Privacy Policy

Kabina app — effective from 30 July 2026

This policy sets out what personal data the Kabina app processes, why we process it, who we share it with and what rights you have. The app is operated by Tomáš Košut (the “operator”), contact: info@kabina.cloud.

1. Who controls your data

The controller of your personal data is Tomáš Košut, the individual who runs the Kabina app, company ID (IČO), registered address, Czech Republic. For anything to do with privacy, write to us at info@kabina.cloud.

2. What data we process

Account data

Your email address and password. Firebase Authentication, our sign-in provider, holds the password in encrypted form; the operator has no access to it.
Your first name, surname and date of birth.
Optionally, a nickname, phone number and profile photo.
If you sign in with Google or Apple, basic profile details (name, email) from those services.

Team and activity data

Which teams you belong to, your role in them (player, coach, treasurer, manager) and the date you joined.
Events such as training sessions and matches, where they take place, and how you responded to attendance.
Fines, dues and payments you report yourself, together with the history and balances for a season.
Team chat messages and anything attached to them (photos, videos, voice messages, documents), along with reactions and polls.

Payment data

A team may store a bank account number (IBAN) so the app can generate payment QR codes and payment details. The app does not process card payments and never handles payment card details. If a team connects a Fio bank account with payment rights, the app can submit a payment order that the team's bank executes — money moves directly between bank accounts and the operator never holds it.

Technical and operational data

A token used to send you notifications (push notifications via Firebase Cloud Messaging).
Access to your device calendar, but only if you grant it, and only to add events.
Basic diagnostic and operational data needed to run and secure the service.

3. Why we process your data, and on what legal basis

Providing the service (team management, calendar, team treasury, chat) — to perform our agreement with you, or our legitimate interest in operating the app.
Securing and protecting the service and its users — our legitimate interest.
Optional features (notifications, syncing with your device calendar) — your consent, which you can withdraw at any time in settings.
Meeting legal obligations where the law requires it.

4. Who we share your data with

The app runs on Google Firebase (Authentication, Cloud Firestore, Storage, Cloud Messaging, Cloud Functions), which acts as our processor and keeps data on secure servers. Data may be processed on servers inside the EU and outside it (the USA). Transfers to the USA rely on the European Commission's adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework, under which Google LLC is certified — you can check the certification in the public Data Privacy Framework list. For recipients not covered by that framework, transfers rely on standard contractual clauses approved by the European Commission. We will send you a copy of the safeguards we use on request at info@kabina.cloud. If you sign in with Google or Apple, those providers also process your data under their own policies. Where a team connects a Fio banka bank account to reconcile incoming payments into the team treasury, the bank acts as a recipient of payment details in connection with processing those payments. We do not sell your data, and we do not share it with third parties for marketing.

5. How long we keep it

We hold your data for as long as your account and team membership last. Once you delete your account, we erase or anonymise your personal data, unless we have to keep it for legal reasons such as accounting records. You can delete your account in the app at any time — see Account & data deletion.

6. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict how it is processed, to object to processing, and to data portability. You can withdraw your consent to optional processing at any time. If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ). To exercise any of these rights, write to us at info@kabina.cloud.

7. Children

Underage players may use the app as part of a sports team. Where a user is under 15, we assume their legal guardian is involved and has given consent. The operator asks children for nothing beyond the standard registration described above.

8. Security

Data travels encrypted and is stored with the Firebase provider under appropriate technical and organisational safeguards. A team's data is accessible only to members of that team, according to their roles.

9. Changes to this policy

We may update this policy in future. We will tell you about any material change in the app or on this page, and the current version is always here, with the date it took effect.

10. Contact

For any question about privacy, write to us at info@kabina.cloud.