Document version: 2026-08-22 Application: Hockey Log
The data controller is Josef Konárek, company ID (IČO) 14016958, Rajhradská 3058/42, Horní Počernice, 193 00 Prague 9, Czech Republic, trading under the FrozenLabs brand. For anything concerning personal data, contact podpora@hockeylog.cz.
The app stores data on your device and syncs it to the server as you go, so it survives a change of phone and is available from more than one device. With the one exception noted below, what is in the app is also on the server.
| Data | Why |
|---|---|
| Email address | signing in and password recovery |
| Password, stored one-way encrypted | verifying your sign-in |
| Account creation and last sign-in date | running and securing the account |
| Record of consents given, with document version and date | proving what you agreed to, and when |
| Guardian's email address, if you provide one | evidencing consent for a player under 15 |
| App settings — language, theme, date format | keeping settings consistent across devices |
| Record | What it holds |
|---|---|
| Player | name, date of birth, position, jersey number |
| Club | name |
| Season | label, start and end |
| Game | date, opponent, venue, goals, assists, penalty minutes, score |
| Practice | date, start and end time, type, attendance |
| Expense | name, amount, currency, date, category |
| Custom categories | names of practice types and expense categories |
When you delete a record, a deletion marker stays on the server — the record identifier and a timestamp — so the deletion reaches your other devices. It holds none of the original content.
Without your explicit consent we collect no analytics, and we use no third-party advertising or measurement tools. What we collect with consent is described in the next section.
Only if you turn it on yourself — by ticking the box when creating your first profile, or at any time in Settings → Usage statistics — we record events about how the app is used: an event name from a fixed list (e.g. "paywall opened", "onboarding completed", "purchase failed" with the error code), a timestamp, the app version and the platform (iOS/Android). Events contain no free text and never anything about players, games or expenses.
Events are linked to your account, stored exclusively on our EU server (Supabase, see below) and deleted after 12 months at the latest. You can withdraw the consent at any time in Settings — from that moment nothing more is recorded and unsent events are discarded. No third-party tool takes part in the collection.
When the app crashes, a technical crash report is sent: the device model, the OS and app versions, and a technical record of where the crash happened. The report contains no name, no email and none of your records and is not linked to your account. It is processed for us by Sentry with data stored in the EU, and reports are deleted after 90 days at the latest. Without this diagnostic we would never learn about the app's faults or be able to fix them; it therefore runs on legitimate interest, not consent.
Payment details. Subscriptions are paid through the App Store or Google Play and no card number or anything comparable ever reaches us — see Subscriptions and payments.
| Purpose | Legal basis |
|---|---|
| Running the account, signing in, syncing what you enter | performance of a contract — the app cannot be provided otherwise |
| Keeping records of consent | compliance with a legal obligation to demonstrate consent was given |
| Data about a player under 15 | consent of the legal guardian (GDPR Art. 8) |
| App usage statistics | consent (GDPR Art. 6(1)(a)) — voluntary, withdrawable at any time in Settings; using the app does not depend on it |
| Technical crash reports | legitimate interest (GDPR Art. 6(1)(f)) — without them the app's faults cannot be found and fixed |
We use suppliers to run the app. They act as our processors and may handle the data only on our instructions:
| Processor | For what | Where |
|---|---|---|
| Supabase | database and accounts | Frankfurt, Germany, EU |
| Resend | sending verification emails | sent from Ireland (EU), operational logs in the US |
| Sentry | technical crash reports | EU (data residency Frankfurt, Germany) |
| RevenueCat | subscription state and Hockey Log PRO entitlement | United States |
Your account and everything you record in the app — players, games, practices and expenses — are stored in the European Union and do not leave it. Only two things travel outside the Union, and neither carries the content of your records.
Email delivery. Resend sends messages from servers in Ireland, but the operational logs about them — the recipient's email address, the time of sending and whether it was delivered — are processed in the United States. This transfer relies on Resend's certification under the EU-US Data Privacy Framework and on the standard contractual clauses in its data processing agreement. The content of your records about players, games or expenses never appears in an email.
Subscription state. To know whether you hold Hockey Log PRO, your subscription state is managed for us by RevenueCat, processing in the United States. We pass it your account identifier — a random number, not your email or your name — and it keeps the purchase and subscription state against it, along with the technical details about the device and app version that the store reports. It receives none of your records and no payment details. The transfer relies on the standard contractual clauses in its data processing agreement. The subscription record is tied to that identifier and goes when the account goes — the moment you delete your account we delete it at RevenueCat too, with nothing for you to ask us for. The subscription itself does not end with it: it is sold by the App Store or Google Play and can only be cancelled there.
We do not sell, rent or share your data for marketing.
Subscriptions are sold by Apple and Google, not by us. They process the payment under their own policies and act as independent controllers in doing so; their policies are part of the App Store and Google Play terms.
All we learn is whether a subscription is active, plus a purchase identifier. We never receive and cannot access your card number, billing address or cardholder name.
The app records hockey performance, which is often a child's. The child's details you enter are stored on the server — chiefly name, date of birth, club and the game and practice records.
An account may only be created by someone 18 or older, or by a player's legal guardian. For children under 15, the law requires the guardian's consent (GDPR Art. 8; the Czech threshold is 15 rather than the default 16). You confirm this at sign-up and we keep a record of it.
Enter only as much about a child as you actually need. Neither date of birth nor jersey number is required to use the app.
We keep the account and everything attached to it for as long as you keep the account. You can delete it yourself at any time in Settings → Account; you do not need to ask us.
Deleting the account irreversibly erases the email, the password and every attached record — players, games, practices, expenses, consents, usage statistics and deletion markers — and, with them, the subscription record held by RevenueCat. Data held on the device is removed by uninstalling the app.
Usage statistics have their own, shorter clock: we delete them after 12 months at the latest, even while the account lives on.
Under the GDPR you have the right of access to your data, and to its rectification, erasure, restriction of processing and portability, as well as the right to object. Exercise any of them at podpora@hockeylog.cz.
If you have given consent to processing a child's data, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing before it.
If you believe we are handling your data badly, you may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
The connection between the app and the server is encrypted. Access to data on the server is enforced in the database itself — an account can read only its own rows, and that cannot be bypassed from the app. Passwords are stored one-way encrypted, so not even we can read them.
On any material change we raise the document version and ask for consent again. Earlier versions and the date you consented remain on record.
Josef Konárek, company ID (IČO) 14016958 Rajhradská 3058/42, Horní Počernice, 193 00 Prague 9, Czech Republic podpora@hockeylog.cz