Privacy Policy

Last updated: 26 April 2026

This is the privacy policy for Slaps, a mobile app for photographing and collecting football (soccer) supporter stickers. This policy explains what data we collect, why we collect it, and the rights you have over it.

Questions? Use the contact form.

1. Who this policy applies to

This policy covers everyone who uses the Slaps mobile app on iOS or Android.

2. What we collect

2.1 Account information

When you sign up, we collect:

• Email address — used only to log you in and send account-related emails (password reset, email verification).
• Password — stored as a salted hash by our auth provider (Supabase). We never see your plaintext password.
• Apple Sign-In token (if you use "Sign in with Apple") — Apple may provide us with a private relay email address if you choose to hide your real email. We only use this to identify your account.

2.2 Profile information

Once logged in, you can optionally provide:

• Username — publicly visible on stickers you mark as public.
• Favourite club — publicly visible.
• Avatar image — publicly visible.

You can edit or remove any of these at any time in the "More" tab.

2.3 Sticker data

Each time you save a sticker, we collect:

• The original photo you took and a cropped version of it.
• A team name you enter manually.
• Your GPS location at the time of capture (latitude and longitude), used to tag where the sticker was found.
• A human-readable location label (e.g. "Fitzroy, Melbourne") derived from those coordinates.
• A public / private flag that you control.

Only stickers you mark as public are visible to other users on the map or elsewhere. Private stickers are visible only to you.

2.4 What we currently do not collect

At the time of writing, Slaps does not use third-party analytics SDKs, advertising SDKs, or tracking pixels, and does not collect an advertising identifier. We do not track your location in the background — GPS is only read at the exact moment you save a sticker, and only if you grant permission.

We may introduce privacy-respecting analytics or advertising in future (for example, to support a free tier of the app). If we do, we will update this policy, update the "Last updated" date, notify you in-app, and — where the law requires it — ask for your consent before any new tracking begins.

3. Why we collect it

4. Who we share it with

We share data only with the service providers needed to run the app:

• Supabase (supabase.com) — hosts our database, authentication, and file storage on Amazon Web Services infrastructure.
• Apple — if you use "Sign in with Apple".
• Formspree (formspree.io) — relays messages you send via our website contact form or the in-app feedback form to our inbox. When you submit the in-app feedback form, your account email and user ID are attached so we can reply.
• Google Cloud — if and when we re-enable AI-assisted team recognition, the cropped sticker image may be sent to Google's Gemini API for identification. This feature is currently disabled.

We do not sell your personal data, and we do not currently share your data with advertisers or any other third party for marketing purposes. If this ever changes, we will update this policy and obtain any consent the law requires.

5. Where your data lives

All data is stored with Supabase, which runs on Amazon Web Services infrastructure. Depending on our configured region, servers may be located outside your country of residence. By using Slaps, you consent to your data being transferred to and processed in those regions, including countries that may have different data protection standards than your own.

6. How long we keep it

• Account and profile data — kept for as long as your account exists.
• Stickers — kept for as long as your account exists, or until you delete individual stickers.
• Deleted accounts — when you delete your account, your profile and all your stickers (including public ones) are removed within 30 days.

7. Your rights

You can, at any time:

• Access the data we hold about you — visible in the app, or emailed to you on request.
• Correct your profile data by editing it in the app.
• Delete individual stickers from your collection.
• Delete your entire account and all associated data from within the app (More tab → Delete account), or by sending us a request via the contact form. Deletion from within the app is immediate; requests sent via the form are actioned within 30 days.

If you are in the EU, UK, or California, you have additional rights under the GDPR / UK GDPR / CCPA, including the right to data portability and to lodge a complaint with your local data protection authority.

8. Children

Slaps is not directed at anyone under the age of 13, and we do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has created an account, contact us via the contact form and we will delete the account.

9. Security

We protect your data using industry-standard technical and organisational measures, including encrypted transmission (TLS/HTTPS), secure password storage, server-side secret management, and access controls that apply the principle of least privilege.

No system is perfectly secure, but we take reasonable steps to protect your data and promptly address any vulnerabilities we become aware of.

10. User-generated content

Slaps lets users post photographs of stickers they find in the wild. We have a zero-tolerance policy for objectionable content (hate speech, violence, nudity, copyrighted material posted without rights). You can report any sticker by tapping the Report button on the sticker's detail page. We review reports promptly, typically within 72 hours, and remove content that violates our policy. Users who repeatedly violate the policy will have their accounts terminated.

11. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top of this policy and email registered users at the address on file before the changes take effect. Continued use of Slaps after the effective date constitutes acceptance of the updated policy.

12. Contact

• Contact form: getslaps.app/contact
• Data controller: Malcolm Pirrie, Toronto, Ontario, Canada