Privacy Policy

VamoKora is a small app for friend groups (“crews”) to organise football games. It is a personal hobby project, not a commercial service. You can start your own crew, or join an existing one with an invite link from a friend. It was called FootPal FC until October 2026; only the name changed.

It is for people 18 and over. We don’t knowingly collect information from anyone younger. If you think someone under 18 has an account, email hello@amiribrahim3000.com and we’ll delete it.

To make the app work, we store:

• Your display name, any nickname you set, your playing positions, and optional profile details you add (a photo, nationality, favourite team, shirt number, card style, badges, your stronger foot, a game you pin to your profile, and a walk-out line: a short sentence you write that your crew sees under your card and when you win Man of the Match)
• Your email address, if you choose to add one (used only for login links and verification)
• If you sign up in the VamoKora phone app, how much you play (now and then, every week, in a club, and so on). It sets where your rating starts; the games you play then correct it. It is deleted with your account
• Your e-transfer address, if you add one — shown only to someone who owes you money, at the moment they go to pay you. It never appears on your profile
• Game activity: availability votes, RSVPs, team assignments, scores, poll votes, verdicts on the ref, payment status
• Messages and reactions you post
• If you rate a game that had a referee, your optional score for the ref, from 1 to 10. It is anonymous: once rating closes, your crew sees only one title for the ref (like “Solid whistle”) and how many people scored, never anyone’s number or who gave what. It is not part of anyone’s rating or card
• Images you upload — your profile photo or a crew picture (if you use background removal, that happens on your device; only the result is uploaded)
• A photo of a venue’s way in, if you add one to a venue you can edit. It is shrunk on your phone before upload, your crew sees it with your name as the person who added it, and it is deleted from storage when it is replaced, removed, or the venue is deleted
• A push notification subscription for your device, and which kinds of notification you have muted, and any chat you muted, if you enable notifications
• If you use the VamoKora phone app and allow notifications: a notification token for your phone. It belongs to that signed-in phone, so signing the phone out deletes it
• Anyone you have blocked, and any message you have removed from your own view
• Bug reports you send, if you use Something’s wrong in Settings. The report stores what you wrote, plus the screen you were on (and, when you send it from Settings, the two screens you visited just before), the app version, your crew, your device type and a reference to the last error the app hit — the sheet shows you all of it before you send. Your reports are deleted with your account
• Reports you send about a message or a person, if you use Report. A report stores who sent it, who it is about, the reason, any note you add and a copy of what was reported, so it can be reviewed even if the message is edited or removed. Only the app’s operator reads reports; the person reported is never told who reported them. Your reports are deleted with your account. If you are reported and later delete your account, the copy of your words is cleared and only the record of what was done is kept

We do not read your contacts, your photo library, or anything else on your device you have not handed to the app. There is no advertising. We use privacy-friendly, aggregate usage analytics (Vercel Web Analytics) to see which screens and features get used — it records no personal information, sets no advertising cookies, and does no cross-site tracking.

A crew member can bring you to a game as a guest before you have an account. When they do, we store your name and playing position as they typed them, the games you were added to, which team you were on, and the post-game votes the crew gave you (Man of the Match and match awards). You cannot vote as a guest, and you are never sent a notification.

Nobody can see a card or rating for you while you are a guest. If the person who brought you sends you an invite and you join, those games and votes become part of your account. If you never join, a guest who is removed from their last game is deleted along with the votes about them. To have it removed sooner, ask the organiser or email hello@amiribrahim3000.com.

The app can use your device location in two places, and both only happen because you tapped something. Nothing reads your location in the background, and nothing reads it while the app is closed.

• Sharing where you are. In a chat, the “Location” option can post your current position as a pin. That is your precise coordinates, and everyone in that conversation can see them. It only happens when you choose it.
• Searching for a place to share. When you search for a place to share in chat, and you have already granted location permission, your coordinates go with the search so that nearby results rank first. They are used for that search and not stored. If you have not granted permission, the search just runs without them — the app will not ask you from a search box.

Place searches in chat are answered by Photon, a search service run by komoot. Venue searches, when someone adds a venue, are answered by Google, and never use your location. Both go through our own server rather than straight from your phone, so neither sees your IP address for a search.

VamoKora uses a single login cookie to keep you signed in, and your browser’s local storage for small preferences (like which tips you’ve dismissed). No third-party or advertising cookies.

For each phone or computer you sign in on, we keep the date you signed in and a short name for the device type, like “iPhone · Safari”, so you can see and sign out your devices in Settings → Signed-in phones. We keep only that name, not your browser’s full details, and never where you signed in from.

Your data is never sold or shared for marketing. It is processed only by the services that run the app:

• Vercel — hosting and image storage
• Neon — the database
• Resend — sends login and verification emails (only if you add an email)
• Giphy — powers GIF search in chat and for your card; your search terms are sent to Giphy. A GIF you choose for your card stays on Giphy and is loaded from there whenever someone views it, so Giphy sees that viewer’s IP address, as any website they load an image from would
• Google — finds venues when someone adds one. What is typed into “Find the place” goes to Google from our server, so Google never sees your IP address for a search. We keep the place’s Google ID, and its location for at most 30 days, as Google’s terms allow
• Google Maps — draws the map on a venue’s page and in a game’s place card. The map loads from Google when you see it, so Google receives your IP address, as any website you load a map from would
• Photon (komoot) — answers place searches for location shares in chat; sees your search text, and your coordinates when you have granted location permission, but never your IP address
• Sentry — receives a report when something in the app crashes, so it can be fixed. Names, email addresses, message text and your login cookie are stripped out before anything is sent
• Apple Push Notification service and Firebase Cloud Messaging (Google) — deliver notifications to the VamoKora phone app, on iPhone and Android. As with any app, they see each notification’s title and text, which can include a name or the start of a chat message. We send to them directly, through no other company
• Vercel Web Analytics — privacy-friendly, aggregate usage stats (no personal data, no cross-site tracking)
• flagcdn — serves country-flag images for the nationality on your card
• OpenStreetMap — draws the small map under a location shared in chat. The map loads from OpenStreetMap when you see the message, so it receives your IP address and that location, as any website you load a map from would

Within your crew, your name, positions, game activity, and messages are visible to other crew members — that’s the point of the app.

You can delete your own account whenever you like, from Settings → Delete account on the website (and in the app’s Settings once it arrives there). You do not need to ask anyone.

What that erases: your name, email, nickname, photo, e-transfer address, nationality, favourite team, shirt number and every other personal detail on your account. Your uploaded photo is deleted from storage, not just unlinked. Every device you are signed in on is signed out.

What stays, and why:

• Messages you posted stay in their conversations, shown as from “Deleted user”. They are part of other people’s conversations too, and pulling them out would leave holes in threads that were never only yours.
• Verdicts on the ref are deleted outright: the ones you gave, and the ones about you if you reffed.
• Blocks you made or received are deleted outright, in both directions. Who you chose not to talk to is nobody’s business once your account is gone.
• A photo you added of a venue’s way in stays with the venue, because it belongs to the crew’s description of that place. It no longer shows your name.
• Your place in games that have already been played stays, also anonymised. The cost of each of those games was divided between the people who were there, so removing you afterwards would change what everyone else is recorded as having owed.

Deletion is blocked in two cases: while you still owe money to someone in a crew, and while you are the only admin of a crew that still has other members. The app tells you which one applies and what to do about it.

If you would rather not do it yourself, email hello@amiribrahim3000.com and it will be done for you.

While your account exists, we keep the things listed above so the app works — a crew’s game history, ledger and chat are the point of it. There is no automatic expiry. When you delete your account, the erasure above happens immediately rather than on a schedule.

If this policy changes in a meaningful way, the “last updated” date above will change and the app’s What’s New notes will mention it.