Privacy
Privacy policy.
Last updated: 23/09/2026
Ifriqiya Soccer Star connects football players with recruiters, clubs, academies and agents. This page explains what data we process, why, who can access it and how to exercise your rights.
Data controller
To complete before publishing
Legal name, legal form, registered address, registration number and contact email address. Without these, the document remains legally incomplete.
The data we collect
Account and identity:
- Email address, password (stored in irreversibly hashed form)
- Create and secure your account
- Last name, first name, phone number
- Identify you to other users
- Account type (player or professional)
- Determine which features you can access
- Date you accepted the terms and this policy
- Proof of consent
- App language
- Show the interface in your language
If you use “Continue with Google”, Google sends us your email address, your name and your Google profile picture. We never receive your Google password.
- Sporting profile (players)
- Date of birth, nationality, country and city, height, weight, strong foot, main and secondary position, level, current club or free-agent status, free-text presentation, profile photo, and the photos and videos you add.
- Professional profile
- Account type, organisation name, role, country and city, photo, and the supporting documents uploaded for account validation.
- Identity verification
- The identity documents you submit and, where applicable, information about a minor's legal guardian. They are stored in a private area, accessible only to the administrators in charge of validation.
- Messaging
- The content of your messages, their attachments, your voice messages, read timestamps and your last activity.
- Scout Days
- Your registrations, your attendance, and the assessments written by the organiser (scores out of 100 and a comment).
- In-app activity
- Posts, comments, likes, follows, and the record of professionals viewing your profile.
- Technical data
- A notification identifier specific to your device, the device type and name, and the logs required to keep the service secure. When you use “My location” on a Scout Day map, your position is used on the device only and is not stored on our servers.
- Payments
- When a registration or a subscription is paid: the amount, the currency, the payment method, the settlement status and, where applicable, the transaction reference. No online payment provider is connected to date — payments are recorded by the administration — so we never receive a card number or banking credentials.
Why we process this data
- Providing the service: creating your account, showing your profile to recruiters, enabling messaging and Scout Day registrations.
- Verification duty: checking players' identity and professionals' credentials before opening sensitive features to them.
- Security and moderation: preventing fraud, abuse and harassment, and handling reports.
- Your consent: notifications, camera, microphone and gallery — each one refusable and revocable in your phone's settings.
Who can see your data
- A validated player's profile can be viewed by validated professionals. You can make your profile invisible at any time from the app.
- Your posts, comments, likes and your follower and following lists are visible to signed-in users.
- Your last activity is only visible to someone you already have a conversation with.
- A Scout Day assessment is only visible to the assessed player if the organiser chooses to publish it.
Emails we send
Two kinds of email leave our servers. Service emails — password reset, security notices, address confirmation — are part of how your account works and are sent to you for as long as it exists. Announcements — a new scouting day, platform news — are sent by the Ifriqiya Soccer Star administration to your account's address.
Every announcement carries an unsubscribe link of your own: following it records your refusal and no further announcement is sent to you, while service emails continue. You may also write to desabonnement@ifriqiya-soccer.com. We never hand your address to advertisers.
Moderation
Private messages are encrypted at rest on our servers, and the administration area does not display them: a report is reviewed on the reason written by the person reporting, never on the content of the conversation.
Reporting someone from the messaging screen therefore passes on to moderation the reason, the conversation's identifier and those of its participants — enough to review the report and, where warranted, suspend an account, without opening your exchanges.
Our technical providers
- Supabase
- Hosting, database, authentication, file storage
- Expo, Google (FCM), Apple (APNs)
- Delivering notifications
- Resend
- Transactional email (password reset, security notices)
- “Continue with Google” sign-in, if you use it
- Cloudflare (Turnstile)
- Anti-bot protection on the sign-in and sign-up screens
- Esri
- Map tiles for Scout Day locations
- YouTube
- Playback of videos added as links
These providers act on our behalf and may, depending on where they operate, process data outside your country of residence. Loading a map tile or a YouTube video exposes your IP address to the provider concerned.
We do not sell your data and we do not pass it to advertisers.
To complete before publishing
State the hosting region of the database and, if data leaves Tunisia or the European Union, the transfer mechanism relied upon.
Cookies
The site and the administration area set only necessary cookies: the one that keeps you signed in, and the one that remembers your chosen language. No advertising cookie, no tracker, no audience measurement tool — neither on the site nor in the app. Clearing them from your browser signs you out and restores the default language; nothing else is lost.
Site visitors
The site can be browsed without an account and without identifying yourself. If you write through the contact form, the name, email address and message you enter reach us by email so that we can reply: they serve no other purpose and feed no mailing list.
Retention periods
To complete before publishing
This point has not been decided yet. The following must be set and then written here: how long an inactive account is kept, how long messages are kept, how long identity documents are kept after validation (the usual practice being to delete them as soon as verification is done), and how long reports and moderation logs are kept. A stated period is a commitment: do not invent one.
Minors
To complete before publishing
The app is aimed at young players and may receive sign-ups from minors. The following must be defined and then described here: the minimum age, how a legal guardian's consent is obtained, and any messaging restrictions between an adult and a minor.
Your rights
You can request access to your data, its correction, its erasure, its portability, as well as restriction of or objection to its processing. You can also withdraw at any time the permissions you granted (notifications, camera, microphone, gallery) from your phone's settings.
Some of these rights can be exercised directly in the app: edit your profile, make it invisible, delete your photos, videos and posts.
To complete before publishing
Dedicated email address for data requests, response time, and the authority to lodge a complaint with (in Tunisia: the Instance Nationale de Protection des Données Personnelles). Also settle on a single domain: the app shows an address at @ifriqiyastar.com while the domain verified for sending email is ifriqiya-soccer.com.
Security
Traffic to our servers is encrypted in transit. Private messages are encrypted at rest. Identity documents, professional supporting documents and messaging attachments are stored in private, access-restricted areas. No system is infallible, so use a unique password and report any suspicious behaviour to us.
Changes
This policy may change. If a change is significant, we will tell you in the app. The date at the top of this page shows the last update.