Flobit Privacy Policy

Last updated: 19 August 2026

This policy explains what personal data Flobit collects, why, who we share it with, and what you can do about it. We've tried to write it so you can actually read it.

Two things worth knowing up front:

• We don't track you across the internet. No advertising, no third-party trackers, no data brokers, no crash reporting, and nothing about you sold or shared for marketing. We don't have a business model that needs it. We do count a short list of anonymous events in the tip flow — §3 names every one, and none of them is linked to your account.
• Your Apple Health data never leaves your phone. We read it on your device to show you a number, and that's where it stays.

And one thing we want to be straight about rather than bury: your messages are stored on our servers and we are technically able to read them. We don't do so routinely — §3 and §10 explain exactly when we do and why.

Languages. We publish this policy in English, Azerbaijani, Russian, Turkish and Spanish. If a translation and the English version ever disagree, the English version is the one that applies — translations are provided so the policy is readable, not to change what it says.

1. Who is responsible for your data

Flobit MMC, a limited liability company registered in the Republic of Azerbaijan, at 8 November 42, Baku AZ1000, Azerbaijan, is the data controller for the personal data described here.

Contact us about anything in this policy at [email protected].

This policy covers the Flobit iPhone app, the Apple Watch app, widgets and Live Activities, and the flobit.app website. Our Terms of Service govern your use of all of it.

2. The short version

3. What we collect, and why we're allowed to

Under the GDPR we need a lawful basis for each use. Here they are, honestly labelled.

Your account — necessary to perform our contract with you

Email address, and either a password we store only as a hash, or an identifier from Sign in with Apple or Google. Account creation and last-activity timestamps.

If you use Sign in with Apple, Apple may give us a private relay email address instead of your real one. That works fine — we never need your real address.

Your profile — contract, and consent for the optional parts

Username, display name, first name and surname, bio, profile photo, country, city, and profile visibility setting.

Gender is required, because match formats and fair pairing depend on it.

Height and weight are optional. We use them only to estimate calories for your matches. Leave them blank and everything else works; you just won't see a calorie figure. You can remove them at any time in profile settings.

Your sport — contract

Sports you play, self-declared skill levels, ELO rating per sport, matches created, played, scored, or officiated, scores and per-period results, teams, communities, tournaments, registrations, and trophies.

Match records involve more than one person. A match you played is also part of your opponents' history. Section 9 explains what that means when you delete your account.

Sportsmanship ratings — legitimate interest in players being able to judge who to play with

After a match, you can rate the people you played against from one to five stars on sportsmanship — whether they were good to share a court with. It is not a rating of how well they play; ELO covers that.

We store who rated whom, for which match, the number of stars, and when. We show the person rated an average on their profile, alongside how many ratings it is based on.

Some specifics worth stating plainly, because this is data about a person written by another person:

• You can only rate opponents, never teammates or your doubles partner, and never a guest.
• Individual ratings are never shown to anyone, including the person rated. Only the average and the count are public. We do not disclose who gave which rating — see §11.
• The average is deliberately conservative. A single rating does not produce a 5.0 or a 1.0 profile; early ratings are weighted toward the overall average across Flobit and converge on the true figure as more arrive. Repeatedly rating the same person does not add weight — the people you play most often cannot dominate your number.
• You can hide yours. Profile settings has a switch that removes both the average and the count from everyone else's view. Yours stays visible to you.
• You have 48 hours to change a rating, then it is fixed. This exists so a rating given in frustration can be reconsidered, and so nobody can go back months later and rewrite the history of someone they have fallen out with.

If you don't want to be rated at all, you can hide the number, but we can't stop someone forming an opinion about a match you both played — the same way we can't remove the match itself from their history.

Your messages — contract, and legitimate interest in player safety

Direct messages and community or tournament group chats are encrypted in transit and encrypted at rest on our servers. They are stored on our servers so that your conversations follow you — sign out and back in, or set up a new phone, and your history is still there.

We are technically able to read message content. We do not do so routinely, and we do not sell it, use it for advertising, or share it with anyone for their own purposes. We access message content only when:

• someone reports a message and we need to review it;
• the law genuinely requires it; or
• it is necessary to protect someone from serious harm.

We also necessarily hold the surrounding information: who sent a message to whom, when, and delivery and read receipts.

If that trade-off isn't one you want, don't send it in a message.

A note on what changed. Earlier versions of Flobit encrypted direct messages end-to-end, which meant we could not read them — and also meant your messages were lost whenever you signed out or changed phone, and could not be moderated when reported. We changed it so your history follows you and so we can act on reports. We think that's the right trade for an app where people arrange to meet strangers, and we'd rather tell you plainly than not mention it.

Your location — consent

Two different things happen, and they're worth separating.

Setting your city. If you tap "Use my location", your device works out your country and city on the device itself and we keep only the country and city — never the coordinates.

Finding venues near you. When you search for courts or pitches nearby, your device sends your coordinates along with that search so we can return what's close. We use them to answer the search. We don't build a location history, we don't track your movement, and we never run location in the background.

Suggesting a venue. If you add a new venue, the venue's location is saved as part of that venue's listing — that's the point of it, and it stays with the venue, not with you.

You can decline location entirely and pick your city from a list instead.

Photos and images — contract, and consent for library access

Profile photos, community and tournament images, and share cards you build. Uploaded images get a content-hashed, immutable URL, so a given image address stays valid while it's cached or referenced.

Saving a share card to your photo library uses an add-only permission — we cannot see or read your photo library.

Tips — contract

If you send us a tip, Apple sells it to you and tells us it happened. We keep a record of each tip: Apple's transaction identifiers, which tier you chose, how many, when you bought it, whether it was a Sandbox or production purchase, and whether it was later refunded. That record is linked to your profile.

We never see your card. Apple is the merchant of record. Card numbers, billing addresses and payment methods go to Apple and never reach us.

We give Apple your Flobit account identifier. When you tap a tier, the app hands Apple the UUID of your Flobit profile so the purchase can be matched back to your account when Apple tells us about it. It is the only thing about you we send Apple at purchase time.

Your supporter badge is public unless you switch it off. While a tip is within its 12 months, other players see a heart on your profile. It starts switched on, so a tip is a public act until you change it — you can hide it at any time under Settings → Support Flobit, and hiding it removes it from everyone else's view while you carry on seeing it yourself. It is not covered by your profile visibility setting; it has its own switch. Hiding the badge changes nothing about the tip: the 12 months run exactly as they would have, and you can switch it back on whenever you like. Only you can see the date it runs out.

Delete your account and the tip records go with it. We don't keep them — Apple, as the seller, keeps its own record of what you bought, and that one is Apple's to hold and yours to ask Apple about.

Product analytics — legitimate interest in knowing whether what we build works

We use PostHog (EU servers) to count a small number of things in the tip flow: that the support card appeared, that it was tapped or dismissed, that the sheet opened, which tier was tapped and how many, and whether the purchase completed, was cancelled, was left pending or failed.

It is not tied to your account. We deliberately do not tell PostHog who you are, so these counts are not linked to your profile, your name, or your email. PostHog does store a random identifier for the app on your device so repeat events can be grouped into a session.

Nothing else is measured. No screen recording, no session replay, no automatic capture of the screens you visit, no push token, no advertising identifier, and nothing you type. If that ever changes, this section changes first.

Apple Health — consent, and it stays on your device

Covered fully in section 8.

Your device — legitimate interest in delivering and securing the service

A push notification token from Apple and Firebase, a Firebase installation identifier, app version, OS version, device model, and language. Server logs including IP address and request timestamps, kept for security and debugging.

We do not collect an advertising identifier, and we do not ask for App Tracking Transparency permission, because we don't track.

Reports and moderation — legitimate interest in player safety

When you report a profile, message, community, or post, we receive what you reported, the reason, any detail you add, and your identity as the reporter.

Guest players — legitimate interest in recording a match honestly

Flobit lets you add a guest — someone who played but has no account. We store the name entered, attached to that match, and nothing else. No account, no profile, no contact details. Guests are never rated and never rate anyone.

If you add a guest, you're confirming you have their permission. If you're a guest and you'd rather not appear, email [email protected] and we'll remove or anonymise the name.

4. What we don't do

• No advertising, and no sale of personal data. Ever.
• No crash-reporting SDK, no advertising SDK, no attribution SDK. No Sentry, no Firebase Analytics, no Google Analytics, no Meta SDK.
• One analytics tool, deliberately narrow. We use PostHog, on EU servers, and only to count a handful of steps in the tip flow (§3). It is not linked to your account. There is no session replay, no screen recording, no automatic capture of the screens you visit, and nothing you type. This is the only analytics in Flobit, and if that changes this policy changes first.
• No tracking across apps or websites, and no data brokers.
• No reading your messages for advertising, training, or curiosity. See §3.
• No profiling with legal or similarly significant effects. Your ELO is a sports rating and your sportsmanship average is other players' opinion — neither is a decision about you, and neither is made automatically about anything that matters legally.
• No selling or sharing in the sense of the CCPA/CPRA.

5. Who we share data with

We share only what's needed to run Flobit, and only with the providers below. Each acts as our processor under a data processing agreement — with one exception: when Apple sells you a tip, Apple is the seller in its own right and decides for itself what it does with that transaction, under its own privacy policy rather than ours.

We also share data with other players — but only what you choose to show them, governed by your profile visibility setting, and with the people you play, message, or share a community with.

One exception, and we want to be straight about it: if you send us a tip, the supporter heart on your profile starts out visible to everyone regardless of that setting. It is not governed by your profile visibility — it has its own switch, under Settings → Support Flobit — so you can turn it off whenever you like, but it is on until you do.

We may disclose data where the law genuinely requires it, or to protect someone from serious harm. We'll tell you when we're allowed to.

We do not sell your data, and we never will.

6. Where your data lives

Our servers, database, and realtime service run in Railway's EU region, so your core data stays in the European Economic Area.

Some providers in section 5 — Cloudflare, Resend, and Google — process data in or from the United States. For those transfers we rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where a provider is certified under it.

If you'd like more detail on the safeguards for a specific provider, ask us at [email protected].

7. How long we keep it

When you delete your account, we remove or anonymise your personal data from live systems straight away. Backups are overwritten on their normal rotation and are fully purged within 30 days.

8. Apple Health

Your Apple Health data is the most sensitive thing Flobit touches, so this is spelled out.

What happens on your device. When a match ends, the Flobit app looks at Apple Health for that match's window: energy already recorded, your step count, and whether a workout was already saved. It uses that, plus your weight, height, and how the match went, to show a calorie figure and to avoid saving a duplicate workout.

What we save. Flobit saves an estimated workout to Apple Health only when your phone was actually on you during the match, so its step data reflects how you moved. It does not save a figure worked out from a phone left on the bench, and it does not save one when a workout for that time already exists — whether your watch recorded it or another app did. You can turn saving off entirely in Flobit's settings.

Because Apple Health totals energy from every app, workouts Flobit saves may count toward your Activity rings.

What never happens. Your health data is never sent to our servers. Not calories, not steps, not heart rate, not workouts. There is no field for it in our API. It is never used for advertising, never sold, never shared with any third party, and never used for anything but showing you your own number on your own device.

Estimates are estimates. They're calculated from published figures for how demanding each sport is. They'll be wrong for you by some margin. None of it is medical or fitness advice.

You're in control. Flobit's settings have a switch for saving match workouts, and you can revoke Flobit's access to Apple Health entirely at any time in Apple's Health app. Everything else keeps working — you'll still see an estimate based on how long you played, just a rougher one. Workouts already saved stay in Apple Health and you can delete them there yourself; deleting a match in Flobit does not remove a workout it already saved.

9. Switching off or deleting your account

Two different things, and the difference matters.

Switching off — reversible, and nothing is deleted

Settings → Account → Switch off my account. Your profile stops appearing in search, discovery, people lists and invitations, and nobody else can open it. That is all it does: nothing is deleted and nothing is anonymised. We set one timestamp, and switching back on clears it. Everything — your matches, ELO, memberships, follows, messages — is exactly where you left it.

Two things stay visible while you're switched off, for the same reason they survive deletion: your name in matches you have already played, and in conversations you are already part of. Those records belong to the other players too.

You stay signed in. We don't end your sessions, so switching back on is one tap. While you're off, the app will only let you do three things: switch the account back on, sign out, or read your own profile.

A switched-off account stays off for as long as you want. We do not automatically delete it, and we won't switch it back on for you.

Deleting — permanent, with no undo

Delete your account yourself, any time, in Settings → Account. No email, no waiting on us. It's permanent — there is no grace period and no undo — and we say so before you confirm.

Three honest limits:

• Matches you played stay in your opponents' history, with your identity removed. We can't erase someone else's record of a game you both played.
• Messages you sent stay in the recipients' conversations. Deleting your account removes your side of it, not theirs — the same way an email you sent doesn't vanish from someone's inbox when you close your account.
• Sportsmanship ratings you gave stay, with your name removed. A rating you gave is information about the person you rated, not about you, and removing it would quietly change their public number because you left. The rating keeps counting toward their average; we detach it from you, so nobody can tell it was yours. Ratings you received are deleted along with your profile — they described you, and you're gone.

Your email address and your Apple or Google sign-in are removed along with the account, so the same Apple ID or email address can be used to sign up again later — as a brand-new account, with none of the old history attached to it.

We may keep a minimal record that an account was removed, and moderation records where someone's safety depends on it.

10. Reporting and moderation

You can report a profile, a message, a community, or a post from inside the app, and you can block any player. Reports go to our moderation queue and we review them.

Where a report concerns a message, reviewing it means reading that message. That is the point of the report, and it's why §3 says we're able to.

Unfair ratings. If you believe a sportsmanship rating was given in bad faith — retaliation after an argument, or someone rating you for a match they weren't part of — report the player and say so. We can remove ratings and restrict a player's ability to give them. Blocking someone does not remove a rating they gave you: we deliberately don't let the person being rated delete ratings they dislike, because a number you can edit by blocking people isn't worth showing.

We may remove content, hide it, limit its reach, restrict features, suspend an account, or terminate it — where our Terms have been broken, where the law requires it, or where someone's safety is at stake.

11. Your rights

Wherever you live, you can ask us to:

• See the personal data we hold about you
• Correct anything wrong — most of it you can edit directly in the app
• Delete your data — you can do this yourself in Settings → Account. Switching off your account is not deletion: it hides your profile and keeps everything. Deleting is the permanent one
• Export your data in a portable format
• Restrict or object to how we use it, including anything we do on the basis of legitimate interests
• Withdraw consent you've given, such as location or Apple Health access — without affecting what we did lawfully beforehand

Email [email protected]. We'll respond within 30 days. We won't charge you, and we won't make the app worse for you because you asked.

One limit, stated in advance: sportsmanship ratings about you. If you ask what ratings you have received, we will tell you the average and how many — the same figures your profile shows — but not the individual ratings or who gave them. When only a few people have rated you, a single rating identifies its author, and that author's identity and opinion are their personal data too. We can't disclose one person's data to satisfy another's request. If you believe a rating was given in bad faith, §10 is the route.

Complaints. If you think we've handled your data badly, tell us first — most things are faster to fix by email. If you're in the European Economic Area or the United Kingdom, you also have the right to complain to your national data protection authority, wherever you live or work.

12. Security

• Everything in transit is encrypted with TLS.
• Message content is encrypted at rest on our servers.
• Passwords are stored as hashes, never as text.
• Access tokens live in the iOS Keychain, not in ordinary storage.
• Staff access is limited to what's needed for support and moderation, and reading message content is restricted to the situations in §3.

No system is perfectly secure. If we ever suffer a breach affecting your data, we'll tell you and the relevant authority as the law requires.

13. Children

Flobit is for players aged 13 and over. We don't knowingly collect data from anyone younger.

If you believe a child under 13 has an account, email [email protected] and we'll remove it.

14. Permissions Flobit asks for

Every one is optional, and every one is a genuine feature. Decline any of them and the rest of Flobit still works.

15. Marketing email

Right now we send transactional email only — password resets, verification, and account notices. You can't opt out of those, because they're how your account works.

If we ever send marketing or newsletter email, it will be opt-in, and every message will carry a one-click unsubscribe. We won't add you to a list because you signed up.

16. The flobit.app website

The website exists to host these legal pages and basic information about Flobit. It sets no analytics or tracking cookies, so there's no cookie banner. If that changes, we'll update this policy and add proper consent first.

17. Changes to this policy

When we make a material change, we'll tell you before it takes effect — in the app, by email, or both — and update the date at the top. Minor clarifications take effect when posted.

18. Contact us

Flobit MMC
8 November 42
Baku AZ1000
Azerbaijan

Email: [email protected]

Real questions get real answers. If something here is unclear or looks wrong, tell us.

Play more. Get better. A bit at a time.