Who is responsible
FanStand is an independent football community application operated by Thendo Nengwenda in South Africa. This policy covers the FanStand website and mobile applications. For privacy questions or requests, contact privacy@fanstand.co.za.
Information we handle
- Account information: email address, account identifier, username, profile details you choose to provide, and account creation and sign-in records. Firebase Authentication handles your password; it is not shown in your profile or shared with other fans.
- Football activity: followed teams, match predictions, points and rankings, player selections and ratings, votes, likes, and related activity.
- Community content: discussions, replies, match chat messages, polls and options you create, plus reports, blocks, mutes and moderation records.
- Preferences and notifications: appearance and refresh settings, notification choices, device identifiers and push tokens used to deliver alerts, and delivery records.
- Technical information: service requests, timestamps, error and security records. Our hosting and authentication providers may process IP addresses, browser or device information, and network logs to deliver and protect the service.
- Support correspondence: your email and the information you send when asking for help or reporting a concern.
Do not put sensitive personal information in your profile, public posts, or support attachments. We do not require your contacts, precise location, microphone, camera, payment card details, or advertising identifier to use the current app.
Why we use it
We use this information to create and secure accounts; show football content; save preferences and predictions; calculate rankings; enable community participation; deliver alerts you enable; respond to support requests; investigate abuse; and maintain reliable services.
Account information is necessary to provide account features. Without it, you can still read these public information pages, but cannot use features that require sign-in. Profile extras, community contributions and push notifications are optional. We rely on the grounds applicable to each activity, including providing the service you request, permission for optional notifications, protecting the service and its community, and meeting legal obligations.
What other fans can see
Your username and chosen avatar can appear with discussions, replies, chat, polls, and leaderboard entries. Other signed-in members can see your public profile and prediction performance in rankings; there is no private-profile or leaderboard opt-out setting. Content you post in community spaces is visible to other signed-in members who can access those spaces and may be copied or shared by them.
Your account email, push token, password, block and mute lists are not part of your public profile. Reports are handled through restricted moderation tools rather than published as community posts. Do not treat community chat as private messaging.
Service providers and sharing
We use Google Cloud and Firebase for hosting, account authentication, databases, infrastructure and operational logging. Optional push alerts use Expo's notification service and Apple's or Google's device delivery systems. Delivery uses your push token, notification title and message, and routing details that can include an account identifier. Alert previews and optional match Live Activities can appear on your lock screen. These providers process the information needed to perform those functions.
Football data is retrieved from a sports-data provider through our server. We do not send your account email or password to the sports-data provider as part of a fixture request. Images supplied by external hosts may cause your device to contact that host, which can receive ordinary connection information.
We do not sell personal information or use advertising identifiers for cross-app tracking. The current app does not integrate advertising or behavioural-analytics SDKs. We may disclose information when legally required, to investigate abuse or protect people's rights, or at your request. Links to other websites are governed by those websites' own policies.
Device storage and cookies
The app uses local storage to keep you signed in and remember preferences. Cached football information and notification registration information may also remain on your device. Signing out, clearing website data or removing the app affects local data; it does not by itself delete your account.
These public information pages do not set marketing cookies, include tracking pixels, or load analytics scripts. See our storage and cookies notice for more detail.
Where information is processed
FanStand is operated from South Africa. Its primary application database and server are configured in Google Cloud's US central region. Authentication, hosting, notification delivery, support email and other provider infrastructure may process information in additional countries. Information may therefore be processed outside your country under the providers' applicable data-processing terms and safeguards.
Retention and account deletion
Account and activity information is kept while needed to provide the service. The current system does not automatically erase every record after a fixed period. Some security, delivery, moderation, points-processing and deletion-job records can remain for service integrity, resolving disputes or legal obligations. Provider logs and backups have their own retention cycles.
You can start account deletion in Settings → Delete account. The current flow deletes your sign-in account and removes your profile and associated private activity through a cleanup process. Some discussion and poll text is currently retained after the author link is removed. Text may still identify you if you included personal information in it. Contact us with the relevant links if you want that content removed, including after account deletion.
Cleanup can continue after sign-out; deletion is not a promise that every provider log or backup disappears immediately. See account deletion and data requests for instructions and the current limitations.
Your choices and requests
- Edit your profile and account settings in the app.
- Control push alerts in FanStand Settings and your device's notification settings.
- Use Settings → Export my account data to obtain the available account-data export.
- Start deletion in Settings, or contact us if you cannot access your account.
- Ask us to access, correct or delete information, or raise an objection to processing. Additional rights may apply depending on where you live.
Email privacy@fanstand.co.za with the request and the account email involved. We may ask for reasonable proof that the account belongs to you; never send a password, sign-in code or unnecessary identity document. We will explain any request we cannot fulfil and handle applicable requests within the time required by law.
You can also complain to South Africa's Information Regulator or the relevant data-protection authority where you live.
Children and safety
FanStand is a general football community, not a service designed specifically for children. The current signup flow does not collect a date of birth. If you are not legally able to consent to use of your information, a parent or guardian must provide any permission required by applicable law. A parent or guardian who believes a child has provided information without the required permission should contact us so we can investigate and arrange appropriate removal.
Changes to this policy
We will update this page when our practices change and show the revised date above. Material changes will be communicated through the service where appropriate. Questions about this policy can be sent to privacy@fanstand.co.za.