Last updated: 2026-05-26
Club90 is operated by Club90, based in Johannesburg, South Africa. For the purposes of the South African Protection of Personal Information Act (POPIA), we are the responsible party for the personal information described in this policy.
Account information: name, email address, phone number (if provided), date of birth, profile photo.
Match and activity information: matches you join, sports you play, venues you visit, statistics (goals, assists, attendance, MVP votes), groups you belong to, and content you post (chat messages, comments, votes).
Device and usage information: device type, operating system, IP address, push-notification tokens, and app interaction events.
Location information: when you grant permission, we collect approximate or precise location to surface nearby matches and venues. You can revoke this permission at any time in your device settings.
We process your personal information based on:
We share information with the following processors, each under a data-processing agreement:
We do not sell your personal information. We do not share it with advertisers.
We retain account information for as long as your account is active. After account deletion, personal information is removed within 30 days, except where retention is required by law (e.g., financial records, dispute history). Anonymised aggregate data may be retained indefinitely for analytics and product improvement.
You have the right to:
Exercise these rights by emailing jenyojohnson@gmail.com. We respond to verified requests within 30 days.
Club90 is not directed at children under 13. We do not knowingly collect personal information from children under 13. Users aged 13 to 18 should have a parent or legal guardian's consent before using the service.
If you believe a child under 13 has provided us with personal information, please contact us at jenyojohnson@gmail.com and we will delete that information.
You may delete your account at any time in two ways:
Deletion removes your personal information within 30 days.
Some of our processors store or process data outside South Africa (Vercel, Resend, and depending on region, Supabase). We rely on appropriate safeguards under POPIA section 72 to ensure your information remains protected, including contractual protections with each processor and the security standards described in Section 11.
We use industry-standard measures to protect personal information, including encrypted transport (HTTPS), encrypted storage at rest, access controls, and regular security reviews. No system is perfectly secure; we encourage strong passwords and prompt reporting of suspicious activity.
Our Information Officer for POPIA purposes can be reached at jenyojohnson@gmail.com. For formal POPIA requests, please use “POPIA request” in your subject line.
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email at least 14 days before taking effect. The “Last updated” date at the top of this page reflects the most recent revision.
Questions or POPIA requests: jenyojohnson@gmail.com