Privacy notice

1. Who processes what

FUTR TECHNOLOGY B.V. decides why and how we use data for the FUTR service and this website:

There is no data protection officer. Privacy requests go to privacy@fu-tr.com.

Sometimes FUTR is responsible, sometimes your club.

FUTR is responsible for: your account; your personal football CV (including a share link and Transfer Room discoverability); FUTR Premium; the FUTR club subscription (our sale to the club); events FUTR itself sells; the affiliate programme; investor and partnership inquiries via /investors; and this website. A club that views your CV internally or finds it via Transfer Room is a recipient — not the controller of that CV.

The club is in principle responsible for member, team and fee data it records in FUTR (planning, chat, tasks, line-up, attendance, coach observations, development plan, member data, fee claims, club sponsorship). FUTR processes that data on the club’s instructions. Coach observations belong in the team file, not in your personal CV or Transfer Room.

Payments. The club remains the creditor for membership fees, club events and club sponsorship. VV Nieuwenhoorn collects only its membership fees on its own Stripe account; FUTR is not the collecting party for that, but still processes the club administration. For other clubs that collection may run via FUTR’s Stripe account, sometimes with Stripe Connect to the club; the club remains responsible for membership and the claim, and FUTR is responsible for that payment processing and its own tax records. That is not joint control with a single allocation document. Premium and the FUTR club subscription always run via FUTR.

Data that does not come from you. If a coach, parent or club administrator enters data about you, or you receive an invitation or payment email without filling anything in yourself, that data does not come from you. For club data the club must inform you; for a FUTR account or CV, FUTR does. This page is not a letter on behalf of the club. Where FUTR itself is controller, we inform you within one month at the latest, or earlier at our first contact or before we give the data to someone else. The first email or invitation is often that first contact.

2. What this page does and does not cover

This page applies to visitors of fu-tr.com, accounts in the web app, and the native shell around the team app.

• in-app consent by a parent or guardian for a child’s team data (avg-v2);
• a club’s statutes or own privacy policy;
• the terms of use (/voorwaarden) for Premium, the club package and tickets.

If we later want to use data for which FUTR is controller for something quite different, we will tell you first why, on what basis, and which rights you have.

3. Which data and why

We do not sell personal data and we do not use it for third-party advertising. We do not take automated decisions with legal effects or similarly serious consequences.

When we collect data we say what is required. Without required account data we cannot provide an account. Without necessary payment and invoice data, no payment or invoice. You may leave optional fields empty unless the field says otherwise.

Depending on what you or your club enter, this may also include: date of birth or age category, photo, address, phone, emergency contact, medical notes, volunteer tasks, chat.

Medical notes are special category data. The general avg-v2 consent is not specific enough for that. The club may process them only after a separate, explicit consent for those medical data. FUTR is processor then, unless it is a FUTR-owned service. Do not put medical or other special category data in fields not meant for that.

Sensitive child data (date of birth, address, emergency contact, medical notes) is stored encrypted. The ordinary app connection does not simply hand it to the browser.

If data does not come from you. Sources: coach, team manager, parent, club administrator, invitation, an import the club runs, and — if the club switches that link on — Sportlink/KNVB Club.Dataservice (members: name, relation code or federation number, date of birth, age category, email, team assignment; plus the match programme). The club decides whether it uses Sportlink; Sportlink and the KNVB have their own terms. This may include name, team role, age category, contact or emergency data, attendance, coach observations, fee data, or club history that later appears on a personal CV. The club informs you about club data; FUTR about account and CV.

4. Children

The team file and the personal CV are two separate processing operations.

Team file. For a child’s team data the app shows separate consent from a parent or guardian (avg-v2). The Dutch age limit for that consent is 16. The club is in principle the controller; FUTR processes on the club’s instructions. The avg-v2 record does not change those roles. The in-app text governs the scope of that consent, not who the controller is. This website notice is not that consent. The app currently has no button to withdraw that consent yourself, and does not automatically block coach input if consent is missing. To withdraw: email privacy@fu-tr.com or tell the coach or club.

Personal CV. A personal football CV, a share link and Transfer Room discoverability are FUTR processing. Coach observations do not go there. Publication, a share link or club discoverability for youth happens only after a separate parental approval then in force in the app. Giving that approval later does not make earlier processing lawful after the fact.

This notice does not say that FUTR may store a youth CV before that parental approval. Until then, what the app shows at that moment applies: no publication, no share link and no Transfer Room without the required approval.

For a child under 16 the parent or guardian is the contact point.

5. Who can see it

Only people with a role for it: you, linked parent(s), the coach or team manager of your team, authorised club board members within club rights, and FUTR platform admin for the service (not to read child data through the ordinary app). The club board has its own club channel and can only read a team chat after the coach or team manager allows it; that reading starts from that moment, not retrospectively.

A CV share link is visible to anyone who has the link, until you or the authorised parent revoke it. Transfer Room is visible to authorised club users if you switch on discoverability. Not a public internet profile. Still visible to whoever you (or the app rules) give access.

Your own club can see an internal CV in the member file according to club rights, separate from Transfer Room.

6. Providers

Dictation uses your browser or device speech recognition. In some browsers, including Chrome, the browser vendor processes that audio on its own servers; that falls under their privacy policy. We only receive the text. That text goes to OpenRouter only if you then deliberately choose AI.

We do not use Google Analytics, a Meta pixel, Hotjar or Sentry.

WhatsApp or your own mail app to send an invitation is your choice.

Future hosting of encryption at Scaleway is prepared, not the current live chain.

7. Data outside the EU

Supabase is in Ireland. Vercel, Resend, Stripe, OpenRouter (and the models behind it) and Vercel AI Gateway / OpenAI are US providers and may process data in the United States or other countries. A transfer may use an adequacy decision, the EU-US Data Privacy Framework or the provider’s standard contractual clauses. We have not checked which mechanism currently applies for each chain. You can request the documents we have via privacy@fu-tr.com. AI use is optional and follows a deliberate action.

8. How long

There is no button to delete your account yourself. Request erasure, access or a copy via privacy@fu-tr.com. We respond within the legal time limit, in principle one month. Where there is no fixed maximum period, we keep the data until the purpose is met and then erase or anonymise it. You can ask for the exact periods.

9. Cookies and local storage

No marketing or analytics cookies. Functional storage only:

• language and whether you chose it deliberately, plus a separate language choice for manuals;
• display: theme, sound, list filters, recent emoji and searches;
• whether you dismissed the cookie notice, a tip card or banner, and where you are in a multi-step form;
• sign-in session if you sign in.

You can clear this in your browser. The site then no longer remembers language and the notice.

10. Your rights

You may ask which data we have about you. You may also ask for correction, erasure, less processing or a copy. Where we process data by automated means on the basis of consent or a contract, you may request those data in a commonly used, machine-readable format; there is no button for that, email privacy@fu-tr.com. You may object if we rely on legitimate interest, and withdraw consent. Withdrawal applies from that moment; what was allowed earlier remains lawful at that time.

Email privacy@fu-tr.com. We may ask who you are. If it is club data, we refer you to the club or involve the club. We respond in principle within one month.

Complaint: the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or the supervisory authority in your country of residence in the EEA.