AKWABA FOOT
Privacy Policy
Last updated: 15 November 2026
1. Data we collect
We collect your account name, email and optional avatar; registrations, club history, photos and documents you submit; contact messages; newsletter email, language and consent; push device tokens and category preferences; private assistant conversations; and payment/order references, amounts and status. Google sign-in shares the profile information needed for authentication. Payment providers handle card and mobile-money credentials, not the assistant.
2. How we use data
Data is used to operate accounts, evaluate registrations and approvals, show approved public profiles, process verified payments, provide football information, respond to messages and protect the service. Authentication, contractual services, your choices and applicable legal duties inform the basis for processing. We do not sell your personal information.
3. Public and private information
Approved public profiles, club/team pages, scores and news can be read by visitors. Account emails, contact messages, registration documents, assistant conversations and payment history are not public. Conversations are restricted to their owner; administrators’ configuration permissions do not make conversation history public. Only submit personal information you are authorized to share.
4. Cookies and device storage
Sign-in needs session storage in your browser. We also save language, theme, cart, welcome completion, installation state and notification choices, and cache public pages/assets for offline reading. Private account, payment and admin pages are excluded from offline caching. These functions are distinct from Lovable’s cookie-free analytics. This site does not currently send a cookie-banner choice to Google Consent Mode.
5. Visitor analytics
Lovable records page visits, referral sources, country, browser, operating system, device type, time on page, page speed and errors, plus clicks and app events such as welcome and registration activity. These are recorded for visitors without a consent-linked banner. It uses no cookies, stores nothing on the visitor’s device, does not keep IP addresses and does not identify visitors. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it: https://lovable.dev/privacy.
Lovable · Privacy Policy6. Newsletter
Newsletter signup records your email, language and explicit subscription choice privately. A signup may notify the team by email. Signup does not authorize unrelated marketing or guarantee a newsletter schedule. Ask the team to withdraw your subscription; use an unsubscribe link when a newsletter is sent.
7. Push notifications
Notifications require browser permission. Firebase Cloud Messaging processes a device token and delivery information; we save the token against your signed-in account and respect category preferences. You can change preferences in your profile or revoke permission in browser/device settings. Declining push does not prevent ordinary use.
8. Providers and AI
Supabase hosts authentication and application records. Paystack handles current checkout and historical Kora records may be verified with Kora. Google Maps receives map requests and location if you choose to provide it; the weather service receives requested coordinates. Firebase handles push delivery. Our email service processes subscription alerts. When you send an assistant message, its conversation history and selected public football data are sent to Google Gemini using the team’s Google account. Do not enter passwords, payment credentials or sensitive documents in chat. Provider processing may occur outside Côte d’Ivoire and is subject to provider terms and applicable safeguards.
9. Security and retention
Supabase hashes passwords rather than storing them in readable form. Server-only secrets, authenticated access checks and row-level restrictions protect private records; no system is risk-free. Chat history remains until you delete the conversation or request account deletion. Other records are kept as needed for service operation, accounting, legal obligations and sporting integrity; we do not promise immediate deletion of records we must retain.
10. Your rights
Under applicable Ivorian data-protection law, including Law No. 2013-450, you may request access, correction, opposition where applicable and deletion of personal data, and withdraw optional consent. GDPR rights may also apply where its territorial scope covers the processing; applicability is assessed individually. Requests may require identity verification. You can raise concerns with Côte d’Ivoire’s competent data-protection authority, ARTCI. Contact privacy@akwabafoot.com or use our Contact page.
privacy@akwabafoot.com