Privacy Policy

Devout Football · Last updated 16 September 2026

This policy explains what Devout Football collects, why we collect it, and how you can get it deleted. We have tried to write it in plain English rather than legal language.

The short version. We keep a record of the football you choose to log: the matches you check in to, your photos and clips, your notes and ratings. We use your location only at the moment you check in, to confirm you are at the ground — we never store your home address and we never track you in the background. We never sell your data, and we never email your contacts.

Who we are

Devout Football is run by Devout Sports Limited, a company registered in England and Wales with company number 17452946. Devout Sports Limited ("Devout", "we", "us") is the data controller for the information described here. You can reach us at privacy@devoutfootball.com.

What we collect, and why

What	Why
Email address and password	To create and secure your account.
Your handle	Shown on leaderboards and posts. We show this instead of your real name.
Date of birth	Required by our child-safety policy. Devout is 13+, and some features unlock at 18. It is never shown to other fans.
The club you support, and your country	To show your fixtures, your club leaderboard and your badges.
Location, at check-in only	To confirm you are at the ground so your points are genuine, and to find nearby pubs when you check in at one. See below.
Check-ins, predictions, points, badges	They are the record the app exists to keep.
Photos and video clips you add	To build your matchday album. Stored privately to your account.
Your notes, ratings, posts and replies	Your journal, ground ratings, and anything you post to the Terrace or Dugout.
A notification token, only if you turn notifications on	So the notifications you choose reach your phone. We link it to your account so they go to the right person, and remove it when you sign out or delete your account.
Basic technical data	Standard server logs needed to run and secure the service.

Location — exactly what happens

This is the part people most want to be clear about, so here is precisely how it works:

We ask for your location only when you tap to check in. There is no background tracking, and Devout does not follow you around.
For a ground check-in, your coordinates are sent to our server, compared with the stadium's location, and used to decide whether the check-in counts. We don't keep them: once that check is done, they're gone.
For a pub check-in, your coordinates are used once to look up nearby pubs by name. We store only the pub's name — never its address, and never your coordinates.
We never store your home address. If you tell us your rough home area, we keep only that broad area, to work out how far you have travelled.
The nearby-pub lookup uses Geoapify. Your coordinates are sent from our server, not from your phone, and are not retained by us afterwards.

Who we share it with

We do not sell your data, and we do not share it for advertising. We use a small number of service providers who process data on our behalf:

Supabase — our database, accounts and servers (EU region).
Cloudflare R2 — storage for your photos and clips.
API-Football — fixtures, scores and squads. We send no personal data to them.
Geoapify — maps and the nearby-pub lookup, as described above.
Resend — sending the weekly email, if you opt in.
OpenAI — automated safety checks on posts and comments before they appear.
Expo, with Google Firebase Cloud Messaging and Apple Push Notification service — delivering notifications to your phone, if you turn them on. They receive what the notification says, where tapping it opens in the app, and your phone's notification token.
Apple and Google — if you buy Premium, they process the payment. We never see your card details.

Emails

The weekly digest is opt-in and off by default. You can turn it off at any time in Settings → Your Monday read, or with the unsubscribe link in any email. Turning it off is as easy as turning it on, and takes effect from the next send. We will still send essential messages about your account, such as password resets.

We never email your contacts. Invitations are shared by you, from your own phone, to whoever you choose.

Notifications

We only send notifications to your phone if you say yes, and we ask after your first check-in. They cover your matchday (when check-in opens for your club, and a reminder to finish your matchday once the game is over) and replies and posts on the Terrace. You can switch either of those off at any time in Settings → Notifications, or turn notifications off completely in your phone's settings.

We don't send any between 22:00 and 08:00 UK time; anything due overnight waits until the morning. We never use notifications for advertising.

Other fans, and what is public

Your handle, your club, your points and rank, your badges, your ground ratings and anything you post publicly can be seen by other fans. Your email address, date of birth, exact location, private notes and photos are not public.

Under-18s

Devout is for ages 13 and over. Fans under 18 can use the app fully but cannot post public free text; that unlocks automatically at 18. All posts and comments pass an automated safety check before they appear, and are reviewed by a person when flagged. Our child safety standards set out what we forbid and how to report it.

How long we keep it

We keep your account data for as long as your account exists — the point of Devout is a record that lasts. If you delete your account, it goes (see below). Server logs are kept for a short period for security and troubleshooting.

Deleting your account

You can delete your account yourself, at any time, in Settings → Delete my account. This permanently removes your account, points, badges, album, photos, clips, notes and posts. It is immediate and cannot be undone. There is a step-by-step on deleting your account, including how to ask us to do it if you cannot get into the app. If you would rather we did it for you, email privacy@devoutfootball.com.

Your rights

Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to processing or withdraw consent. Email privacy@devoutfootball.com and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.

Questions? privacy@devoutfootball.com