Privacy policy
Last updated · 20 April 2026
MultApp is a team fine-tracking service. This policy explains what personal data we collect, why we need it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Spanish LOPDGDD.
Data controller
The service is operated by the MultApp project. For any question about this policy or your personal data, write to privacy@multapp.app.
Data we collect
Account data (via Clerk)
When you sign up, our authentication provider Clerk stores your email address, display name and (optionally) profile picture. MultApp receives a copy of these fields through a Clerk session token each time you use the app.
Team activity
While you use MultApp we store the teams you belong to, your role (player, treasurer, coach), the fines that are issued to or by you, payments, comments, emoji reactions, notification preferences and push-notification endpoints. This data is stored in our Supabase database in the EU.
Technical data
Our hosting providers (Vercel, Supabase) keep short-lived server logs containing IP address and user-agent for security and debugging.
Legal basis
We process your personal data to perform the contract you enter into when you create an account (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in running and securing the service (Art. 6(1)(f) GDPR). Push-notification subscriptions rely on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the notification settings.
Retention
We keep your data for as long as your account is active. When you delete your account we remove personal identifiers from the database and ask Clerk to delete your authentication record. Fine records you created or that reference you are anonymised rather than erased, because other team members rely on them for historical accuracy.
Sub-processors
We share the minimum data required with: Clerk (authentication), Supabase (database and storage, EU region), Vercel (hosting and analytics). Each of them is contractually bound to GDPR-level protection.
Your rights
You can access, rectify, port or erase your data, restrict or object to the processing, and file a complaint with your supervisory authority (in Spain: the AEPD, www.aepd.es). To exercise any of these rights, use the account settings on your profile page or email privacy@multapp.app.
Cookies
MultApp only sets the strictly-necessary cookies required for authentication (session, CSRF, language preference). We don't use advertising or tracking cookies, so no consent banner is shown.
Changes to this policy
If we make material changes to this policy we'll notify you in-app and update the date at the top of this page.