Last updated: 14 September 2026

MATCHY is operated by Active Life Solutions Ltd, a company registered in Cyprus.

Data Controller
Active Life Solutions Ltd
Charalampou Pettemeridi 3
Strovolos, 2042 Nicosia
Cyprus

Email: support@matchy.cy

This Privacy Policy explains how MATCHY collects, uses, stores, shares and protects personal data when you use the MATCHY mobile application and related services.

MATCHY is initially intended for users in the European Union and European Economic Area and is operated in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Personal Data We Collect

We collect only the information needed to provide and operate MATCHY.

Account Information

When you create an account, we may collect:

  • your name;
  • your email address;
  • your account identifier;
  • authentication information necessary to sign you in.

MATCHY does not collect your phone number, date of birth or precise location.

Profile Information

You may choose to provide additional profile information, including:

  • profile photograph;
  • hobbies or interests;
  • sports or activity preferences;
  • skill or experience level selected by you;
  • optional links to external profiles such as Facebook, Instagram, TikTok, Twitch, Playtomic or OP.GG.

This information is provided voluntarily and may be visible to other MATCHY users as part of your profile.

Event Information

Users who create events may provide information such as:

  • event title;
  • event description;
  • event date and time;
  • venue or location entered manually by the organizer;
  • sports or activity type;
  • participation information;
  • event banner image;
  • other event-related information entered by the organizer.

MATCHY does not request or collect your device’s GPS location.

Messages

MATCHY includes private messaging functionality.

Messages sent through MATCHY are stored in our backend database so that users can communicate with each other and retrieve their conversations.

Message content is associated with the relevant user accounts and conversation participants.

Images

Users may upload:

  • profile photographs; and
  • event banner images.

These images are stored and processed for the purpose of displaying them within MATCHY.

Technical and Authentication Data

MATCHY may process technical information necessary to operate and secure the service, such as:

  • user and account identifiers;
  • authentication tokens;
  • device or application identifiers where technically required;
  • server logs;
  • security and error information;
  • information necessary to deliver notifications.

MATCHY currently uses Firebase Authentication and may use infrastructure or platform providers necessary to operate the app and backend.

Search Activity

MATCHY does not retain users’ search history. Searches are used only to provide results during use of the app and are not stored as a search-history profile.

2. Information We Do Not Collect

MATCHY does not currently collect:

  • precise or approximate device GPS location;
  • phone numbers;
  • date of birth or age;
  • payment card or banking information;
  • health information;
  • fitness sensor or HealthKit data;
  • address-book contacts;
  • advertising identifiers for behavioural advertising;
  • stored search history.

MATCHY does not currently offer paid subscriptions or in-app payments.

MATCHY does not display third-party advertising and does not sell personal data to advertisers.

3. How We Use Personal Data

We process personal data to:

  • create and maintain user accounts;
  • authenticate users;
  • allow users to create, join and manage sports activities and events;
  • display user profiles;
  • allow users to communicate through private messaging;
  • display profile and event images;
  • enable users to share optional external profile links;
  • send relevant service notifications, such as match reminders or notifications when another user joins a group or activity;
  • maintain the security and integrity of MATCHY;
  • prevent misuse, fraud and technical abuse;
  • maintain, troubleshoot and improve the service;
  • respond to support or privacy requests;
  • comply with applicable legal obligations.

We do not use personal data for behavioural advertising or cross-app tracking.

4. Legal Bases Under the GDPR

Where the GDPR applies, we rely on one or more of the following legal bases:

Performance of a Contract

We process information where it is necessary to provide the MATCHY service you requested, including:

  • account creation;
  • authentication;
  • user profiles;
  • event creation and participation;
  • messaging;
  • service notifications.

Legitimate Interests

We may process limited information where necessary for our legitimate interests, including:

  • maintaining security;
  • preventing fraud and abuse;
  • troubleshooting technical issues;
  • protecting MATCHY and its users;
  • improving the reliability of the service.

Where we rely on legitimate interests, we consider whether those interests are overridden by your privacy rights.

Consent

We rely on consent where required, including where you voluntarily choose to provide optional profile information, images or external profile links, or where device permissions require your consent.

You may withdraw consent at any time where processing is based on consent.

Legal Obligations

We may process or retain information where required to comply with applicable law, regulatory obligations or valid legal requests.

5. Authentication Providers

MATCHY may allow you to sign in using:

  • email and password;
  • Google Sign-In;
  • Sign in with Apple.

When you use a third-party sign-in provider, that provider may process information in accordance with its own privacy policy.

MATCHY receives only the information necessary to authenticate your account, such as an account identifier, name or email address where provided by the authentication provider.

6. Firebase and Service Providers

MATCHY uses Firebase Authentication, provided by Google, for authentication services.

We may also use third-party infrastructure, hosting, database, notification and technical service providers where necessary to operate MATCHY.

These providers process information only as necessary to provide services to MATCHY and are required, where applicable, to protect personal data appropriately.

We do not permit service providers to use MATCHY user data for their own behavioural advertising purposes.

7. Push Notifications

MATCHY may send push notifications relating to the operation of the service, including:

  • event or match reminders;
  • notifications when users join your group or event;
  • other activity relevant to your participation in MATCHY.

You can manage or disable push notifications through your device settings.

Disabling notifications does not prevent you from using the core MATCHY service.

8. External Profile Links

Users may voluntarily add links to external services such as:

  • Facebook;
  • Instagram;
  • TikTok;
  • Twitch;
  • Playtomic;
  • OP.GG.

MATCHY does not control these external platforms.

When you open an external link, the privacy practices and terms of that third-party service apply.

MATCHY does not automatically retrieve or import content from those external profiles unless this is clearly stated within the app.

9. Visibility to Other Users

Certain information is intended to be visible to other MATCHY users in order for the service to function.

Depending on what you choose to provide, this may include:

  • your name;
  • profile photograph;
  • hobbies or interests;
  • selected activity or skill level;
  • event participation;
  • information you include in events you organize;
  • optional external profile links.

Private messages are visible only to the users participating in the relevant conversation, subject to technical and administrative access necessary to operate, secure or legally comply with the service.

10. Data Sharing

We do not sell personal data.

We may share personal data only where necessary:

  • with service providers that host, operate, authenticate, secure or support MATCHY;
  • with Apple or Google where necessary to provide platform authentication, distribution or notification services;
  • where required by law, court order or competent public authority;
  • where necessary to establish, exercise or defend legal claims;
  • where necessary to protect the safety, rights or security of MATCHY, our users or others;
  • as part of a merger, acquisition, restructuring or sale of the business, subject to applicable legal safeguards.

11. International Data Transfers

Some service providers used by MATCHY may process personal data outside Cyprus or outside the European Economic Area.

Where personal data is transferred outside the EEA, we use appropriate safeguards where required by law, which may include:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses approved by the European Commission;
  • other lawful transfer mechanisms available under the GDPR.

12. Data Retention

We keep personal data only for as long as necessary to provide MATCHY and meet legal, security and operational requirements.

If you request deletion of your account, MATCHY will delete or anonymize the personal data associated with your account within 14 days, unless specific information must be retained for a legitimate legal, security or regulatory reason.

Data that may be deleted includes, where applicable:

  • account information;
  • profile information;
  • uploaded profile images;
  • event banner images;
  • messages;
  • event-related personal data;
  • external profile links;
  • other user-generated content associated with your account.

Limited technical backups may persist temporarily after deletion until they are overwritten in the normal backup cycle.

Where information must legally be retained, it will be kept only for the required period and used only for that purpose.

13. Account Deletion

You can request deletion of your MATCHY account from within the app:

Profile → Danger Zone → Account Deletion

Deleting your account initiates deletion of the account and associated personal data.

You may also request account deletion outside the app through: https://matchy.cy/delete-account/

You may also contact us at:

support@matchy.cy

Google Play requires apps that allow account creation to offer both an in-app deletion route and an external web deletion resource, so you should definitely create that /delete-account page before completing the Play Console Data Safety section.

14. Your GDPR Rights

If the GDPR applies to you, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing;
  • receive certain personal data in a portable format;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, contact:

support@matchy.cy

We may need to verify your identity before acting on certain requests.

15. Complaints

If you believe your personal data has been processed in violation of applicable data protection law, you may lodge a complaint with the competent supervisory authority.

For MATCHY’s Cyprus establishment, the relevant supervisory authority is:

Office of the Commissioner for Personal Data Protection
Cyprus
Email: commissioner@dataprotection.gov.cy
P.O. Box 23378
1682 Nicosia
Cyprus
Tel: +357 22 818 456

The Cyprus Commissioner confirms that data subjects may lodge complaints regarding alleged GDPR infringements.

16. Security

We use reasonable technical and organizational measures intended to protect personal data against:

  • unauthorized access;
  • unlawful disclosure;
  • accidental loss;
  • alteration;
  • misuse;
  • destruction.

No internet-based service can guarantee absolute security.

Users are responsible for maintaining the confidentiality of their own account credentials.

17. Children’s Privacy

MATCHY is not specifically designed for or directed at young children.

We do not knowingly request or collect a user’s date of birth or age.

If we become aware that personal data has been collected from a child in circumstances where parental consent or another legal basis was required but not obtained, we will take appropriate steps to delete that information.

Parents or guardians who believe a child has provided personal data unlawfully may contact us at:

support@matchy.cy

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to MATCHY;
  • changes to our service providers;
  • legal or regulatory requirements;
  • changes to our data practices.

When we make material changes, we may provide notice through the app, website or another appropriate method.

The “Last updated” date at the top of this policy will indicate when the policy was most recently revised.

19. Contact

For privacy questions, requests or complaints:

Active Life Solutions Ltd
Charalampou Pettemeridi 3
Strovolos, 2042 Nicosia
Cyprus

Email: support@matchy.cy
Website: matchy.cy