Privacy policy

Clubby is operated by Leologic Sàrl (www.leologic.ch). Data is hosted in Switzerland (Infomaniak).

Operator
Leologic Sàrl
Switzerland
Website : https://www.leologic.ch

Roles For the accounts of club teams and the billing of the Clubby subscription, the operator is the controller. For the data of a club’s members (details, categories, fees, registrations, messages), the club is the controller and the operator acts as processor (art. 9 nFADP and, where it applies, art. 28 GDPR).

Data processed Team identity and access (name, username, e-mail, hashed password, role), subscription billing data (via Stripe), security logs; for each club: members and their details, categories, invoices and payment references, events and registrations, messages and notifications, messages sent through the contact form.

Payments Members’ fees are paid directly to the club (QR-bill to the club’s account, TWINT with the club’s provider): Clubby neither receives nor stores card data. The Clubby subscription is paid by card with Stripe; no card data goes through Clubby.

Purposes and legal bases Performance of the contract, security of the service, legal obligations (accounting, ten years for subscription records), legitimate interest in security and abuse prevention. No advertising, no profiling, no sale of data.

Cookies A session cookie is required to sign in. The theme choice (light, dark) is kept in the browser. No advertising cookies or trackers.

Sub-processors Infomaniak (hosting and backups, Switzerland), Stripe (subscription payment), the configured SMTP server (e-mail), Cloudflare Turnstile if enabled (anti-bot). A new sub-processor is announced; a club that refuses it may cancel.

Retention Account data: term of the contract, then a 14-day grace period, then deletion. Daily backups: 7 days, encrypted. Subscription accounting records: 10 years. Technical logs: 1 month by default, then purge.

Rights Access, rectification, erasure, restriction, objection, portability. In the application: My account → export my data, or request deletion. Members contact their club first. Contact: “Write to us” form (/contact). Complaints: FDPIC (Switzerland) and, where applicable, the data protection authority of your country.

Security Encrypted connections, hashed passwords, strict separation of clubs, backups encrypted by default, logging of sensitive access.