Privacy Policy

Last updated: 10 November 2026

FC Backoffice ("the app") is a mobile admin console that staff of football clubs use to manage their own club's fan app: the content sync queue, live match control, push notifications to fans, user lookup, the activity log and a staff notifications inbox. It is provided by Kfir Arad ("we") and distributed as an unlisted app, available only to authorised club staff. This policy explains what the app handles and where it goes.

Who holds your data

We do not run a central server for the app. You connect it to your club's own server, by scanning the club's QR code, opening an invite link or typing the server's address, and from then on the app talks only to that server. The club operates that server, decides who may access it and is the controller of the data it holds, including the fan data you see in the app. Each club's own privacy terms also apply.

What the app handles

Sign-in. You sign in with your club account on your club's sign-in page (for example Google sign-in). The club's server receives your email address to check whether you are one of its administrators. We never see your password or your account.
Sign-in token. Kept in your device's secure storage (iOS Keychain / Android Keystore), separately for each club.
Saved clubs and app state. The list of clubs you connected to, cached screens (so the app works on a weak connection) and which inbox items you have read are stored on your device only.
Push notification token. If you allow notifications, the app obtains an Expo push token and registers it with the club's server, together with your device platform (iOS or Android) and your alert preferences, so the club can send you staff alerts. Notifications are delivered through Expo's push service and Apple/Google push networks.
Photos and videos. When you choose to attach media to content or a notification, the app asks for access to your photo library and uploads only the items you pick, to your club's server. The app does not use the camera or microphone for this.
Camera. Used only to scan a club's connection QR code. Images are not stored or sent anywhere.
Invite links. On first launch, to pick up an invite you opened before installing, the app may read a link you copied (iOS asks your permission first) or the install referrer Google Play passes to it (Android). Nothing else from the clipboard is used or sent.
App updates. The app checks Expo's update service for new versions of its own code. This request carries technical details such as the app version and platform, not your personal data.

What the app does not do

No advertising, no analytics or crash-reporting SDKs, no tracking across apps or websites.
No location, contacts or advertising identifiers.
No sale or sharing of personal data.

Retention

Your push token is removed from the club's server when you sign out. How long the club's server keeps staff notifications, records of administrative actions and other data is up to the club. Signing out removes the club's sign-in token from your device; uninstalling the app deletes everything the app stored on your device.

Your choices

You can turn alert types off in the app, revoke notification, photo or camera permission in your phone's settings, sign out at any time, or ask your club to remove your administrator access. For questions or requests about data held by a club, contact that club. For anything about the app itself, email fcbackoffice@kfir.app.

Children

The app is a workplace tool and is not directed at children.

Changes

We will post changes to this policy on this page and update the date above.