Privacy policy

This policy explains what FUTnine, the iPhone app, and futnine.app, this website, collect about you, why, how long we keep it and who else receives it. FUTnine is for EA SPORTS FC Ultimate Team players: you photograph a match stats screen and the app reads it for you.

Who is responsible

The controller of your data is Gökhan Efe Digital Solutions, owned by Gökhan Efe, Fritz-Bauer-Str. 15, 81249 München, Germany. Write to support@futnine.app for anything in this policy. See also the Impressum.

What we collect

Your account

You sign in with Sign in with Apple. We receive an Apple identifier, and your name and email if you share them. We keep them until you delete your account. We also store the Apple refresh token, encrypted, so that we can revoke it when you delete your account. FUTnine never asks for your EA login.

Your profile

Gamertag, platform, club name and club picture, so we can show your card and tag your matches. We keep them until you change them or delete your account.

Match screenshots

When you photograph a stats screen, the image is uploaded so the numbers can be read. A screenshot of a match you never verify is deleted after 7 days. A screenshot of a verified match is deleted after 90 days. If you delete a match, its screenshot is removed at the next hourly clean-up. The images show both players' gamertags and club names. After a screenshot is deleted the stats stay and the app shows "Screenshot no longer stored".

Match stats and your history

The numbers read from the screen, including the opponent's club name as it appears on it, plus your Weekend League runs, Report Cards, Game Plans, season goal, tactics, Coach feed and Weekly Reviews, and your FUTnine Card. We keep them until you delete your account. When you delete a single match or tactic it is hidden from you at once, and it is permanently removed when you delete your account.

Help improve FUTnine (optional, off by default)

If you turn on "Help improve FUTnine" in the app, we copy your verified screenshots, before they are deleted, to a separate store used to improve how well the app reads stats screens. Gamertags and club names on those copies are not blurred. Turning the setting off stops future copies; it does not remove the ones already made. They are removed when you delete your account.

Notifications

If you allow push notifications we store your device push token and send the notification text through Expo's push service. Tokens are removed when you turn pushes off or delete your account.

Subscription

FUTnine Pro is bought through Apple and managed with RevenueCat. RevenueCat receives a random FUTnine account id (not your Apple ID) and your purchase state. We keep the plan state and product, without identifiers, after you delete your account. Account deletion does not delete your customer record at RevenueCat; that record holds only the random account id and your purchase history.

Usage analytics and crash reports

The app sends product events to PostHog (EU) only if you agree. It asks you during onboarding, and you can change your answer anytime in Settings, under Share usage analytics. Events are keyed by a random analytics id that is never your email, Apple id or account id. Crash and error reports go to Sentry with stats, images, tokens and email removed; Sentry stores them in its EU region (Frankfurt, Germany).

Public Cards and Tactic Pages

A Public Card is off by default. When you switch it on, anyone with the link can see your gamertag, nation, position, overall, tier, six attributes, card style and showcase stamps. Nothing else. You can switch it off or reset the link at any time; the old link stops working. The page is not indexed by search engines. Preview images of the card are cached and can remain until our next weekly clean-up. Tactic Pages show the tactic settings you choose to share and aggregated statistics that carry no account ids.

This website

We use Cloudflare Web Analytics, which does not use cookies, to count page views. Our request logs hold the page path, status and a salted hash of the first part of your IP address, never the address itself. The waitlist form is the only place where the website asks for personal data: see below.

Waitlist

The form uses Cloudflare Turnstile to tell people from bots. Turnstile checks technical details of your browser and connection for that purpose only. If you join the waitlist we send a confirmation email through Resend. Only after you click Confirm is your email address, and the platform you chose, saved to our Resend audience. We use it to email you once when FUTnine launches. We do not log your address. You can ask us to delete it at any time by writing to support@futnine.app.

Who else receives your data

• Cloudflare hosts everything: servers, database, image storage, queues and logs. Our database and image storage are kept in the EU under Cloudflare's EU jurisdiction. Requests are answered by the Cloudflare server nearest to you. Logs are kept for 7 days.
• Google Gemini reads your screenshots (OCR) on a paid-tier project. Under the Gemini API terms for paid services, that data is not used to train Google's models.
• Cloudflare Workers AI reads screenshots only if the primary reader fails, and only in test builds.
• Apple provides Sign in with Apple and App Store billing.
• RevenueCat manages the subscription.
• Expo delivers push notifications.
• Sentry (crash reports) and PostHog EU (analytics), as described above.
• Resend sends the waitlist email and holds the audience.

We do not sell your data and we do not use it for advertising.

Your choices and rights

Delete your account in the app: open Settings, then Account, then Delete account. Account deletion removes your profile, matches, screenshots, opt-in copies, tactics, cards and sessions, and asks PostHog to delete your analytics events. We keep an empty account record with no personal details, and billing state with no identifiers. If you cannot sign in, email support@futnine.app.

Export your data in the app: open Settings, then Privacy & data, then Download my data (one export every 24 hours). You can also ask us for access, correction or deletion by email. If you are in the EU or UK you may complain to your data protection authority.

How long we keep operational data

Sign-in sessions are deleted 30 days after they expire. Upload attempt records are kept 7 days. Purchase webhook records are deleted after 90 days. Coach feed items are deleted after 30 days. Handled system events are deleted after 30 days.

Children

FUTnine is not directed at children under 13 and we do not knowingly collect their data.

Changes

If we change this policy we change the date at the top of this page and, for material changes, tell you in the app.