Privacy Policy

The controller of your personal data is Lukáš Vít, a self-employed individual registered in the Czech Republic, ID No. (IČO) 14219298, registered office at Minartice 11, 257 53 Vrchotovy Janovice, Czech Republic (“we”, “us”). Contact for data protection matters: info@teamix.cz. This Privacy Policy describes how we process personal data when you use the Teamix web and mobile applications for sports teams and clubs. We process data in line with the GDPR (EU) and other laws that apply to you, depending on where you live.

We collect only what we need to run Teamix: • Account and profile: email address; name and nickname; optional phone number, date of birth, home city or address, and profile photo if you add them. • Sign-in: one-time codes sent to your email, or sign-in with Google or Apple (the provider shares basic profile data such as your name and email according to your settings there). • Clubs and teams: memberships, roles, invitations, and content you create (e.g. events, posts, polls, chat messages, attendance responses, photos in galleries). • Event locations: addresses and places entered for events, and address suggestions you search for when filling them in. • Files and media: attachments or images you upload within the service. • Subscriptions: your club's plan, billing status, and payment provider identifiers (see section 6 — we never see full card numbers). • Notifications: preferences, push notification tokens, and technical data needed to deliver in-app, push, and email notifications. • Calendar sync: if you connect Google or Microsoft calendar, the connection tokens needed to push your events there. • Technical and security: IP address, device and browser type, session identifiers, security audit logs of sensitive actions, and cookies or similar storage used for security and preferences (e.g. language, theme). We do not sell your personal data.

We use personal data to: • Provide the service (accounts, clubs, teams, events, chat, board, notifications) • Process club subscriptions and payments • Authenticate you and protect accounts against abuse • Show the right information to you and to other members of the same clubs and teams • Send service emails and push notifications (sign-in codes, invitations, reminders you expect from the product) • Operate, secure, and improve Teamix (including error monitoring, troubleshooting, and abuse prevention) • Comply with legal obligations (e.g. tax and accounting records for payments) Legal bases under the GDPR: performance of a contract (providing the service and subscriptions), legitimate interests (security, error monitoring, and improvement — proportionate and balanced against your rights), legal obligation (tax and accounting), and consent where we ask for it.

• Other users: members and admins of clubs and teams you belong to can see information needed to collaborate (for example your name, profile details you share, attendance, and content you post in shared spaces). • Processors: we use trusted service providers listed in section 5. They process data only on our instructions and under data processing agreements. • Payment providers: Stripe, Apple, and Google act as described in section 6. • Legal and safety: we may disclose information if required by law or to protect rights, safety, and integrity of users and the service. • Business transfers: if ownership of Teamix changes, data may transfer as part of that transaction; we will inform you as required by law. We do not sell personal data.

We use the following providers to run Teamix. Where a provider processes data outside the EU/EEA, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision: • Vercel — hosting of the web application and privacy-friendly, cookieless visit statistics • Supabase — database and file storage (hosted in the EU) • Resend — sending transactional emails (sign-in codes, invitations, reminders) • Stripe — payment processing for web subscriptions • Adapty — processing of mobile in-app purchase status • Apple and Google — sign-in, push notification delivery, and in-app purchases in the mobile apps • Expo — push notification delivery infrastructure • Sentry — error monitoring so we can find and fix crashes; session replays have all text masked • Aptabase — anonymous mobile app usage statistics (no device identifiers) • Mapy.com (Seznam.cz) — address search suggestions when you enter event locations; queries are proxied through our servers • Upstash — request rate limiting to protect the service from abuse

When a club Owner purchases a subscription on the web, the payment is processed by Stripe. Card numbers are entered directly with Stripe and never reach our servers — we store only the subscription plan, its status and period, and Stripe identifiers needed to manage it. Purchases in the mobile apps are processed by Apple App Store or Google Play under their own privacy terms; we receive and store the purchase status and store identifiers, not your payment details. Tax and accounting law requires us (and Stripe) to keep records of payments for statutory retention periods, even after account deletion.

Teamix accounts require a minimum age of 15. Users below the digital consent age of their country (15 in the Czech Republic, 16 in Slovakia) may only use Teamix with the consent of a parent or legal guardian. Sports clubs often manage youth teams. When a coach or club administrator enters a child's data (for example a name on a roster or attendance list), the club administrator is responsible for having the permission of the child's parent or guardian and for informing them. Parents and guardians can contact us at info@teamix.cz at any time to request access to or erasure of their child's data.

We use technical and organizational measures suited to the risk, including encryption in transit (HTTPS), access controls, audit logging of sensitive actions, and monitoring. No online service can guarantee absolute security. Retention: • Account data is kept as long as your account exists. Deleting your account (Settings → Delete account) permanently and immediately deletes your profile and the content you created. • Deleted data disappears from operational backups within about 30 days. • Security audit logs are kept for 12 months; logs referring to a deleted account are pseudonymized at deletion. • Payment records are kept as long as tax and accounting law requires. For other data requests, contact us at the address below; we will delete or anonymize personal data except where we must keep certain records by law.

Under the GDPR you have the right to access, rectify, and erase your data, restrict or object to processing, data portability, and withdrawal of consent where processing is consent-based. To exercise these rights, contact us at the email below. You may also lodge a complaint with a supervisory authority — in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz), or the data protection authority of your country of residence. We will respond within 30 days, unless the law allows a longer period for complex requests.

We use cookies and similar technologies only for essential functions: sessions, sign-in state, security, and preferences such as language and theme. We do not use advertising or cross-site tracking cookies, and our visit statistics are cookieless — which is why you don't see a cookie consent banner. Disabling strictly necessary cookies may prevent sign-in or core features from working.

We may update this Privacy Policy when our practices or the law changes. The date at the top of this page shows the latest version. For significant changes, we will provide notice in the app or by email where appropriate.

Data protection questions or requests: Lukáš Vít Minartice 11, 257 53 Vrchotovy Janovice Czech Republic IČO: 14219298 Email: info@teamix.cz We aim to reply within a reasonable time and within statutory deadlines where they apply.