Version 1.0 — effective September 1, 2026
How Groundy collects, uses and protects the data of people who track their matches and stadiums on the website and mobile app.
A starting point, not legal advice. This document covers the processing identified in the product (account, location, content, Stripe payment) on a standard GDPR basis, as an individual publisher based in France.
Groundy is published by Maxime Billiau, individual publisher. This policy applies to groundy.app and the Groundy mobile app (Android and iOS) — see the Contact section below to reach us.
Groundy only collects what is necessary to run the service. No data is collected for advertising purposes.
| Category | Detail | Why |
|---|---|---|
| Account | Email, username, first / last name (optional), password (hashed) | Create and secure your account |
| Location | Precise or approximate GPS position (mobile app) | Detect nearby stadiums and alert you to nearby matches |
| Usage content | Planning, matches followed, stadiums visited, notes, friend comparisons | Power the features you use |
| Payment | Premium subscription status | Payment is processed by Stripe — Groundy never stores your card details |
| Session | Authentication token | Keep you signed in — stored encrypted on your device or browser |
Groundy does not use your data for ad targeting and does not embed any third-party analytics or advertising SDK in the mobile app.
Groundy never sells your data. It is only shared with the technical providers strictly necessary to run the service:
Hosting
Storage of accounts and app content
Stripe
Premium payment processing — Groundy never stores card data
Your data may also be disclosed if required by law, or to protect the rights and safety of Groundy and its users.
Your data is kept as long as your account is active. To delete your account and associated data, write to us (see the Contact section) — deletion is processed within 30 days, unless a longer legal retention period applies (e.g. billing).
Under the GDPR, you have the following rights over your data. To exercise them, write to us (see the Contact section).
Access
Get a copy of your data
Rectification
Correct inaccurate data
Erasure
Request deletion of your account
Portability
Receive your data in a reusable format
Objection
Object to a processing activity
Complaint
Lodge a complaint with your local data authority (in France, the CNIL)
Exchanges between the app and our servers are encrypted (HTTPS). Your session token is stored in the operating system's secure storage (Android Keystore / iOS Keychain), never in plain text. Passwords are hashed and never stored or accessible in plain text.
Groundy is not intended for children under 16 and the service does not knowingly collect data from this audience. If you believe a minor has provided us with data, contact us so we can remove it.
This policy may evolve with the service. The date at the top of the page shows the last update. In case of a substantial change to how your data is processed, we will notify you within the app.
App
Groundy — Android & iOS