Privacy Policy

Last updated: 21 July 2026

Elva is a match-day companion for youth football coaches and is local-first: your data lives on your device and is backed up to Elva's cloud storage (hosted in the EU) so it can sync across devices. This policy explains what data we process, why, and what rights you have. Elva is provided by Emil Ejdemo Kaiser, an individual based in Sweden and the data controller for your account; contact: support@elva.team.

Who is responsible for the data

For your account (your email address), Emil Ejdemo Kaiser is the data controller. For the squad data you enter — players' names, shirt numbers, playing time, and any match photos — you, the coach (and your club), are the controller, and Elva acts as a processor on your behalf. You are responsible for having the right to add the players and for obtaining guardian consent where required (typically through your club). If your club needs a data-processing agreement (DPA), email support@elva.team.

What we collect

Account data: your email address, used to sign you in via a one-time code or sign-in link. With Sign in with Apple, we receive an Apple identifier and, if you choose, your name and an email address (which may be one of Apple's private relay addresses).

Match and squad data: team names, formations, players (usually first names or nicknames and shirt numbers), and the matches you plan and play — opponent, date, venue, goals, cards, injuries, and playing time.

Match photos (optional): if you add a photo, it is stored in Elva's private, team-scoped cloud storage; such photos often depict children — see Match photos below.

Diagnostics: technical crash reports and limited usage analytics. We do not collect children's contact details, ID numbers, or precise location.

Children's data

Players are often children, but children never create accounts and never sign in — only the coach has an account. The coach enters a name (usually a first name or nickname) and a shirt number, and the app records participation and playing time; the coach may also add photos. We deliberately minimize: no contact details, no dates of birth, no photo required. Responsibility for players' data — and for guardian consent — rests with the coach/club (see Who is responsible for the data). If you are a guardian and want a player's data or photos removed, contact the coach/club first, or email support@elva.team.

Match photos

A match photo is optional. Images are stored in private storage (Supabase Storage), accessible only to members of that team — never public and never shared externally by us. Because photos of a children's team show children's faces, we keep them behind the same team permissions as the rest of your data. The first time a coach adds a photo, the app shows a reminder about the responsibility to have guardians' consent. When you remove a photo, delete a match, or delete your account, the underlying image file is also deleted from cloud storage (see Retention and deletion).

How we use the data and lawful basis

We use your email to sign you in and deliver the service (lawful basis: performance of a contract). Squad data is processed to provide the planning, match, and stats features and sync them across your devices. For children's data and match photos, the lawful basis is normally the guardian's consent, managed by the coach/club. Crash reports are used to keep the app stable (legitimate interest), and usage analytics help us understand whether and how the app is used (legitimate interest, with an opt-out for usage analytics). We never sell your data and do not use it for advertising.

Where data is stored and who processes it

Elva uses a small set of sub-processors. The ones that handle your data all run with the EU as their data region: Supabase (database, authentication, and private file storage for photos), PowerSync (syncs data between your device and Supabase), PostHog (crash reports and limited usage analytics), and Resend (sign-in and invite emails). In addition, Apple (Sign in with Apple) and Cloudflare (this website) are global services — where they process data outside the EU/EEA, it is done under appropriate safeguards (e.g. the EU Standard Contractual Clauses). We won't add sub-processors without updating this page.

Crashes and analytics

Crash reporting (PostHog, EU host) is always on and helps keep the app stable. Reports may include stack traces and technical identifiers; error messages are scrubbed outside development. Usage analytics are limited and coarse (counters and predefined events — such as a match being created, started, or finished — never names, opponents, or scores) and can be turned off under Settings → Privacy → Share usage analytics. We don't track you across apps and don't share data with ad networks.

Retention and deletion

We keep your data while your account is active and delete it when the account is closed. You can delete your account and data that belongs only to you from within the app (Settings → Account → Delete account) or by emailing support@elva.team. If you are the sole member of a team, the whole team's data is erased, including match photos; if the team has other coaches, ownership is transferred and your access is removed without destroying your colleagues' shared data. Local data is cleared when you delete the app.

Your rights

Under GDPR you have the right to access, rectify, erase, and port your data, to object to certain processing, and to withdraw consent at any time. Email support@elva.team and we'll help. Where a request concerns a player's (a child's) data, the coach/club is the controller — we refer the request to them. You also have the right to lodge a complaint with your supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (IMY), or the competent authority in your country.

Security and changes

Data is sent encrypted (HTTPS/TLS) and stored behind access controls (including row-level security so only your team can reach your data and photos). No service is entirely without risk, but we minimize what we collect. If we change this policy we'll update the date above and notify you in the app for material changes.

Contact

Privacy questions, or a request to exercise your rights? Email support@elva.team. Data controller: Emil Ejdemo Kaiser, an individual based in Sweden.