Mobile app privacy policy

Data controller

The data controller is the service's publisher, FoxVision (Vincent Thuillier). Nobody else publishes this app, and it contains no advertising component.

See the legal notice for full contact details.

Permissions requested

The app asks for the minimum it needs to work. Each permission below maps to one specific feature:

• Network access: required to talk to the service. No data is collected on this basis.
• Notifications: to tell you about a new message or news about a game. You can decline it at install time or withdraw it later in your system settings; the app remains fully usable.
• Camera: only to read a QR code when checking players in at a game. The camera feed is analysed on your phone, live — no picture is saved, kept or sent. The permission is optional: without it, everything else in the app works.

Data specific to the app

On top of your account data, the app involves the following:

• Device session: signing in from the app creates a session of its own. It records a device name the app composes itself from your model and system version (for example "Pixel 8 — Android 15"), when it was created, when it was last used and when it expires.
• Your list of devices: you can review open sessions and revoke any of them at any time from the app. An account keeps at most ten devices; beyond that, the least recently used ones are removed automatically.
• Notification token: a technical identifier issued by your phone's operating system, along with the platform (Android or iOS). It designates the device, never the person. It is tied to the session that registered it and disappears with it.
• Player check-in: if you organise a game, the app can cache the list of accepted players so you can check them in without a network connection on the field. This is detailed below.

Notifications: what goes through a third party

Notification delivery relies on Firebase Cloud Messaging, a Google service. It is the only technical way to reach a phone whose app is closed: the service cannot do without it, and it therefore passes your device token and the notification's content to Google.

In practice, the preview of an incoming message — its beginning, up to 180 characters — travels through Google's servers to reach your lock screen. If you would rather it did not, decline the notification permission: the service keeps working and messages stay readable inside the app.

Google may process this data outside the European Union. That transfer is governed by the European Commission's standard contractual clauses.

What is kept on your phone

The app is built to work on fields with no network, so it keeps some information locally:

• Your session token, held in the system's secure storage. It is erased when you sign out.
• For check-in: the games you are attached to within the next thirty days and, for those you may check players into, the list of accepted players — username and invitation code, never the email address. This data stays on the device, is passed to nobody, and is replaced at every sync.
• Check-ins made offline, waiting to be sent. They are erased as soon as the service confirms them.
• Signing out or uninstalling the app erases all of this local data.

What the app does not do

Here, the list of absences is as useful as the list of collections:

• It requests no location permission and never reads your phone's position. The service's proximity features rely on the city you enter in your profile, not on GPS.
• It embeds no analytics or behavioural tracking tool. The analytics described in the general policy concern the website, not the app.
• It embeds no automatic crash reporting tool.
• It contains no advertising, no advertising tracker and no advertising identifier.
• It accesses neither your contacts, nor your microphone, nor your photo gallery, nor your files.
• No data is sold, rented or handed over to third parties.

Recipients and hosting

The service and its data are hosted by OVH, in France (European Union). The only processor specific to the app is Google, for the notification delivery described above. Information you choose to make public stays visible to other users, in the app as on the website.

Retention

A device session expires automatically after ninety days. It disappears immediately if you sign out or revoke it from your list of devices, and the associated notification token is deleted at the same time. Otherwise, the retention periods in the general privacy policy apply.

Your rights

Your rights of access, rectification, erasure, objection, restriction and portability are exercised in the same way as for the website, and any request received covers the app as well as the site.

See how to proceed in the general privacy policy

Minors

The app is not intended for children under 15. Below that age, the agreement of a parent or guardian is required to create an account.