Privacy Policy

Effective date: 6 April 2026 ยท Last updated: 6 April 2026

KindoApps is operated by Tolga, based in the Netherlands. This policy explains what data our products collect, why, and what rights you have.

Products covered

This policy covers all applications published under KindoApps, currently:

  • Football Tactics Board (FTB) โ€” ftb.kindoapps.com

What data we collect and why

Usage analytics

When you use our products, we collect anonymous product analytics events such as when a formation is started, saved, shared, or exported. These events contain no personal information and no user-entered content. We use this data to understand how products are used and to improve them.

We also use Cloudflare Web Analytics to measure page views and basic performance metrics. Cloudflare Web Analytics does not use cookies and does not track individual users.

Legal basis (GDPR): Legitimate interest in understanding product usage and improving the service.

Account and authentication

Some products offer optional accounts. If you choose to create one, we collect your email address to provide magic-link sign-in. Your email is stored by our authentication provider, Supabase.

Creating an account is always optional. You can use our products fully as a guest without providing any personal information.

Legal basis (GDPR): Performance of a contract โ€” providing the cloud sync service you signed up for.

Cloud-saved data

If you sign in, your saved data (such as formations in FTB) is stored in our database hosted by Supabase. We do not access or use your saved data for any purpose other than providing the service to you.

Legal basis (GDPR): Performance of a contract.

Shared content

When you create a share link, the relevant data is stored temporarily using Cloudflare KV storage so that recipients can open it. Shared content expires automatically and is not linked to your account.

Local storage

If you use our products as a guest, your data is stored locally on your device using your browser's storage. We do not have access to locally stored data.

What we do not collect

  • We do not collect names, phone numbers, or addresses.
  • We do not collect payment information (no paid features are currently active).
  • We do not use cookies for tracking or advertising.
  • We do not use any third-party advertising or tracking services.
  • We do not sell, rent, or share personal data with third parties for their own purposes.

Service providers

We use the following third-party services to operate our products:

ProviderPurposeData processedPrivacy info
Cloudflare Hosting, analytics, share link storage Page views, analytics events, shared data cloudflare.com/privacypolicy
Supabase Authentication, cloud data storage Email address (if signed in), saved data supabase.com/privacy

These providers act as data processors on our behalf and process data only as necessary to provide their services.

Data retention

  • Analytics events: Retained in aggregate form. Individual events are not linked to identifiable users.
  • Account data: Your email and cloud-saved data are retained for as long as your account exists.
  • Shared content: Expires automatically after a limited period.
  • Local data: Remains on your device until you clear your browser storage.

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Delete your personal data and account.
  • Export your personal data in a portable format.
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

Children

Our products are intended for use by adults aged 16 and over. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

Data security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security on cloud-stored data, and access controls on our infrastructure. No system is perfectly secure, but we take reasonable steps to protect your data.

Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top. For significant changes, we may also notify you through the relevant product.

Contact

If you have questions about this privacy policy or your data:

Email: privacy@kindoapps.com

We are based in the Netherlands and subject to the General Data Protection Regulation (GDPR). If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Home Support