Privacy Policy

Last updated: May 17, 2026

1. Data Controller

Team Up (Lucas [Last name — please fill in before publishing]) Email: hello@teamup.app If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at hello@teamup.app.

2. Data We Collect

Email address — when joining the waitlist or creating an account.
Language/locale preference — detected from your browser or URL.
Source — how you found our site (e.g., direct, referral).
City and sport preferences — optional, provided by you on the thank-you page.
Password hash — only if you create an account with email/password (never stored in plain text).

3. Purpose & Legal Basis (GDPR Art. 6)

Art. 6(1)(a) — Consent: We process your email address and preferences to send you launch notifications and product updates. You can withdraw consent at any time by emailing hello@teamup.app.
Art. 6(1)(b) — Contract performance: If you create an account, we process your data to provide the Team Up service.
Art. 6(1)(f) — Legitimate interest: We may process anonymised, aggregated data to improve our service.

4. Data Processors

Supabase (Supabase Inc.) — database and authentication. Data stored in EU region (Frankfurt, AWS eu-central-1). DPA in place.
Vercel Inc. — hosting and edge delivery. Adequate protection via EU-US Data Privacy Framework and SCCs.
Stripe Inc. — payment processing for pro sessions. Stripe acts as an independent data controller for payment data.
Resend (Resend Inc.) — transactional email delivery. Used to send waitlist confirmations.

5. Data Retention

Waitlist emails are retained until the app launches (July 1, 2026) plus 6 months, unless you request deletion earlier. Account data is retained for the duration of your account. You may request deletion at any time.

6. Your Rights (GDPR Art. 15–21)

Right of access (Art. 15) — You can request a copy of the data we hold about you.
Right to rectification (Art. 16) — You can ask us to correct inaccurate data.
Right to erasure (Art. 17) — You can ask us to delete your data ("right to be forgotten").
Right to restriction (Art. 18) — You can ask us to restrict processing in certain circumstances.
Right to data portability (Art. 20) — You can request your data in a machine-readable format.
Right to object (Art. 21) — You can object to processing based on legitimate interests.
Right to lodge a complaint — You have the right to complain to your national data protection authority (e.g., BfDI in Germany, CNIL in France, ICO in the UK).

7. Cookies & Tracking

We do not use advertising or analytics cookies. We do not use Google Analytics or any third-party tracking scripts. Our site uses only essential session cookies required for form submission and authentication. No consent banner is required for these.

8. International Data Transfers

Your data is primarily stored within the EU (Supabase Frankfurt region). Where transfers outside the EU occur (e.g., Vercel edge nodes), they are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) pursuant to GDPR Art. 46.

9. Children's Privacy

Team Up is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact hello@teamup.app immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify waitlist subscribers of significant changes by email. The "Last updated" date at the top of this page reflects the most recent revision.