Privacy policy
Last updated: 2026-09-25
Who is responsible
ClubConnect is a platform provided by MatMax Consulting (Luxembourg) that football clubs use to organise their teams and talk to families. Each club decides what data it collects about its members and players and is responsible for it (data controller); MatMax Consulting processes that data on the club's behalf (processor). MatMax Consulting is responsible for the data needed to run your account (email and sign-in).
What data we process
Account: email, first and last name, phone and password (stored encrypted, never readable). Players and families, entered by the club or by the legal guardian: name, date and place of birth, category, contact details, the administrative form and its signature, health information you choose to give and image-rights consent. Club activity: call-ups and attendance, trainings, results and goals, announcements, messages and form answers. Device: push-notification token and app language. Face ID / fingerprint data never leaves your phone: the app only stores your credentials in the phone's secure keychain.
Why we use it
To let the club manage its sporting and administrative activity, to send you the notifications and messages that concern you, to sign and keep the forms you complete, and to keep the service secure. The legal basis is the membership relationship with the club and its legitimate interest; health data and image rights are only used with the explicit consent given in the signed form. We do not sell data, show ads or track you across other apps.
Children
Data about minors is provided and managed by their legal guardians and the club. Guardians only see their own children; staff see the players of their club according to their role.
Who receives it
Only people of your club according to their role (manager, director, coach) and the providers we need to run the service, bound by data-processing agreements: Supabase (database and hosting in the EU, Frankfurt), Resend (emails), Expo, Apple and Google (push notifications) and Stripe (payments, when the club uses them).
How long we keep it
While you or your child belong to the club. The club keeps the administrative records it is legally required to keep. When you delete your account (Profile → Delete my account) your access, profile, notifications and the messages you wrote are deleted immediately.
Your rights
You can access, correct, delete, restrict or port your data and object to its use. Delete your account directly in the app, ask your club about your child's club record, or write to contact@matmaxconsulting.com. You can also complain to the Commission nationale pour la protection des données (CNPD), cnpd.lu.
Security
Connections are encrypted; each person only reaches the data their role allows, enforced by the database itself; passwords are stored encrypted. We will tell you and the authorities about any breach as the law requires.
Changes
If this policy changes we will update the date above and tell you in the app when the change is important.