Privacy policy

This policy explains what FUTnine, the iPhone app, and futnine.app, this website, collect about you, why, how long we keep it and who else receives it. FUTnine is for EA SPORTS FC players. Photograph a match stats screen and the app reads it, explains why you won or lost, and teaches you to play better with guides and articles.

Who is responsible

Controller: Gökhan Efe Digital Solutions (Gökhan Efe), Fritz-Bauer-Str. 15, 81249 München, Germany, support@futnine.app. See also the Impressum.

What we collect

Your account

You sign in with Sign in with Apple. We receive an Apple identifier, and your name and email if you share them. We keep them until you delete your account. We also store the Apple refresh token, encrypted, so that we can revoke it when you delete your account. FUTnine never asks for your EA login.

Your profile

Gamertag, platform, club name and club picture, so we can show your card and tag your matches. We keep them until you change them or delete your account.

Match screenshots

When you photograph a stats screen, the image is uploaded so the numbers can be read. A screenshot of a match you never verify is deleted after 7 days. A screenshot of a verified match is deleted after 90 days. If you delete a match, its screenshot is removed at the next hourly clean-up. The images show both players' gamertags and club names. After a screenshot is deleted the stats stay and the app shows "Screenshot no longer stored".

Match stats and your history

The numbers read from the screen, including the opponent's club name as it appears on it, plus your Weekend League runs, Report Cards, Game Plans, season goal, tactics, Coach feed and Weekly Reviews, and your FUTnine Card. We keep them until you delete your account. When you delete a single match or tactic it is hidden from you at once, and it is permanently removed when you delete your account.

Help improve FUTnine (optional, off by default)

If you turn on "Help improve FUTnine" in the app, we copy your verified screenshots, before they are deleted, to a separate store used to improve how well the app reads stats screens. Gamertags and club names on those copies are not blurred. The copies are linked to your account so that they can be removed with it. Turning the setting off stops future copies; it does not remove the ones already made. They are removed when you delete your account.

Notifications

If you allow push notifications we store your device push token and send the notification text through Expo's push service. The token is removed when you sign out or delete your account. Turning a notification type off in the app stops those notifications but keeps the token.

Subscription

FUTnine Pro is bought through Apple. RevenueCat manages the subscription and receives a random FUTnine account id and your purchase state, never your Apple ID.

Crash reports and error logs

The app contains no third-party analytics or crash reporting tools. If you agree to share crash data with app developers in your iPhone settings, Apple shares anonymous crash reports with us through App Store Connect. Our servers keep their own error logs, which hold no match stats or screenshots, for 7 days.

Public Cards, Weekend League Pages and Tactic Pages

A Public Card is off by default. When you switch it on, anyone with the link can see your gamertag, Club Badge, nation, position, overall, tier, six attributes, card style and showcase stamps. The card itself shows nothing else. You can switch it off or reset the link at any time; the old link stops working. The page is not indexed by search engines. Preview images of the card are cached and can remain until our next weekly clean-up.

If you share a Weekend League, its page also shows that Weekend League's dates, results, scores, the day and time of each match, the reactions you picked and the names and Tactic Codes of the tactics you used. These are public only after you share that Weekend League, and only while your Public Card is on: switching the card off or resetting its link takes down every Weekend League page you shared, and an old link never comes back. With the Show reactions and Show tactic codes settings off, the pages leave out your reactions or your codes. Weekend League pages are not indexed by search engines, and their preview images are cached for up to a day and deleted from our storage within three weeks.

While your card is on, the tactics you share can show your gamertag, badge and rank group on their pages and in the app's Community list, unless you turn 'Show me on the tactics I share' off.

Tactic Pages show the tactic settings you choose to share and aggregated statistics that carry no account ids.

This website

We use Cloudflare Web Analytics, which does not use cookies, to count page views. Our request logs hold the page path, status and a salted hash of the first part of your IP address, never the address itself. The waitlist form is the only place where the website asks for personal data: see below.

Waitlist

The form uses Cloudflare Turnstile to block bots. If you join the waitlist we send a confirmation email through Cloudflare Email Service. Only after you open the link in that email are your email address, the platform you chose, where you said you play most and the blog post you signed up from (if any) saved in a Cloudflare database kept in the EU. We use them to email you once when FUTnine launches and to count which posts and answers bring sign-ups. We do not log your address. You can ask us to delete it at any time by writing to support@futnine.app.

Who else receives your data

• Cloudflare hosts everything: servers, database, image storage, queues and logs. It also sends the waitlist email and stores the waitlist. Our database and image storage are kept in the EU under Cloudflare's EU jurisdiction. Requests are answered by the Cloudflare server nearest to you. Logs are kept for 7 days.
• Google Gemini reads your screenshots (OCR). Under Google's Gemini API terms for paid services, Google does not use this data to improve its products; it may keep it for a limited time to detect abuse.
• Cloudflare Workers AI reads a screenshot only when Google Gemini cannot. It runs on Cloudflare's own infrastructure, and Cloudflare does not use that data to train models.
• Apple provides Sign in with Apple and App Store billing.
• RevenueCat manages the subscription.
• Expo delivers push notifications.

We do not sell your data and we do not use it for advertising.

Why we may use your data (legal bases)

• Running your account and the app: sign-in, reading your screenshots, your matches, Coach, cards, tactics, your subscription status and the notifications you allow. Basis: our contract with you (Art. 6(1)(b) GDPR).
• Public Cards, shared Weekend Leagues and shared tactics, "Help improve FUTnine" and the waitlist: only when you switch them on or sign up. Basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by switching the setting off or writing to us; that does not affect what happened before.
• Keeping the app and website secure and working: error and request logs, Cloudflare Turnstile, page counts, stopping abuse of the free allowance, and the empty account record and billing state we keep after deletion. Basis: our legitimate interest in a secure, working and fairly used service (Art. 6(1)(f) GDPR).
• Meeting legal duties, such as answering your requests under data protection law. Basis: legal obligation (Art. 6(1)(c) GDPR).

You need to sign in and give us your screenshots or scores to use FUTnine; without them the app cannot work. Everything else is optional. We do not make decisions about you by automated means that have legal or similarly significant effects; Coach advice is information only.

Transfers outside the EU

Google (Gemini), RevenueCat and Expo are based in the United States, and Cloudflare answers requests from servers around the world. Where they receive your data outside the EU, it is protected by the EU Commission's adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Each provider's terms set out the safeguard it uses:

• Cloudflare Data Processing Addendum
• Google Data Processing Addendum
• RevenueCat Data Processing Addendum
• Expo privacy policy

Apple handles Sign in with Apple and App Store purchases under its own privacy policy.

Your choices and rights

Delete your account in the app: open Settings, then Account, then Delete account. Account deletion removes your profile, matches, screenshots, opt-in copies, tactics, cards and sessions. We keep an empty account record with no personal details, and billing state with no identifiers. If you cannot sign in, email support@futnine.app.

Export your data in the app: open Settings, then Privacy & data, then Download my data (one export every 24 hours).

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15);
• have wrong data corrected (Art. 16);
• have your data deleted (Art. 17);
• have its use restricted (Art. 18);
• receive it in a machine-readable format (Art. 20);
• object to uses based on our legitimate interest (Art. 21);
• withdraw a consent at any time, for the future (Art. 7(3)).

Write to support@futnine.app to use any of them. You can also complain to a data protection authority, in particular the one where you live or work. Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

How long we keep data

Each section above says how long that data is kept. For the rest: sign-in sessions are deleted 30 days after they expire. Upload attempt records are kept 7 days. Purchase webhook records are deleted after 90 days. Coach feed items are deleted after 30 days. Handled system events are deleted after 30 days.

Children

FUTnine is not directed at children under 13 and we do not knowingly collect their data.

Changes

If we change this policy we change the date at the top of this page and, for material changes, tell you in the app.