Privacy Notice

FlagChalk LLC is the data controller for the personal data collected through the FlagChalk platform at flagchalk.com. That means we decide how and why your data is processed, and we are responsible for it.

• Account data — name, email address, and login credentials. Used to create and secure your account (legal basis: contract performance).
• Coaching content — plays, formations, rosters, practice plans, grades, and wristbands you create. Used to provide the service and sync it across your devices (legal basis: contract performance).
• Support messages — emails and messages you send us. Used to help you (legal basis: legitimate interests).
• Usage and device data — how you use the app, device identifiers, and IP address. Used for security, fraud prevention, and improving the product (legal basis: legitimate interests).
• Marketing preferences — if you opt in to product updates (legal basis: consent, which you can withdraw at any time).

Payment card details are collected and processed directly by Paddle, our Merchant of Record — we never see or store your full card number.

• Service providers — hosting, analytics, and support tooling that process data on our behalf under contract.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

We do not sell your personal data.

We keep your data for as long as your account is active and as long as needed for legal, tax, and accounting obligations. When data is no longer needed, it is deleted or anonymised. You can download or erase your team's data at any time from the Privacy page in the app.

Depending on where you live, you have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email giqdeveloper@gmail.com. We respond within one month. If you are in the UK or EEA, you also have the right to complain to your supervisory authority.

Our service providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, and access controls that limit who can see what.

We use essential cookies and storage to keep you signed in and remember your settings. We do not use advertising cookies. You can clear cookies and local storage in your browser settings at any time; some features (like staying signed in) will stop working if you do.

Privacy questions or requests: giqdeveloper@gmail.com.