; each player sees what concerns them. This page explains, without jargon, what data we handle, why, who can see it and how you keep control of it.
1. Who is responsible
Gameday is published by Nexflow (Arthur Cissac, sole proprietorship, Île-de-France, France), the data controller under the GDPR. Contact: contact@nexflow.agency.
Your club (its coaches) decides what gets posted in the app (playbook, call-ins, depth charts). Nexflow provides the tool and hosts the data.
2. What we collect
We only collect what you enter yourself or what the app needs to work. There is no analytics tool, no advertising and no third-party tracker.
| Data | Why | Who sees it |
|---|---|---|
| Email, password (hashed), or Google / Apple identifier | Create your account and sign you in | You; never shown to other members |
| First name, last name, date of birth, jersey number, positions, height, weight, experience, background, photo | Your profile in the team; showing your assignments based on your positions | The members of your club (teammates and staff) |
| Phone, Instagram, Facebook (optional) | So your teammates can reach you | The members of your club; on a swap-meet listing, your phone number only appears if you check « Show my phone number » |
| Emergency contact (name, phone, relationship) and medical notes (optional) | React quickly if you get hurt at practice or in a game | Your teams' staff only. Never your teammates. This is sensitive data: only fill in what you want the staff to know. |
| Sports stats (games, yards, tackles, physical measurements…) | Track your progress | You and your staff; your teammates only if you choose « share with the team » |
| RSVPs and reasons for missing, carpooling | Organize practices and games | The staff; teammates see who's in or out, and the rides |
| Chat messages, photos and reactions, swap-meet listings | Communicate within the team; sell gear between members | The members of the group (chat) or the club (swap meet); a direct message is seen only by its two participants |
| Plays you've opened | Help you learn the playbook; let the staff see who's ready | You and your staff |
| Notification subscription, preferences, theme, haptics | Notify you (new play, call-in, message) according to your choices | Nobody; technical settings |
| Session data (IP address, browser) | Secure the sign-in, detect unusual use | Nobody; kept for the length of the session |
Emergency contact: by filling it in, you are giving us data about someone else. Make sure they're fine with it.
3. What we don't do
- No selling or sharing of your data for commercial purposes.
- No advertising, no profiling, no cross-app tracking (no tracker, no pixel).
- No location tracking: an event's address is typed in by the coach; the « Directions » button opens Google Maps on your device, without us knowing where you are.
- No access to your contacts, your microphone or your photo library beyond the picture you choose to send.
4. Where the data is hosted
In the European Union, with providers acting on our behalf (processors):
- Neon (database) — Frankfurt region, Germany.
- Cloudflare R2 (photos, boards, logos) — European Union jurisdiction. The files are private: they are served only to authorized members, through the app.
- Vercel (app hosting).
- Google or Apple, only if you choose to sign in with them: they send us your email and your name, nothing else. With Apple, you can hide your email.
- Base Adresse Nationale (a French public service, api-adresse.data.gouv.fr): to suggest an address when a coach types in a location. The call comes from our server; no data about you is sent.
5. For how long
- As long as your account exists, you stay in control of everything.
- If you leave a team, your messages and RSVPs in that team stay visible in its history, but your profile is no longer reachable there.
- If you delete your account (« Me » or « Settings » → Account), everything personal to you is erased immediately: profile, photos, stats, messages, listings, RSVPs, learning data, subscriptions. Content that belongs to the club (plays, events, depth chart) stays, without your name.
- Technical database backups are kept for at most 7 days, then overwritten.
6. Your rights
At any time you can see and change your data in the app (« Me » → Edit my profile), choose the visibility of your stats and your phone number, and delete your account yourself, without asking us.
For any other right (full access, portability, objection, a question), write to contact@nexflow.agency — we answer within 30 days. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).
7. Minors
For a player under 15, the account must be created with the consent of a parent or legal guardian, who can exercise the rights above on their behalf.
8. Security
Encrypted connection (HTTPS), hashed passwords, every piece of data served only to authorized members of your club (checked on the server on every request), files stored privately. We may notify you in case of a security incident affecting you.
9. Changes
If this policy changes in a meaningful way, you'll be told in the app. The date at the top of the page marks the latest version.