App Privacy Policy - EN

Last updated, 2026-02-20

At FPRO, we are committed to protecting your privacy and handling your personal data in a transparent and responsible manner. This Privacy Policy explains how we collect, use, store, and share personal data when you interact with our services, whether through the FPRO mobile (App) or via our website at [www.fpro.com](http://www.fpro.com/) (together referred to as the “Platform”).

Our services are used globally, and this Policy applies to all users, including those located in the European Economic Area (EEA), the United Kingdom (UK), the United States, and other regions as applicable. Where applicable, we provide additional information on region-specific rights and obligations in dedicated sections below.

The controller of your personal data is Fpro Sports Global, UAB, a private limited liability company incorporated in Lithuania, with its registered office at Tilžės g. 68, LT-78157 Šiauliai, Lithuania, company code 306058967\.

If you have any questions or requests related to the processing of your personal data, you can contact us at hello@fpro.com or darius@fpro.com.

Purposes of Processing

In this section, we explain the reasons why we process your personal data when you use the Platform. For each purpose, we describe what types of data are involved, how that data is used, the legal ground that justifies the processing, and how long the data is retained. This information is provided to help you clearly understand how your data is handled and what to expect at each stage of your interaction with our services.

Account creation and management

To create the App profile, we process data provided directly by the user, including email address, hashed password, and nickname, which are required for registration. During onboarding or later via your profile settings, users may also choose to provide additional profile information such as profile image, gender, date of birth, country, football-related profile preferences (like favorite club, preferred foot, jersey number, current academy, and playing position), and social media nicknames.

Only individuals who are at least 16 years old may use the Platform independently. If you are under the age of 16, your parent or legal guardian must enter into the agreement on your behalf and provide verifiable consent for data processing. Parents are responsible for supervising the use of the Platform by their children and for ensuring that the provided information is accurate and lawful.

This data is primarily processed on the legal basis of contract performance, as it is necessary to provide access to and manage the user account. Optional profile fields submitted at the user’s discretion are processed based on the user’s consent. User account data is retained for as long as the account remains active. An account is considered active if the user has logged in within the last 6 months. If no login activity occurs for 6 consecutive months, the account is marked as inactive and scheduled for deletion. However, personal data will be retained for an additional 6 months after the account becomes inactive or is deleted, for purposes such as archiving, IT security, traceability, and legal compliance. After this period, all personal data is permanently and securely deleted, unless a longer retention period is required by law or justified by legitimate interests.

User-generated content upload

To enable users to upload and share content within the Platform, we process data provided directly by the user, including media files such as images and videos, related captions or descriptions, timestamps, and metadata like location if enabled by the user. This also includes user interactions related to content, such as likes. When content is submitted, it may be subject to moderation before being published in the public feed, and the outcome of this process (approval or rejection) is recorded along with any feedback provided to the user.

If the user is under the age of 16, the account and any related functionality, including content upload, are available only through a contract entered into by the user’s parent or legal guardian. In such cases, the parent or guardian is responsible for supervising the child’s use of the Platform and for any content submitted through the account, including but not limited to images, videos, related captions, descriptions etc.

The data is processed on the legal basis of contract performance, as it is necessary to support the core user functionality of the Platform. Moderation-related data is processed based on our legitimate interest in ensuring a safe and rule-compliant environment. User-generated and Moderation-related data content is stored for as long as the user account remains active, unless the content is deleted by the user or removed through moderation.

Public leaderboards and player profiles

To support social features and ranking visibility within the App, we process user profile and performance data for the purpose of displaying public leaderboards and enabling profile discovery. This includes the user’s nickname, experience points (XP), progress history, position in rankings, and uploaded content. This information is visible to other users unless the account is placed in private (incognito) mode, in which case profile visibility and interaction features are limited.

For users under the age of 16, participation in these features is only permitted if the Platform is used under a valid contract concluded with the user’s parent or legal guardian. The parent is responsible for supervising the visibility settings and social engagement of their child’s account.

The data is processed on the legal basis of legitimate interest, as it supports user engagement and core social functionality. The data is visible as long as the user account remains active and the public profile setting is enabled.

Tracking progress, performance metrics and coach review

To enable tracking of individual progress and in-app activity, we process data generated directly by users through their interaction with the App. This includes session duration, activity logs, training timestamps, number of repetitions, training streaks, experience points (XP), as well as date-based performance statistics. Where enabled by the user, GPS location data is processed to ensure the accuracy and context of activity tracking.

Additionally, users can voluntarily upload videos of themselves performing drills for coach review. When a user submits a video, we process this content along with coach feedback, evaluations, and advice related to the user’s performance. We also track interactions such as taps on notifications and differentiate between personal and general notifications.

For users under 16 years of age, the service can only be used via an account established under a contract with a parent or legal guardian. The parent assumes responsibility for all related data processing and for monitoring any interaction between their child and coaches or feedback systems within the Platform.

The data is processed on the legal basis of contract performance, as performance tracking, feedback, and coach reviews are integral to the service functionality. The data is stored for as long as the user account remains active.

Direct marketing communications

To provide personalized marketing communications, we process personal data such as email address, device identifiers, language preferences, and application usage information. These communications may include promotional offers, updates about new features or services, and other marketing materials tailored to the user’s interests.

The data is processed based on the user’s consent, which is valid for three years from the date of consent. The record of the consent (proof of consent) is retained for an additional two years after the consent has expired or been withdrawn in order to protect against legal claims.

Social Media Integration

We manage our presence on social media platforms such as Facebook, Instagram, LinkedIn, and others to engage with our community, share updates, and promote our services.

When you interact with our social media profiles (e.g., liking, commenting, sharing posts), we process personal data you provide through these interactions, including your name, profile picture, contact information, and any content you share publicly or privately with us.

We also use social media analytics tools, such as Facebook Insights and similar services, to gather aggregated and anonymized data about how users interact with our social media content. This information helps us improve our communication, tailor content to our audience, and enhance user experience.

Personal data processed via social media platforms are handled based on your consent, our legitimate interests in managing our social media presence, and applicable legal requirements.

Please note that social media platforms are independent data controllers for the data you provide on their services. We recommend reviewing the privacy policies of these platforms to understand how they handle your data and how you can exercise your rights.

Marketing Analytics and Advertising

We use third-party tools like Google Firebase, Google Ads, Google Analytics, and Meta Ads Manager to collect aggregated, anonymized data on how you use the App. This helps us improve our services and deliver relevant, non-personalized advertising.

Data collected includes device info (browser, model, OS), technical identifiers (IP address, advertising IDs), and user interactions with ads and the App.

The legal basis for processing this data is your consent, which is obtained via a cookie banner when you first use the Platform. You can manage or withdraw your consent at any time through the cookie settings. Data storage periods and details are described in our cookie banner.

Product Analytics

We use PostHog, a third-party product analytics service, to analyze how users interact with our Platform. PostHog collects technical data including device information, IP addresses, usage patterns, session data, and feature interactions. This data is processed based on our legitimate interest in improving the Platform (Article 6(1)(f) GDPR) and, where required by law, your consent obtained through cookie settings.

PostHog acts as our data processor and is GDPR compliant. Data may be stored in the EU and/or US with appropriate safeguards including Standard Contractual Clauses. Analytics data is retained as long as your account is active. You may opt out by contacting hello@fpro.com. For more information, see [https://posthog.com/privacy](https://posthog.com/privacy).

User Feedback and Reviews

Users can submit feedback or reviews through forms available on the Platform. When providing a review, users may enter their name, email address, a written comment, and a star rating. This data is processed to collect and, where applicable, publish genuine user opinions about our services, content, or products. The name and review may be displayed publicly on the Platform, while the email address is used solely for verification purposes and is not shown publicly.

The legal basis for this processing is the user's consent. Consent may be withdrawn at any time by contacting us via the email address provided in the Contact Information section of this Privacy Policy. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Review data is retained for as long as the related product or service is offered, or the review remains relevant for informing other users, unless the user withdraws consent or requests deletion earlier. Once the review is no longer relevant, it is either deleted or anonymized, unless a longer retention period is required by law or necessary to protect against misuse or legal claims. Users are advised not to include any sensitive or third-party personal information in their reviews. By submitting a review, the user confirms that the information provided is accurate and agrees to its processing and potential publication as described in this Privacy Policy.

Subscriptions and payments

To manage subscriptions and payment processes, we process personal data provided directly by the user, including user identification details and subscription plan information. Payment data is handled by trusted third-party payment processors and is not stored directly on our Platform.

This data is processed on the legal basis of contract performance to fulfill subscription agreements and on legal obligations to comply with accounting and tax regulations. Subscription and payment data are retained for as long as required by applicable laws and contractual obligations. In particular, payment records and related documentation are kept for 10 years in accordance with Lithuanian accounting and tax regulations.

Customer Service, Inquiries, and Complaint Handling

We collect and process personal data necessary to respond to your inquiries, requests, complaints, or other communications related to the Platform and our services. This data may include your contact details (email, phone number), correspondence content, technical call details (e.g., call duration), and any supporting documents you provide.

The processing of such data enables us to effectively manage your requests, provide assistance, and resolve issues. We handle this data based on contract performance, and our legitimate interests to provide quality customer support. The data is stored for 2 years from the date the request is fully resolved.

Cookies and technical usage analytics

To ensure the proper functioning of the Platform and improve user experience, we process technical data collected automatically through cookies and similar tracking technologies. This includes information such as IP address, browser type, device information, pages visited, duration of sessions, and interaction patterns.

Necessary cookies that enable essential platform functions are processed based on legitimate interest. Analytics and advertising cookies, which help us understand usage patterns and deliver personalized content, are processed only with the user’s explicit consent. Users can manage their cookie preferences through platform settings or browser controls.

The data collected via cookies is stored according to the duration defined by each cookie type.

For more detailed information about our use of cookies and how to manage your preferences, please refer to the cookie banner available on the Platform.

E-commerce Purchases via the Website

When you make purchases through the e-commerce section of our website, we collect and process personal data necessary to complete the transaction. This data includes your name, billing and shipping address, contact details (such as email and phone number), payment information (processed securely by trusted third-party payment providers), order details, and any communication related to your purchase.

These data are processed for the purpose of fulfilling the purchase contract, managing payments, delivering goods or services.

The data is processed on the legal basis of contract performance and retained for as long as required to comply with accounting, tax, and legal obligations. In particular, payment records and related documentation are kept for 10 years in accordance with Lithuanian accounting and tax regulations.

Security and diagnostic logging

To protect the Platform and its users, we process technical data such as access logs, error reports, and anomaly detection records generated by the system. This data helps us detect, prevent, and respond to security incidents, system malfunctions, and potential abuse.

The processing is based on our legitimate interest in ensuring the security, stability, and proper functioning of the Platform. Security and diagnostic data is stored for a limited period, typically up to 12 months, unless a longer retention is required due to ongoing investigations or legal obligations.

Data Storage

Your personal data may be stored for a period longer than indicated in this Privacy Policy only if one or more of the following conditions apply: your data is necessary for the proper administration of debts (for example, if you have not fulfilled your financial obligations). storage is necessary for defending against existing or potential claims, demands, or legal actions and for exercising our rights. retention is required to ensure the operation, resilience, and integrity of backup copies, information systems, traceability of operations, statistical or similar purposes. there are other grounds provided by applicable laws and regulations.

In addition, where your personal data is processed on the basis of consent, we retain the record of your consent, including the fact of consent, its scope, and any changes or withdrawal for a period of two years from the date of withdrawal or expiry of consent. This retention is necessary to demonstrate compliance with legal obligations and to defend against potential legal claims related to the validity or scope of consent.

EU Specific Privacy Notice

If you are located within the European Economic Area (EEA), you have the following rights regarding your personal data: Right of access. You may request confirmation as to whether your personal data is being processed and, if so, access to the data. Right to rectification. You have the right to request correction of inaccurate or incomplete personal data. Right to erasure. You can request deletion of your personal data in certain circumstances. Right to restriction of processing. You may request the restriction of processing under specific conditions. Right to object to automated decision-making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, except where permitted by law. Right to data portability. You can receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit it to another controller. Right to object. You have the right to object to the processing of your data based on legitimate interests. Right to withdraw consent. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal. Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed. You can find the contact details of supervisory authorities here: [https://www.edpb.europa.eu/about-edpb/about-edpb/members\_en\#member-no](https://www.edpb.europa.eu/about-edpb/about-edpb/members_en#member-no).

To exercise these rights, please contact us at hello@fpro.com.

UK Specific Privacy Notice

If you are located in the United Kingdom, your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018\. This essentially provides you with the same rights as those available to EU / EEA individuals, which include: Right of access. To confirm whether we process your personal data and to obtain a copy of the data, as well as information about how we use it. Right to rectification. To have inaccurate personal data corrected and incomplete data completed. Right to erasure. To request deletion of your personal data in certain circumstances (for instance, if it’s no longer needed for the purpose it was collected, or if you withdraw consent and no other legal basis applies). Right to restriction of processing. To request that we limit the processing of your personal data under specific conditions (for example, if you contest the data’s accuracy or have objected to our processing). Right to data portability. To receive the personal data you provided to us in a structured, commonly used, machine-readable format and to have that data transmitted to another controller where applicable. Right to object to automated decision-making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, except where permitted by law. Right to object. To object to processing of your personal data based on our legitimate interests. We will stop such processing upon your objection unless we have an overriding compelling reason or the processing is needed for legal claims. You also have an absolute right to object to any personal data processing for direct marketing purposes. Right to withdraw consent. If we rely on your consent for processing, you can withdraw that consent at any time, without affecting the lawfulness of processing performed prior to withdrawal. Right to lodge a complaint. You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). You can find information on how to report a concern on the ICO’s website ([https://ico.org.uk](https://ico.org.uk)).

To exercise these rights, please contact us at hello@fpro.com.

U.S. State-Specific Privacy Notice

For users located in the United States, including California and other states with specific privacy laws, you have rights regarding your personal data as outlined by applicable state laws such as the California Consumer Privacy Act (CCPA).

We collect and process personal information necessary to provide our services, including your email address, account identifiers, usage data within the app, subscription and payment information, and communications preferences. Some additional data, such as profile details and interaction with marketing communications, may be processed with your explicit consent.

You have the right to: Access the personal information we have collected about you, the sources of that data, the business purposes for processing, and categories of third parties with whom we share your data. Request correction or deletion of your personal information in accordance with applicable laws. Opt out of the sale or sharing of your personal information for targeted advertising (note that we do not sell your data in the conventional sense, but we may use third-party advertising and analytics services with your consent). Appeal any denial of your request.

To exercise these rights, please contact us at hello@fpro.com.

Brazil Specific Privacy Notice

If you are located in Brazil, your personal data is processed in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD).

Under the LGPD, you have the following rights: Right of access. You have the right to obtain confirmation of whether we process your personal data and, if so, to access such data and receive information about its source, purposes, and sharing with third parties. Right to correction. You have the right to request the correction or completion of your personal data if it is inaccurate or incomplete. Right to deletion. You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if the processing is found to be unlawful, subject to exceptions under the LGPD (such as compliance with legal obligations, transfer to third parties under lawful conditions, or anonymization for exclusive controller use). Right to data portability. You are entitled to receive from us the personal data concerning you which you have provided to us, in a structured, common, machine-readable format, and to communicate this data to another controller. It is important to know that this right is under specific provision and regulation by the Brazilian Data Protection Authority and may not be regulated on the time of your request. Right to review decisions made solely based on automated processing. You are entitled to request review on decisions made solely on automated processes that uses your personal data and could have impacts on your interests, including decisions that defines your personal, consumer and credit profile or aspects of your personality. Right to withdraw consent. If you have given your consent for the processing of your personal data, you can revoke it at any time with effect for the future. You are entitled, also, to request information about the possibility to not give consent and the consequences of it. Right to object to processing. You have the right, for reasons of your own particular situation, to file an objection at any time to the processing of your personal data. We will cease the processing of your personal data unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If you object to the processing of your personal data for advertising purposes, we will cease this processing in any case.

To exercise these rights, please contact us at hello@fpro.com.

You also have the right to appeal to a supervisory authority, in particular to the Brazilian Personal Data Authority. If you believe that, the processing of your personal data infringes the LGPD. You are entitled also to request your rights to the consumer ́s protection organisms in Brazil.

When your personal data is transferred outside Brazil, we ensure that such transfers comply with the requirements of the LGPD and the applicable rules issued by the Brazilian Data Protection Authority (ANPD). We rely on mechanisms such as Standard Contractual Clauses (SCCs) or other safeguards approved by the ANPD to ensure that your data receives an adequate level of protection.

Canada Specific Privacy Notice

If you are located in Canada, your personal data is processed in accordance with the provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to handling your personal information responsibly, transparently, and in line with the ten fair information principles established by PIPEDA.

You have the right to access and review your personal information. Upon receiving a written and signed request, we will inform you what personal information we hold about you, how it is being used, and, if applicable, to whom it has been disclosed. In certain exceptional cases, we may not be able to provide access—for example, where disclosure would reveal personal data about another individual or where it is protected by legal privilege. In such cases, we will provide reasons for the refusal.

When your personal information is transferred outside of Canada, including to jurisdictions that may not offer the same level of privacy protection, we ensure that appropriate safeguards are in place. For example, we may rely on Standard Contractual Clauses or other recognized mechanisms to ensure that your personal data is afforded an adequate level of protection, in line with the expectations of Canadian privacy law.

Data Recipients

We may share your personal data with governmental bodies, regulators, law enforcement agencies, courts, and insurers where required by applicable law. Such disclosures are made to comply with legal obligations, protect the Platform and its users according to our Terms of Service or other applicable policies, investigate potential violations, exercise our legal rights, protect safety, rights, property or security of the Platform or any individual, and detect or prevent fraud, security breaches, or technical issues. We may also share your data with data recipients such as payment processors and product delivery companies when necessary for the provision of services.

In addition, we engage trusted third-party service providers acting as data processors who support various functions necessary for the operation of the Platform. These functions include user authentication and account management, data storage and backup, email communications.

All data processors are contractually obligated to process your personal data solely in accordance with our instructions and applicable data protection laws. They implement appropriate technical and organizational measures to safeguard your data and ensure its confidentiality and security.

Your personal data may be transferred outside the European Economic Area (EEA), including to countries such as the United States. When this occurs, we ensure that appropriate safeguards are in place to protect your data, such as adequacy decisions by the European Commission, Standard Contractual Clauses, and additional technical and organizational measures.

Final Provisions

The Platform may include links to third-party websites and social media platforms which enable users to share content or access external resources. These third-party websites operate independently and are subject to their own privacy policies and terms of use. The Company expressly disclaims any liability for the accuracy, content, practices, or privacy policies of such third-party websites.

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the services we offer. When updates occur, we will revise the “Last updated” date at the beginning of this Policy and notify users through the Platform or via email where appropriate.