Privacy policy

Controller

Sean Joseph Caldwell, Gigglingweg 3/3, 6371 Aurach bei Kitzbühel, Austria. Email: info@settik.com. One email is enough for any privacy question or to use your rights.

In short

• We store what you enter for your work as a coach, and what Settik needs to work.
• No advertising, no selling of data, no third-party tracking cookies.
• Health data (the wellness check) only with explicit consent, visible only to the club owner and coaches, and deleted no later than 12 months after the season ends.

What we process, and why

• Account: email address, password (only hashed), language - to provide your account (contract, Art. 6(1)(b) GDPR).
• Club and squad: club name and crest; players with name, number, position and whatever else you enter, optionally an email for reminders; staff with names and roles - so that you can plan (contract).
• Training and matches: plans, drills, attendance (in / late / out), players' Yes / No / Maybe answers with an optional reason (contract; for your players' data: the club's legitimate interest in organising its football).
• Links for players and staff: anyone with a link sees, without signing in, what that link shows (a player's jobs, a session, the staff plan). Links are random and cannot be guessed; share them only with the right people. Player links never show health data.
• Calendar subscription: a link that brings dates (date, time, title, venue) into your calendar; revocable at any time in Settings.
• Reminder emails: to players with an email on file, at most two per event, only without an answer; unsubscribe through the link in every email.
• Product news and offers: we occasionally email coaches who have an account about Settik (new features, plans, offers), based on § 174(4) of the Austrian Telecommunications Act 2021 and Art. 6(1)(f) GDPR. You can object at sign-up, in Settings and through the link in every email (Art. 21 GDPR).
• Use: which features of Settik are used, and error reports, with no advertising IDs, to improve Settik (legitimate interest, Art. 6(1)(f)).
• Purchases on the website: since 28 October 2026 Stripe (with Link) sells as the reseller. Stripe itself is the controller for the name, email, payment and billing details of the purchase; Stripe's privacy policy applies (stripe.com/privacy). We receive only the subscription status and the receipt.
• Payments: subscription status and receipts. We never see card details; they stay with Stripe or Apple (contract; receipts kept for 7 years under § 132 Austrian Federal Fiscal Code).
• Report a problem: When you report a problem in the app we store your text, your screenshots or short videos, and automatically: the page, Settik version, browser and device, screen size, language, your club and email, the browser's last error messages and failed requests (without contents). Purpose: finding and fixing faults (legitimate interest, Art. 6(1)(f) GDPR: without these details we cannot reproduce a reported fault). The report is emailed to us. We delete reports and their files 90 days after they are closed. We never use screenshots in marketing. Please crop or blur player names before sending a screenshot - especially for youth teams.
• Error reports (Sentry): If an error occurs in Settik, the app sends a technical report to Sentry (Functional Software, Inc.; data held in the EU, Frankfurt): the error message, browser, device, page and Settik version. Access tokens and names are removed first. There is no recording of your session and nothing is stored on your device for this. Purpose: fixing faults (legitimate interest, Art. 6(1)(f)). Deleted after 90 days.
• Founding Coaches programme: If you apply, we process what you enter in the form (name, email, club, team, league, role, devices, your answer, private or club) to select and run the programme (contract and pre-contract steps, Art. 6(1)(b)). The form runs on Tally (Tally BV, Belgium; data held in the EU). We delete the details of applicants not selected after 6 months. We name or quote you only with your separate consent, which you can withdraw at any time (Art. 6(1)(a)).
• Storage on your device: Settik stores in your browser or app only your sign-in and settings - needed to run the service (§ 165(3) TKG 2021). None of it is used for error or usage analysis.

Health data: the wellness check

If a club turns the wellness check on (it is off by default), Settik asks each player once for explicit consent (Art. 9(2)(a) GDPR), and for younger players their parent's (age of digital consent: Austria 14, Germany 16, UK 13). Only then does the player answer a short check once a day with four scores (sleep, soreness, energy, mood, each 1-5, optionally where it hurts) and, after each session and match, how hard it was (1-10). He gets a reminder at the time the club sets.

Only the club's owner and coaches may see it - not assistants, not links, not other players. There are no diagnoses and no injury records.

It is deleted: 12 months after the end of the season in which it was given; at once when the player is removed from the squad; at once when the player withdraws consent on his link. On request a player receives his data as a file.

Who is responsible for your players' data

For the data a club enters about its players, the club is the controller; we process it on the club's behalf (Art. 28 GDPR) and only to provide Settik. Players can exercise their rights with their club or directly with us; we pass it on and help.

The data processing agreement is at settik.com/legal/dpa; you accepted it at sign-up.

Service providers

• Supabase (database, sign-in): servers in the EU (Frankfurt).
• Netlify (website and app updates): delivered over a worldwide network.
• Resend (sending email).
• Sentry (error reports): servers in the EU (Frankfurt).
• Tally (Founding Coaches application form): EU.
• Stripe (payments on the web until 28 October 2026, and running subscriptions from that time), Apple (payments and notifications in the iPhone app), RevenueCat (managing subscriptions).
• Providers outside the EU work under the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. All work only on our instructions.

How long

As long as you have an account. If you delete it (Settings → Delete account), your data is deleted, except receipts we must keep. Guest accounts with no activity are deleted after a while. Wellness data: see above.

Cookies and storage

Settik keeps your sign-in and a few settings in your browser's or the app's storage. There are no third-party advertising or tracking cookies.

Your rights

Access, rectification, erasure, restriction, data portability, objection and withdrawal of consent - by email to info@settik.com. You can also complain to the Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.