Last updated 12 November 2026
OpenXI is an app for organising pickup soccer. This policy says what personal information the app collects, why it is collected, who else sees it, and how you get a copy of it or delete it. It covers the OpenXI mobile app and this website.
OpenXI is operated by Marko Mikovic as an independent developer ("we", "us"). For anything in this policy, write to support@openxi.app.
| What | Why |
|---|---|
| First and last name | So other players in your group know who is on the roster. |
| Email address and phone number | To sign you in and to send the one-time codes that prove it is you. One of the two is required; both are kept only if you give both. |
| Date of birth | To enforce the minimum age of 13. We store the date and use it only for that check and to show your age if you choose to. |
| Profile photo and cover image | Shown on your profile and beside your name on rosters. Optional. |
| Playing details: positions, preferred foot, experience level, country, clubs you support | Shown on your profile so organisers can balance sides. All optional. |
| Your groups, games, attendance and reliability record | To run the roster and the waitlist, and to show organisers who turns up. Visible to the other members of the groups you are in. |
| Messages you send in a group's chats | Shown to the members of that chat. Each message is checked against a short list of prohibited words as it is sent — see section 6. |
| Reports you make, and the people you block | So that we can review content that may break our terms, and so that a blocked person's messages are hidden from you — see section 6. |
| Payment records: amounts, dates, status, and the last four digits and brand of a card | To charge game fees and show you what you paid. Full card numbers never reach our servers — see section 3. |
| Device details: for each phone or tablet you sign in on, its platform, system version, make and model, the app's version, build and update, and when it was first and last used; and, if you allow notifications, its push token | To send notifications to the right device, and to diagnose faults — for example, to see which version of the app a problem affects. Recorded when you sign in and at most once a day after that. |
| Crash and error reports: what went wrong, the screens you passed through and what the app was doing just before, the app's version, and your phone's state at that moment — its make, model and system version, language, time zone, text size, free memory and storage, battery and temperature, screen, network, and the permissions the app holds | To find and fix faults. Sent to Sentry with a random identifier of your account and nothing else that identifies you — see section 4. |
| Problems you report from the app: what you write in Report a problem, the screen you came from, and the device and app details above | So that we can look into what you saw. What you write stays on our own servers and is never sent to Sentry. |
Each of these is requested only when you use the feature that needs it, and you can refuse or withdraw it in your device settings. The app works without them, minus that feature.
Card payments are processed by Stripe. Your card details are sent directly to Stripe and are never stored on our servers; we keep only a Stripe customer reference and the record of what was charged, when, and whether it succeeded. Stripe processes that data as an independent controller under its own Privacy Policy, and it may use it to prevent fraud and to meet its legal obligations.
We do not sell personal information, and we do not share it for advertising. We use the following service providers, each only for the purpose named:
| Provider | What it does for us |
|---|---|
| Supabase | Hosts the database, sign-in, file storage and live updates. |
| Stripe | Processes card payments and game fees. |
| Twilio | Sends the one-time codes used to verify a phone number. |
| Resend | Sends account email, such as sign-in codes. |
| Apple and Google | Sign-in, if you choose "Continue with Apple" or "Continue with Google". |
| Google Maps and Places | Finds and displays pitches and venues. Searches are sent to Google as you type. |
| Expo | Delivers push notifications and app updates. |
| Fly.io | Resizes and re-encodes the photos you upload. |
| Cloudflare | Distinguishes people from bots at sign-up. |
| Sentry | Receives crash and error reports from the app and from our servers, so that we can find and fix faults. It is sent a random identifier of your account and nothing else that identifies you — never your name, email address, phone number or location, and nothing you typed. Sentry keeps the reports in the United States, deletes them within 90 days, and does not store your IP address. |
We also disclose information where the law requires it, and to protect the safety of players or the integrity of the service.
Your name, photo, playing details and attendance record are visible to members of the groups you join. A private group is invisible to people outside it. You can hide your playing attributes from your profile in Privacy and sharing. Your email address, phone number, date of birth and payment records are never shown to other players.
What a report sends us. When you report a message or a person we receive who you are, the reason you chose and any note you wrote, the group it happened in, and a copy of what you reported: the message's text and the time it was sent, or the person's name and profile photo as they stood at that moment. Our servers take that copy themselves, so it does not change if the message or the photo is later changed or deleted.
Who reads it. Reports are read by us and by nobody else. A group's owner and admins are not sent your report and cannot see that one was made. The person you report is not told who reported them. We tell you what we decided, and we tell a person whose message or photo we remove that it was removed and why.
How long it is kept. A report and its copy are deleted twelve months after we decide it, so that a person who is reported again within the year is recognised. A report that has not been decided is kept until it has been.
Deleted and removed messages. When you delete a message, its text is erased from our servers at once; a line saying that a message was deleted stays in the chat. If the message had already been reported, the copy held with that report is kept until the report is deleted. When a message is removed by a group's admins or by us, its text leaves the chat and is held where only we can read it, for twelve months or until the last report about it is deleted, whichever is later.
Blocking. The list of people you have blocked is kept so that their messages can be hidden from you. Other players cannot see it, the people on it are not told, and it is deleted with your account.
The word filter. Each message is checked automatically against a short list of slurs and other prohibited terms as it is sent, and is refused if it contains one. The check runs on our own servers; your messages are not sent to anyone else for it.
The data is stored on servers in the United States and processed by the providers listed above, which may operate in other countries. We keep your information for as long as your account exists. When you delete your account we delete your profile, your photos, your playing details, your device records and the problems you reported. Records we are required to keep — principally payment and refund records for tax and anti-fraud purposes — are retained for as long as the law requires and are no longer linked to a usable profile.
Three things outlast an account. Messages you sent stay in their chats, shown as from a deleted user; to erase a message's text, delete the message before you delete your account. Reports you made are kept without your name until they are deleted on the timetable in section 6. Reports made about you are closed, and the copy each one holds is deleted twelve months later.
Some records have a shorter life. A device record is deleted twelve months after the device was last used. A problem you reported is kept for twelve months after we have dealt with it. Crash and error reports are held by Sentry, not by us, and are deleted there within 90 days.
Depending on where you live you may also have the right to object to or restrict how we use your information, to have it sent to another provider, and to complain to a data protection authority. Write to support@openxi.app and we will answer within 30 days.
OpenXI is not for children under 13. We ask for a date of birth at sign-up and refuse the account if it is under 13. If you believe a child under 13 has an account, write to support@openxi.app and we will delete it.
Connections to the app are encrypted in transit. Access to your records is enforced in the database itself, row by row, so one player's account cannot read another's. No system is perfect; if a breach affects you we will tell you and the relevant authority as the law requires.
If this policy changes we will update the date at the top, and for a change that matters we will tell you in the app before it takes effect.