Last updated: June 25, 2026
1. Who We Are
Run & Ball is operated by ut (registered trading name; "we", "us", "our"). ut is the data controller responsible for your personal data processed in connection with the Run & Ball app and website.
2. Information We Collect
- Account data: email address, username, password hash, profile details.
- Content you create: match data, team and player information, photos, commentary.
- Usage and device data: log data, device identifiers, IP address, basic analytics.
- Support communications: messages you send us.
- Billing data: handled by our payment processor Paddle; we receive limited transaction metadata (plan, status, country).
3. How We Use Your Data & Legal Basis
- Authenticate your account and keep it secure — contract performance.
- Sync matches, teams and tournaments across devices — contract performance.
- Process subscriptions and invoicing via Paddle — contract performance & legal obligation.
- Send account, verification and service emails — contract performance.
- Detect fraud, abuse and secure the platform — legitimate interests.
- Improve the product through aggregated analytics — legitimate interests.
- Marketing emails (only where you opt in) — consent.
4. Sharing
We do not sell your personal data. We share data only with:
- Paddle.com Market Ltd — our Merchant of Record (MoR) and payment processor. Paddle handles checkout, payments, subscription management, billing, tax compliance and invoicing for all paid plans.
- Hosting & infrastructure providers (cloud hosting, database, authentication, email delivery, analytics).
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law.
Public match overlays, team pages and player profiles are visible to other users by design.
5. Data Retention
- Account data: retained while your account is active, and for up to 30 days after deletion (then permanently removed or anonymised).
- Match, team and tournament content: retained until you delete it or your account.
- Billing & tax records (held by Paddle and us): retained for up to 7 years to meet legal/tax obligations.
- Support communications: up to 24 months.
- Server and security logs: up to 12 months.
6. International Transfers
Some of our providers, including Paddle, may process data outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Data Security
Data is stored on secure cloud infrastructure with row-level access controls and encryption in transit. Passwords are hashed and never visible to us. We check new passwords against known data breach lists.
8. Cookies
We use essential cookies and local storage to keep you signed in and remember preferences, plus limited analytics cookies to understand usage. You can manage cookies through your browser settings.
9. Your Rights
Subject to applicable law (including GDPR where relevant), you have the right to access, rectify, erase, restrict, port or object to the processing of your personal data, and to withdraw consent at any time. You may exercise these rights from Profile settings or by contacting runandballs@gmail.com. You also have the right to lodge a complaint with your local data protection authority.
10. Children
Run & Ball is not directed at children under 13. We do not knowingly collect their data.
11. Changes
We may update this policy occasionally. Material changes will be announced in-app.
12. Contact
For privacy questions, contact ut (trading name of the Run & Ball operator) at runandballs@gmail.com.