Privacy policy

Matchday is operated by Res Digital (“we”, “us”), based in the United Kingdom. Contact: hello@res.digital.

• We are the controller for account, billing, support and usage data about the people who sign in to Matchday (club owners and the staff they invite).
• For content a club adds about other people (players, sponsors and newsletter subscribers), the club is the controller and we act as its processor, handling that data only to provide Matchday to the club.

Many clubs run youth sides, so squad data may relate to children. Matchday accounts are for adults (18+) acting for a club; the app is not directed at children.

The club is responsible for having a lawful basis to add and publish a player's details and photo, including parental or guardian consent for under-18s in line with the club's safeguarding policy and FA guidance, and for honouring requests to remove them. Clubs can edit or delete any player at any time from the Squad page. If you are a parent and want a child's data removed, contact the club first; you can also email us and we will pass the request on and help the club act on it.

We do not sell personal data, use it for advertising, or build profiles of players or supporters. We do not use your content to train AI models.

When a club owner connects a channel, we receive access tokens and basic account details from Meta or X. We use them only to:

• list the Pages / accounts the owner can publish to, so they can choose one;
• publish the posts and images club staff create in Matchday to the chosen account;
• show whether each channel is connected or needs reconnecting.

We do not read private messages, followers' data or other people's content, and we do not share platform data with anyone else. Tokens are stored server-side, are never shown in the app and are deleted immediately when the owner disconnects the channel or deletes the club. Use of data received from Meta and X follows their platform terms and developer policies.

We use a small number of service providers who process data on our instructions:

Posts you publish become public on the social platform you chose and are then governed by that platform's policies. We may also disclose data if required by law or to protect the rights and safety of users.

Some providers (for example Stripe, Meta, X and OpenAI) process data outside the UK, mainly in the United States. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Club data (profile, squad, matches, posts, sponsors, supporters, connected channels, uploaded images): kept while the club has an account; deleted immediately when the owner deletes the club.
• Your account: kept until you delete it (or the club you own is deleted and you belong to no other club).
• Staff invites: expire after 7 days; revoked or expired invites are removed with the club.
• Support messages: kept for up to 24 months, or until you delete your account.
• Billing records: Stripe and we keep invoices and payment records for 6 years to meet UK tax law.
• Logs and backups: overwritten on a rolling basis, normally within 30 days.

Data is encrypted in transit (HTTPS). Access to club data is checked on every request against the user's role, secrets such as social tokens and API keys are never sent to the browser, passwords are hashed, and staff access can be revoked by the club at any time. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the ICO where required.

Under UK GDPR you can ask us to:

• access a copy of your personal data;
• correct inaccurate data (most of it you can edit directly in the app);
• delete your data (see below);
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format.

Email hello@res.digital. We reply within one month. If your request concerns data a club controls (for example a player profile or a newsletter subscription), we'll involve the club. You can also complain to the Information Commissioner's Office at ico.org.uk.

Data deletion instructions for Matchday users and for people who connected Facebook, Instagram, Threads or X:

• Club owners: sign in, open Club settings → Danger zone → Delete club. This cancels the subscription, deletes your customer record (name, email and saved payment methods) at Stripe, and permanently deletes the club, all its data, its connected-channel tokens and uploaded images, and your login. Stripe keeps the invoices and payment records it must hold for tax purposes.
• Staff (delegates): open Club settings → Delete my account, or Leave club to leave a single club.
• Remove just a social connection: on the Channels page, choose Disconnect. The tokens are deleted immediately. You can also remove Matchday from Facebook (Settings & privacy → Settings → Business integrations / Apps and websites) or X (Settings → Security and account access → Apps and sessions).
• Removing Matchday from Facebook, Instagram or Threads (or asking Meta to delete your data) automatically notifies us, and we delete the tokens and account details we hold for that account straight away. Meta gives you a link back to this page showing the request's status.
• Newsletter subscribers: use the unsubscribe link in any club email.
• By email: send “Data deletion request” to hello@res.digital from the address on your account (or tell us the Facebook/X account you connected). We confirm and complete deletion within 30 days.

We use only essential cookies and local storage: to keep you signed in, protect sign-in flows and remember your light/dark theme. We do not use advertising or third-party analytics cookies, so no consent banner is needed. Stripe sets its own essential cookies on its checkout pages.

We'll update this page when our practices change and, for material changes, tell account holders by email or in the app. See also our Terms of service.

Res Digital · hello@res.digital