Futlay Privacy Policy

Effective date: October 11, 2026 · Last updated: October 11, 2026

Futlay ("we") is an informational soccer app: scores, stats, odds information, model picks, news and a free fantasy game. Futlay is not a gambling service. We do not accept bets, deposits or wagers and do not pay out money or prizes.

What we collect

• Anonymous device ID. A random identifier generated on your device and kept in its secure storage. It is used only to save your fantasy team, mini-league memberships and Pro preferences. It is not linked to your name, email, phone number or advertising ID by us.
• Fantasy data. Team name (nickname you choose), squad picks and league memberships. Team names, and your profile nickname and avatar if you set them, are visible on leaderboards.
• Friends & lobbies (signed-in). Your public @username, a personal invite code, your friend list, friend requests, blocks, lobby memberships and lobby invites. Friends see your @username, avatar, team name, global rank and points; lobby members see your team name and @username. Your email is never shown to other users. Deleting your account deletes all of this.
• Chats (signed-in). Messages you send in lobby chats, group chats and direct messages are stored on our servers (Supabase) with the sender, chat and time, along with chat memberships and which messages you have read. Messages are visible to the members of that chat only. Links are removed and offensive words are masked automatically. An automated safety filter (our own rules and, when enabled, OpenAI's moderation service, which receives the message text only — no name, email or user ID) checks each message before it is posted; messages it blocks are not shown to anyone, and a copy (with phone numbers and emails redacted), the category and the time are kept for review and for temporary chat mutes. Deleted messages have their text erased. Chat push notifications are not offered yet.
• Reported messages. If you report a chat message we store a copy of the message, who sent it, who reported it, the reason and the time, so our team can review it. Reports are kept for up to 12 months, even if the message is later deleted, and may lead to removal of content or accounts.
• News reports. If you report a story we store the story link, title, source, reason and time. No device or personal data is attached.
• Optional account. If you create an account we store your email address, a hashed password (handled by our authentication provider, Supabase) and an optional emoji avatar. Your fantasy team is then linked to your account instead of the device ID. Accounts are optional — everything works without one.
• We do not collect your name, location, contacts or photos.

Third parties

• Google AdMob shows ads to free users. Futlay requests non-personalized ads only: we do not track you across other companies' apps or websites and do not use your advertising identifier for personalized ads, so the app does not show an App Tracking Transparency prompt. Google may still process your IP address, device and usage information to serve, cap and measure ads and to prevent fraud. Where the law requires it (for example in the UK and Switzerland) Google's consent message asks for your choice first, and you can change it any time in Account › Ad privacy choices. Futlay Pro has no ads. See https://policies.google.com/technologies/partner-sites.
• RevenueCat processes Futlay Pro subscriptions purchased through Apple App Store or Google Play. Payments are handled by Apple/Google; we never see your card details. RevenueCat receives an anonymous app user ID and purchase receipts. See https://www.revenuecat.com/privacy.
• OpenAI (only if enabled): the text of chat messages is sent to OpenAI's moderation service to detect threats, hate and harassment before posting. No name, email, user ID or device ID is sent. See https://openai.com/policies/privacy-policy.
• API-Football supplies match data. Requests are made from our servers; your device data is not shared with it.
• News publishers. Headlines come from publishers' public RSS feeds. Opening a story loads the publisher's website, which is governed by that publisher's own privacy policy.
• Supabase stores fantasy data, accounts (email + hashed password) and news reports. See https://supabase.com/privacy.
• Hosting. Our API runs on Railway, which may log standard request data (IP address, time) for security and operations.

Retention and deletion

Fantasy data is kept while the season is active and for up to 12 months after. Signed-in users can delete their account and all fantasy data, friends, chat memberships and the chat messages they sent in the app (Account › Delete account). Chat messages are otherwise kept while the chat exists; deleting a group chat deletes its messages, and deleting a lobby deletes its chat. You can also delete your fantasy team(s) and private leagues at any time (Fantasy › Delete my team) or by emailing support@futlay.app with your device ID shown in Account. Uninstalling the app removes the device ID from your device.

Children

Futlay is not directed to children under 13 (or under 17 where odds content is restricted) and we do not knowingly collect their data.

Your rights

Depending on where you live, privacy laws may give you rights over your data; you may request access to or deletion of data associated with your device ID by contacting support@futlay.app. We do not sell personal information.

Contact

support@futlay.app