Privacy policy
Last updated: 2026-10-04
Operator
TODO Ime Prezime PR Athletix
TODO ulica i broj, poštanski broj, grad, Srbija
Registry no.: TODO matični broj · Tax ID: TODO PIB
Contact: hello@athletix.cloud
Who we are and what this covers
Athletix is software that sports clubs use to run sessions, attendance, fees and their members. This policy covers the Athletix website, the web app on each club's subdomain, and the Athletix mobile apps for Android and iOS.
Each club decides who it adds and what it records about its members, so for that data the club is the controller and Athletix processes it on the club's behalf. For your account itself (sign-in, security, support) Athletix is the controller.
What we store
Only what the club and its members enter while using the app:
- Account: name, email address, password (stored only as a one-way hash), role in the club.
- Profile, if provided: date of birth, phone number, profile photo.
- Club records: groups and group history, scheduled sessions, attendance marks, monthly fees and payments, individual-session charges, family links between parents and children.
- For staff: coach assignments and, if the club sets it, the pay rate used to compute coach pay.
- Technical: a sign-in token kept on your device so you stay logged in, and standard server logs (time, address of the request) kept for security.
We do not use advertising, tracking cookies, or third-party analytics, and we do not sell or share data for marketing. The mobile app does not access your location, contacts, camera or microphone.
Children
Clubs often manage children's records. A child's data is entered by the club, and the app is meant to be used by the club's staff and by parents or guardians. Parents can see their own children's records through a guardian account and can ask the club, or us, to correct or delete them.
Why we use it
- To provide the service the club signed up for: scheduling, attendance, fees, insights.
- To send account emails: invitations, password resets, and fee reminders the club turns on.
- To keep the service secure and to answer support requests.
The legal basis is the club's contract with us and the club's legitimate interest in running its membership; for account emails it is the service you asked for.
Who else handles it
We use a small number of providers, each only for the job listed, under data-processing terms:
- MongoDB Atlas — database hosting.
- Our own rented server — runs the web app and the API.
- Resend — sends account and reminder emails.
- Cloudflare — domain name and secure connection (HTTPS).
- Expo — delivers mobile app updates; it does not receive club data.
Some of these providers may store data outside Serbia; where they do, they are bound by standard contractual safeguards.
How long we keep it
While the club uses Athletix. A member the club archives stays in the club's history until the club deletes them. When an account is deleted, the name, email, password, photo and profile details are erased right away; attendance and payment entries the club needs for its records stay, no longer linked to a person. When a club leaves Athletix, its data is deleted within 90 days.
Your rights
You can ask to see the data held about you, to correct it, to delete it, or to object to its use. Most of it you can see and edit in the app yourself. For the rest, write to us at the address below, or ask your club. You also have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection of Serbia (poverenik.rs).
Deleting your account
In the mobile app: open your profile, choose “Delete account”, confirm with your password. In the web app: Settings → Delete account.
Without the app: email us from the address on your account, name your club, and ask for deletion. We delete the account within 30 days and confirm by email.
Deletion removes your account from that club. If you are a member of more than one club, each has its own account.
Security
All traffic is encrypted (HTTPS). Passwords are stored only as hashes. Each club's data sits in its own separate database, and staff can only reach their own club.
Changes
If this policy changes, the date at the top changes with it. Significant changes are announced to clubs in advance.