Privacy Policy
Last updated 24 October 2026
Who we are
Divot Marketplace Ltd (company number 17024277, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom) is the controller of your personal data for OptiPitch. Questions or requests: customerservice@optipitch.co.uk.
What we collect
- Account: email address, password (stored hashed by our authentication provider) and the name you give.
- Profile and community: display name, profile photo, group photos, messages, images and reactions you post, groups you join, reports you make, and people you block.
- Preferences: teams, players, leagues and matches you follow, language and app settings.
- Subscription: your plan, its status and renewal dates, and the store transaction identifiers Google Play and RevenueCat send us. We never see your card details.
- Free-trial check: a one-way hashed identifier for your phone, so the same device cannot start repeated free trials. It cannot be turned back into the device id.
- Technical: basic logs our hosting providers keep to run the service securely (for example, IP address and request times).
Why we use it (and the lawful basis)
- To provide the service you signed up for: your account, plan, follows and community features (contract).
- To take payments and manage subscriptions and free trials, and to prevent trial abuse (contract and legitimate interests).
- To keep the community safe: moderation, reports and blocks (legitimate interests, and legal obligations).
- To keep the service secure and working (legitimate interests).
We do not sell your data, show advertising, or use it for profiling beyond the above.
Who we share it with
- Supabase (database, authentication and file storage, hosted in the EU, Ireland).
- RevenueCat and Google Play (subscriptions and payments).
- Our server host, Contabo (EU), which runs the data and modelling jobs.
These providers process data only on our instructions. Some (RevenueCat, Google) may process data outside the UK; where they do, it is protected by UK-approved safeguards such as standard contractual clauses. Other members of a group see what you post in it, and your display name and photo.
How long we keep it
For as long as your account exists. When you delete your account we delete your profile, follows, settings and posts within 30 days, except where we must keep something for legal reasons (for example, subscription records for tax, kept for 6 years) or to deal with a report of abuse. The hashed device identifier used for the one-free-trial-per-device rule is kept after deletion, without any link to you, so a deleted account cannot be used to start another free trial.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Delete your account in the app (Menu > Profile > Delete account) or email us. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Children
OptiPitch is for people aged 18 and over. We do not knowingly collect data from anyone under 18.
Security
Data is encrypted in transit, access to it is restricted by account, and every table is protected so each person can only read their own private data.
Changes
We will tell you in the app about any important change to this policy.