Privacy Policy

1. Introduction

StatX ("we", "our", "us") is a sports activity tracking application operated by Baarstroem ApS. This Privacy Policy explains how we collect, use, and protect your personal data when you use the StatX app and related services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Danish data protection law (databeskyttelsesloven).

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

Account Information

• Display name and optional nickname
• Email address (for account recovery and contact)
• Phone number (optional, for friend discovery)
• Profile photo or avatar selection
• Authentication provider information (Google, Apple, or Facebook sign-in)

Activity Data

• Sports activities you create or participate in
• Match scores and results
• Statistics derived from your activities (wins, losses, draws)

Social Data

• Your friends list
• Group memberships
• Chat messages within activities

Technical Data

• Device tokens for push notifications
• Language preference
• App usage timestamps

4. How We Use Your Data

We process your personal data for the following purposes:

• Service delivery: To provide the core functionality of tracking sports activities, scores, and statistics
• Social features: To enable you to connect with friends, create groups, and share activities
• Notifications: To send you push notifications about activity invites, score updates, and friend requests
• Account management: To authenticate your identity and manage your account
• Service improvement: To understand how the app is used and improve the experience

5. Legal Basis for Processing

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide our service to you
• Legitimate interest (Art. 6(1)(f) GDPR): Friend discovery via phone number, service improvement, and security
• Consent (Art. 6(1)(a) GDPR): Push notifications and optional data sharing features

6. Data Sharing

We do not sell your personal data. We share data only with:

• Firebase (Google): Cloud infrastructure for authentication, database, and push notifications
• Other users: Your display name, nickname, and profile photo are visible to people you interact with in activities and groups

Our processor Google LLC (Firebase) is located in the United States. When we transfer your personal data outside the EU/EEA, we rely on the EU-U.S. Data Privacy Framework, under which Google LLC is certified. This framework has been recognised by the European Commission as providing an adequate level of data protection (Commission Implementing Decision (EU) 2023/1795).

If we use other providers in third countries without an adequacy decision, we implement the European Commission's Standard Contractual Clauses (SCCs). You may contact us for a copy or a description of these safeguards.

You may request further information about the safeguards in place by contacting privacy@statx.app.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your personal data is removed permanently. Activity data and messages are anonymized so they do not affect other users' statistics.

Accounts that have been inactive for 24 months are deleted automatically. Personal data is removed from our backups within 90 days after account deletion.

Certain security and log data may be retained for a longer period where necessary to document security incidents, handle disputes, or comply with legal obligations.

8. Your Rights

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data (Art. 15)
• Rectification: Correct inaccurate personal data (Art. 16)
• Erasure: Delete your account and personal data (Art. 17)
• Data portability: Receive your data in a machine-readable format (Art. 20)
• Object: Object to processing based on legitimate interest (Art. 21)
• Withdraw consent: Withdraw consent for push notifications at any time (Art. 7(3))

You can exercise most of these rights directly in the app (Profile > Account settings). For other requests, contact us at privacy@statx.app.

Exercising your rights is free of charge. We may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) if you believe our processing of your personal data infringes the GDPR:

10. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), Firebase Security Rules, and authentication tokens to protect your data.

11. Children's Privacy

StatX is not intended for users under the age of 15. By creating an account, you confirm that you are at least 15 years old. If we become aware that a user is under 15, we will delete the account and any associated data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

13. Contact Us

If you have any questions about this Privacy Policy or your personal data: