Privacy Policy

Who we are

OHA (“OHA”, “we”, “us”) operates the OHA mobile application for organising amateur football — finding players and teams, joining matches and cups, refereeing, chatting, and sharing posts. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have.

We operate from Türkiye. We process personal data in line with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU/UK General Data Protection Regulation (“GDPR”). The data controller is [OHA registered legal entity and address — to be completed]. For any privacy question or request, contact privacy@oha.futbol.

Information we collect

We collect only what the app needs to work.

Account & sign-in

• Your email address, or the identifier from your Apple or Google account if you sign in with one.
• Whether and when your email was verified.

We do not collect a phone number, and we never see your Apple or Google password.

Profile

• Display name and username (handle), plus optional details you add: bio, profile photo, cover photo, gender, height, jersey number, playing position, and dominant foot.
• Your country, region, and city.
• Referee status and the ratings other players give you, if you act as a referee.

Location

• We use a city-level location (the centre of the city you set) to show fields, venues, players, and matches near you. We do not track or store your precise GPS position.
• The app asks for device location permission only to centre the map on you while you are using it (“while in use”). You can decline and still use OHA.
• You control whether you appear in nearby discovery through the Discoverable and Location sharing switches in the app.

Content & activity you create

• Teams, matches, cups, challenges, attendance and results, posts, stories, comments, likes, follows, and communities.
• Messages you send in direct and group chats, including any images you attach.

Notifications

• A push notification token for your device, and your notification preferences (overall, and per category: messages, matches, teams).

Usage, device & diagnostics

• App events and screen views, app and device identifiers, app version, and your language setting.
• Crash and error reports, and session replays used to diagnose problems. In session replays we mask all text you type and all images, so message text, search terms, passwords, photos, and any documents are not captured.

How we use your information

• To provide and operate the app — your profile, teams, matches, cups, chat, and social feed.
• To power matchmaking and show you relevant fields, venues, players, and matches nearby.
• To send the notifications and match-day reminders you opt into.
• To keep OHA safe — moderation, handling reports and blocks, and enforcing our Terms.
• To understand how the app is used, fix bugs, and improve reliability and performance.
• To comply with legal obligations and respond to lawful requests.

Where GDPR applies, our legal bases are: performance of our contract with you (running the app), your consent (device location and push notifications), our legitimate interests (security, moderation, analytics, and improving the service), and compliance with legal obligations. Where KVKK applies, we rely on the equivalent grounds, including the necessity of processing to provide the service you requested, our legitimate interests, and your explicit consent where required.

How we share information

We do not sell your personal data and we do not build advertising profiles.

With other users. Your profile and the content you post are visible to other players as the feature intends — for example, your profile to people who view it, your messages to chat participants, and a match or team to its members. Where you share a public link, that content can be viewed on the web.

With service providers (processors) who run the app on our behalf, under contract and only for these purposes:

• Convex — application backend and database (EU region).
• Expo — delivers push notifications to your device.
• PostHog — product analytics, error tracking, and session replay (EU-hosted).
• Sentry — native crash reporting (EU / Germany). We send only your user ID, not your profile.
• Mapbox — maps and the “near me” experience.
• Apple and Google — when you choose to sign in with them.
• Cloudflare — hosts and protects our website (see “Website analytics”).

We may also disclose data if required by law, to enforce our Terms, or to protect the rights and safety of our users and the public.

International transfers

We host data primarily in the EU. Some providers may process data outside Türkiye or the EEA. Where that happens, we rely on appropriate safeguards (such as standard contractual clauses) and, where KVKK requires, your explicit consent or another lawful transfer ground.

How long we keep data, and deletion

We keep your personal data while your account is active. You can delete your account at any time from the app (Profile → settings). When you do:

• Your account enters a 30-day grace period and is suspended. If you log back in within those 30 days, the deletion is cancelled and your account is restored.
• After the grace period, a scheduled process permanently removes or anonymises your data and tombstones your profile (your name becomes “Deleted player”). Content tied to shared history — for example a past match result — may be retained in anonymised form.

You can also ask us to delete your data by emailing privacy@oha.futbol. We may keep limited records where the law requires.

Your rights

Depending on where you live, you have the right to access, correct, delete, restrict, or object to our processing of your data, to withdraw consent, and to data portability. Under KVKK Article 11 you have equivalent rights, including to learn whether your data is processed and to request its correction or deletion.

To exercise any right, edit your profile in the app or email privacy@oha.futbol. If you are in the EU/UK you can also complain to your local supervisory authority; in Türkiye you can apply to the Personal Data Protection Board (KVKK).

Your choices and controls

• Profile — edit or remove your details in the app at any time.
• Discoverability & location — turn the Discoverable and Location-sharing switches on or off.
• Notifications — change per-category preferences in the app, and system permissions in your device settings.
• Account — delete your account from the app.

Children

OHA is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country, if higher) to use OHA. If you believe a child has given us personal data, contact privacy@oha.futbol and we will delete it.

Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.

Website analytics

On this website we use PostHog (hosted in the EU) and Cloudflare Web Analytics to understand aggregate traffic — page views, referrers, and performance. Both run in a cookieless mode: we don’t store tracking cookies on your device or build advertising profiles, so no consent banner is required. We don’t use Google Analytics or advertising trackers here.

Changes to this policy

We may update this policy as the app evolves. We will change the “Last updated” date above and, for material changes, give notice in the app or by other reasonable means.

Contact

Privacy questions or requests: privacy@oha.futbol. Data controller: [OHA registered legal entity — to be completed], Türkiye.