Privacy Policy — FEATUP

New version: it takes effect on 2 November 2026. Until then, version 2.3 of 23 October 2026 applies.

Version: 2.4 — 2 November 2026 (in force from 2 November 2026; replaces version 2.3 of 23 October 2026; English translation of the French original — in case of discrepancy, the French version prevails)
Data controller: Eduard Ahmeti, sole proprietorship, Rue de la Maladière, 1205 Geneva, Switzerland — contact@featup.app

FEATUP is a mobile app that connects people who want to practise sport together (partners, events, recurring groups, verified coaches and professionals). This policy explains which personal data we process, why, with whom we share it, how long we keep it and what your rights are. It complies with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). Some features described here require the latest version of the app.

1. Data we collect

Account data (required): email address, first name, last name, gender, date of birth, city, username, chosen language.

Sign-in: you can sign in with your email address and a password (stored only in hashed form, never readable), with a one-time code sent by email, or with your Apple or Google account. If you sign up with your email address and a password, you confirm your address by following the link we send you by email; a change of address is confirmed in the same way, through one link sent to your old address and another to the new one. With Apple or Google, we receive from these services the identifier of your account with them, your email address (with Apple, possibly a relay address that hides your real address) and your first and last name if they are provided. Google also sends the language of your Google account and a link to your Google profile photo: our sign-in system stores them with your account; FEATUP does not use the photo, and the language may be used to choose the language of our emails as long as your profile does not specify one. We never receive your Apple or Google password.

Profile data (optional): profile photo, album photos (6 max), biography, sports practised and levels, weekly training schedule (day, times, free-text place). Photos are sent without their metadata (GPS position, device, date taken): this metadata is removed on your phone before upload.

Approximate location: if you allow it, your location is determined while the app is open — when it starts and when you return to it (at most once every 15 minutes), and when you open the partner search, the events map or the groups — never in the background. Our server rounds it to about 1 km before saving it to your profile: your exact location is never stored or shown to other members. When you search for nearby groups, your location is used for the calculation without being kept. Events and groups you create are saved with the place you explicitly choose.

Usage data: friend requests and friendships, chat messages, posts, comments and likes, blocked accounts, reports you make, participation in events and group sessions (RSVP responses), Match of the day suggestions, notification settings (including email reminders), date of last activity.

Community-confirmed reliability and levels: after a session or event, participants can mutually confirm the attendance of the other participants and, optionally, rate their sporting level. We store these individual confirmations and ratings as well as the computed aggregates (reliability rate, confirmed level per sport, number of ratings). See section 2 (legal basis) and section 6 (what is visible).

Aggregated sports activity (gamification): streaks of active weeks, badges earned, counters of confirmed sessions — all derived from your actual participation in sessions, never from your use of the app.

Professional (PRO) status — only if you apply:

• application: disciplines, professional title and, if you provide them, description and hourly rate;
• identity document (photo);
• verification selfie — sensitive data (see section 3);
• diplomas or certifications: 1 to 3, as photos or PDFs;
• follow-up of the application: status, dates, the team's decision with its reason and, where applicable, its message; the team's internal note (never shown in the app, but included in your data export); date of any withdrawal of the status;
• gifted PRO months: number of months, dates, any cancellation, the team's internal note;
• ratings (1 to 5 stars) given by participants in your events.

Payments: no payment data is processed. Paid events and the paid PRO subscription are not available at present; if a paid feature is introduced, this policy will be updated before it is activated.

Moderation and safety data:

• for each public post (photo and caption): the result of the automated pre-publication analysis (categories, scores, any reason) and, where applicable, the human moderator's decision (section 4);
• reports concerning you: reason, details entered by the person reporting, content concerned and decision;
• if you are excluded from FEATUP: a fingerprint of your email address and of your Apple or Google identifiers (section 7).

Technical data:

• your device's notification tokens (Firebase Cloud Messaging) and device type (iPhone or Android), if you enable notifications;
• technical log of notifications sent: identifiers of the recipient and the author, type, date and delivery result;
• email reminder log: friend request concerned, recipient, preparation and sending dates, number of attempts and delivery result (in case of failure, a technical error message);
• chosen language and theme;
• crash reports and performance measurements (Sentry): device model, operating system, app version, a technical trace of the error and technical addresses of requests, without your name, your email or published content;
• app updates (Shorebird): random installation identifier, app version and platform;
• sign-in sessions: opening date and date of last renewal of each session, IP address and type of device or browser, recorded by our sign-in system;
• IP address and date and time of requests, in our providers' technical logs (section 7).

We do not collect: phone number, phone contacts, payment data, or biometric data (except the PRO application selfie, with your explicit consent). Your exact location is never stored.

2. Purposes and legal bases

Session reminders are created on your phone: they do not go through our servers.

A friend request reminder shows the first name of the person who sent the request, the date of the request and a link to their profile (with their username): if you send a friend request, this information may therefore appear in the email sent to its recipient.

3. Sensitive data: the PRO verification selfie

The verification selfie is a photo of your face. No automated facial recognition is performed, but as a precaution we treat it as sensitive data (biometric data within the meaning of art. 5 let. c FADP and art. 9 GDPR), with reinforced safeguards:

• Explicit consent: the selfie is collected only if you apply for PRO status and tick the dedicated consent box. Without consent, the application cannot be sent; PRO status is then not available, but the rest of the app is not affected.
• Capture on the device: face detection (a single face, eyes open, smiling) is performed locally on your phone (Google's ML Kit library, running on the device) and takes the photo automatically. If detection does not succeed, you can take the photo yourself; the team then sees that the selfie was taken manually. The image is never sent to Google; ML Kit only sends Google technical information (device model and operating system, app version, installation identifier, performance measurements).
• Single, limited use: the selfie is used exclusively for a manual visual comparison with the identity document by the team. No biometric template is created and no automated decision is taken.
• Private storage: the selfie, the identity document and the diplomas are stored in Switzerland in a private space, inaccessible to other members, and are never published. Only the team can access them, through temporary links valid for 5 minutes.
• Short retention: the selfie and the identity document are deleted as soon as a decision is taken on your application, whether it is accepted or rejected (section 7).
• Withdrawal of consent: at any time before the decision, by writing to contact@featup.app; your application is then closed and your documents are deleted. After the decision, your selfie has already been deleted.

4. AI-assisted content moderation

Every public post (photo and caption) is analysed before publication by automated systems: a harmful-content detection model (OpenAI omni-moderation) and a complementary analysis of the caption by a language model (OpenAI). This analysis produces risk categories and scores.

• Content deemed safe: published immediately.
• Flagged or uncertain content: the post is held and forwarded to a human moderator, who alone decides whether to publish or reject it. No adverse decision is fully automated (art. 21 FADP / art. 22 GDPR): the rejection of a post is always a human decision.
• Authors can see their own pending posts (marked "Pending review"); other members never see unvalidated content.
• Images are sent to the analysis provider via a short-lived temporary address; the provider does not use this data to train its models (section 6).
• Rejected content: kept for 90 days for evidentiary purposes (challenges, repeat offences, legal obligations), then deleted.

Profile and album photos do not go through this prior analysis; other members can report them (Terms of Use, section 6).

5. AI-generated suggestions ("icebreakers")

For the Match of the day, a short opening message may be generated by an AI (OpenAI) from limited information already visible in the app: first names, shared sport, approximate distance and, where applicable, a compatible training slot. This message is a mere suggestion: it is never sent automatically, and you can edit or replace it entirely before sending. No content from your private conversations is sent to the AI.

6. Recipients, processors and transfers

Hosting: your data is stored by Supabase on Amazon Web Services infrastructure in Zurich (Switzerland): profiles, messages, photos and documents. Supabase's technical logs are kept in the European Union.

You can obtain a copy of the applicable safeguards (standard contractual clauses) by writing to contact@featup.app.

Third-party services called directly by the app: OpenStreetMap maps (OpenStreetMap Foundation, United Kingdom), Photon address search (komoot GmbH, Germany) and Nominatim (OpenStreetMap Foundation). They receive your IP address, the map area displayed and the address text searched, and process them under their own rules.

Sign-in with Apple or Google: if you choose this method, Apple or Google process the sign-in as separate controllers, under their own policies.

Notifications: if message preview is on (default setting, which you can switch off in the app's settings), the notification of a new message contains the sender's first name and the beginning of the message (120 characters at most). Like every notification, it passes through Google (Firebase) and, on iPhone, through Apple's notification service, which processes it under its own rules.

No data is sold or passed on to third parties for advertising purposes.

What other members see: your first name and the initial of your last name, your username, your age (never your date of birth), your gender, your city, your approximate distance, your bio, your sports, your profile photo, your album photos, your posts (after validation) and your comments; your aggregated reliability rate (once there are at least 5 ratings) and your community-confirmed levels (number of ratings and median — never who rated you or how); for PROs: PRO badge, title, disciplines, rate and average rating. Local leaderboards show only your first name, your profile photo and your number of sessions over the last 30 days, to members of your age group within a radius of about 25 km. Your schedule is visible only to your friends, unless you choose to make it public. Your PRO application documents, the reasons and messages of decisions and your gifted months are never visible to other members.

Age groups: members aged 16 and 17 and members aged 18 and over form two separate spaces. Search, the Match of the day, the feed, leaderboards, friend requests (and therefore conversations), events and groups only connect members of the same age group. PRO coaches, all of whom are adults, are visible only to adult members. This separation is based on the date of birth given at sign-up: lying about one's age is prohibited (Terms of Use, section 3) and may lead to exclusion.

7. Retention periods

• Account, profile and usage data: as long as your account exists, unless a shorter period is stated below.
• Sign-ups never confirmed: an account created with an email address and a password is deleted automatically if its address has not been confirmed within 30 days of sign-up, with the same effects as an account deletion (below).
• Account deletion (Settings → Delete my account): immediate erasure of your profile, your photos and posts, your comments, your friendships, your conversations and messages (the conversation also disappears for the other person), the events and groups you created, your PRO application and documents, your gifted months and the reports you made or that concern you. Only the following remain, for a limited time: the fingerprint in the event of exclusion (below), the daily database backups (automatically erased after 7 days), technical logs (periods below) and, where applicable, our email exchanges with you and the alerts received by the team (below).
• Reliability and ratings: deleted with the account of the person rated or of the person who rated; the aggregates disappear with the profile.
• PRO application:
• identity document and selfie: deleted as soon as the decision is taken (acceptance or rejection);
• diplomas: deleted if the application is rejected or the PRO status is withdrawn; kept as long as you are PRO, to justify the verification;
• files from an interrupted upload: deleted by an automatic weekly clean-up;
• application information (disciplines, title, description, rate, decisions, reasons, messages and internal notes) and gifted months: kept as long as your account exists, for the history and to handle a challenge or a new application.
• Content rejected by moderation: kept for 90 days for evidentiary purposes, then deleted (section 4).
• Reports: kept for at most 12 months after they have been handled, then deleted; they are also deleted with the account of the person who reported or of the person reported.
• Fingerprint of excluded accounts: if you are excluded from FEATUP, a fingerprint of your email address and of your Apple or Google identifiers is kept for 3 years, even after your account is deleted, to prevent a new sign-up or the addition of these identifiers to another account; it is then deleted automatically. This fingerprint is a code computed from this data (hash): it does not contain your address in plain text and only makes it possible to recognise it if it is used again.
• Emails: alerts received by the team (PRO applications, reports) are deleted at the latest 12 months after they have been handled; our email exchanges with you are kept for at most 3 years after the last message, so that we can prove that your requests were handled.
• Technical data: crash reports (Sentry) 90 days at most; Supabase technical logs (IP address, requests) 7 days; Shorebird logs (IP address) 90 days at most; technical log of notifications 90 days; email reminder log: deleted with the friend request concerned (withdrawal of the request, end of the friendship, deletion of either account), otherwise 12 months after the reminder (or, if the request is still pending at that time, as soon as it is accepted or declined); sign-in sessions: until you sign out on the device concerned or your account is deleted; notification tokens deleted when you sign out, when your account is deleted or when Firebase tells us that the token is no longer valid (for example after the app has been uninstalled).

8. Your rights (art. 25 et seq. FADP / art. 15 to 22 GDPR)

Two essential rights can be exercised directly in the app, without contacting us:

• Access and portability: Settings → Export my data (complete copy in JSON, including your PRO application, the team's decisions, reasons, messages and internal notes, and your gifted months);
• Erasure: Settings → Delete my account (immediate and irreversible, subject to the exceptions in section 7). If you signed in with Apple, you can also remove FEATUP from your Apple Account, in your iPhone's settings.

If your account has been excluded, write to us at contact@featup.app to obtain a copy of your data or have your account deleted.

In addition:

• Rectification: edit your profile at any time in the app.
• Withdrawal of consent: switch off location or notifications in your phone's settings. In the app, friend requests, accepted requests, messages, message preview, join requests and the Match of the day each have their own switch; the other notifications (cancellations, PRO decisions and gifted months) can be switched off in your phone's settings. These switches only concern push notifications; for email reminders, see "Objection" below. For the selfie, write to contact@featup.app (section 3).
• Objection and restriction: for processing based on legitimate interest (including community reliability, moderation, local leaderboards and the fingerprint of excluded accounts), write to contact@featup.app. For email reminders, use the "Stop these reminders" link in each reminder (or, if your email app offers it, its unsubscribe button); the page opened by this link also lets you turn them back on. You can also object in advance by writing to contact@featup.app.
• Challenging a decision: any moderation decision (removal, rejection, exclusion) or decision on PRO status (rejection, withdrawal) can be challenged by writing to contact@featup.app; it will be reviewed by a person.
• Complaint: you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the data protection authority of your country of residence.

For any request: contact@featup.app. We reply within 30 days.

9. Minimum age and minors

FEATUP is reserved for persons aged 16 and over. The account of anyone identified as being under 16 is deleted. Members aged 16 and 17 interact only with members of their age group, based on the date of birth given at sign-up (section 6). PRO status is reserved for persons aged 18 and over.

10. Security

Encryption in transit (TLS), row-level access control in the database (Row Level Security), hashed passwords, least-privilege access keys, sensitive documents in private storage spaces. In the app, only the participants of a conversation can read its messages. PRO documents are accessible only to the team, through temporary links valid for 5 minutes; alert emails sent to the team never contain these documents or links to them. Moderation decisions and PRO decisions can only be recorded by the team or by our internal services, never by a member.

11. Changes

Any substantial change to this policy will be announced to you in the app or by email before it takes effect. If a new purpose of processing concerns sensitive data, new explicit consent will be requested. The version in force is always available on featup.app.