Inteck Ltd (“SubUp”, “we”, “us”) is the controller of personal data you provide in the SubUp app. Company number 12246244. Registered office: Unit B, Focal Point, Second Avenue, Trafford Park, Manchester, M17 1FG, United Kingdom.
Contact: info@inteckltd.co.uk
1. Data we process
- Name
- UK mobile number (your login)
- Optional email (for receipts and communications later — not used to log in)
- Optional profile photo and group cover images
- Group membership, invites, games, lobby spots, scores, votes, and ratings
- Push notification tokens
- Device diagnostics and crash reports if error reporting is enabled
- Payment records (status, amounts, and Stripe identifiers). We do not store full card or bank account numbers.
2. Why we process it, and legal bases
- Contract — to create your account, run groups and games, take and refund payments, and show history and ratings.
- Legitimate interests — security, abuse prevention, product reliability, and understanding crashes.
- Legal obligation — where we must keep records, for example for tax, refunds, or disputes.
3. Who we share it with
We use processors to run the service. We do not sell your data.
- Supabase (Postgres, Auth, Storage) — UK/EU region target
- Twilio — password-reset and group-invite SMS
- Expo — push notifications
- Sentry — crash and error reports, if configured
- Stripe, including Stripe Connect — card payments and organiser payouts
Group members can see your name, photo, and rating — not your mobile or email — through the app. Group admins enter a mobile number to invite you.
4. Retention
We keep account data while your account exists and for a short period afterwards as needed for security, refunds, and legal claims. Payment records may be kept longer where Stripe or the law requires it.
5. Your rights
Under UK GDPR you can ask for access, rectification, erasure, restriction, objection, and portability. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
You can delete your account in Settings, or request deletion on the web: Delete your account. We remove memberships, upcoming spots, tokens, and your login. Past game history may show “Deleted user”.
6. Children
SubUp is intended for adults organising recreational sport. We do not knowingly collect data from children. If you think a child has created an account, email us and we will delete it.
7. International transfers
Some processors (for example Expo, Sentry, Stripe, and Twilio) may process data outside the UK. Where that happens they use appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
8. Cookies
These web pages do not use tracking cookies. SubUp itself is a native iOS and Android app.
9. Changes
If we update this policy, we bump the version in the app and ask you to accept again before continuing.