Adfoot Privacy Policy

Version 1.1, effective 14 October 2026

The French version at adfoot.org/legal/privacy-policy.html is the reference text. This English translation is provided for understanding; where the two differ, the French version applies.

This page explains what data Adfoot uses, why, who it may be shared with, how long it is kept, and how to exercise your choices. It covers the Adfoot application, the adfoot.org website and their associated features.

1. Who is responsible for the data?

The Adfoot service is operated by SIRA DIGITAL INNOVATION STUDIO SARL, abbreviated SIRA SARL, registered in Mali under number 425900104010012M0004L. Registered office: Bamako (Republic of Mali), Quartier Sébénikoro, near the ORYX station. Telephone: 70.45.33.45. SIRA SARL is the controller of the personal data.

For requests about your personal data (access, rectification, erasure, restriction, objection), write to contact@adfoot.org. For a request about your account, a report, security, or the parental consent and media permission of an underage player, write to support@adfoot.org. A request sent to either address is routed to the right team; you do not need to send it twice.

2. What data do we use?

Account and invitation: user ID, email address, role, verification state, and the information needed to activate and secure the account. Because accounts are created by the administration, we also keep the ID of the creating administrator and the creation date.
Football profile: display name, optional photo, date of birth or age category, nationality, position, preferred foot, club, background, statistics, availability, preferences and any details added to the profile.
Professional details: club or organisation, role, affiliation, licence or supporting documents submitted to verify a club, recruiter or agent.
Registration and support: the state of your registration (paid, carried by the agency, or not recorded), its start date and any end date, and an internal reference for the payment or the contract entered by the administration. Payment is made in cash at the agency: Adfoot records no bank details and no mobile money number, and the application displays no price and offers no way to pay.
Content: photos, videos, CVs, descriptions, events and offers sent to the service, together with dates, publication states and the information needed for moderation.
Interactions: searches and filters, applications, contact requests, messages, reports, follows and the exchanges needed for the features used.
Permissions and protection: date of birth and minor status, minimal information about the parent or guardian, their relationship to the player, the method and date the consent was confirmed, any evidence reference, the version of the text presented, the separate media permission, and, where granted, the permission to use an image in Adfoot campaigns and store visuals. These items are restricted to authorised people within the administration.
Technical information: notification token, connection and diagnostic data, errors and security logs needed to operate the service, prevent abuse and fix incidents.

We do not ask you to publish sensitive information without need. Do not add medical documents, identity papers or a third party's contact details to a profile or a message, unless a feature clearly requires it and Adfoot has told you how to submit them appropriately.

3. Why do we use this data?

to create, authenticate and administer accounts;
to show profiles, videos, offers and events to authorised people;
to enable talent search, applications and contact requests;
to verify professional accounts, moderate content and respond to reports;
to apply the protections for minors, record the required consents, respect visibility preferences and mediate contacts;
to prepare communication or app store visuals, only where the separate promotional permission has been granted;
to send the service messages and notifications that are requested or necessary;
to secure accounts, prevent fraud, diagnose failures and improve stability;
to meet legal obligations and handle requests or disputes.

Depending on the feature and the applicable rules, the processing is necessary to provide the service, rests on your choice or permission, serves a legitimate interest in security and abuse prevention where that is permitted, or is necessary to comply with a legal obligation. Where consent is required, you can withdraw it for the future by contacting Adfoot or using the relevant setting. Withdrawal does not undo processing already lawfully carried out.

We do not use your data for targeted advertising, and we do not sell it.

4. Who can see the data?

Adfoot staff and administrators access data only where their duties require it, for example to manage an account, verify an organisation, moderate content, handle a contact request or protect a minor. Administrative access is subject to internal controls.

Other members see only the information made accessible by role, settings and the service's protections. Adult player profiles may be shown according to visibility settings and the features used. Once a parental consent is recorded, an underage player's football record is shown only to verified recruiters or clubs; contact requests are passed through the path mediated by Adfoot. Minors' CVs and private contact details are not accessible to recruiters through ordinary features. Permissions and controls may change in order to strengthen safety.

Videos and photos may be accessible to authorised users according to the publication and moderation rules of the feature concerned. For a minor, the separate media permission is required and access is restricted to verified recruiters. Once content has been transmitted to an authorised recipient, Adfoot cannot prevent that recipient from making a copy; users must not download, republish or share content beyond their permission.

Adfoot may use providers that process data on its behalf, in particular:

Google Firebase and Google Cloud: authentication, database, hosting and storage, server functions, notifications and technical diagnostics (including Firebase Crashlytics);
Brevo: sending operational emails, such as the invitation to activate an account;
ImprovMX: receiving and forwarding email addressed to @adfoot.org addresses, and therefore the messages you send us.

These providers receive only the information needed for their function and act under their contractual commitments. Data is not sold. Adfoot may also disclose the data necessary to an authority where the law requires it, or to protect users, the service and their rights.

5. Hosting and transfers

Adfoot uses infrastructure services provided by Google Firebase and Google Cloud. The service's server functions are configured in the europe-west1 region (Belgium). The database, files and backups are hosted on that same Google Cloud infrastructure. Operational email is sent through Brevo and received through ImprovMX.

These providers operate infrastructure and teams located in several countries. Some data may therefore be processed or accessible from a country other than the one where you use Adfoot, including outside Mali. Such transfers take place under the data protection commitments agreed with those providers and the safeguard mechanisms required by the applicable rules.

6. How long do we keep the data?

Account and profile data is kept for as long as the account is active and needed for the service. After closure or deletion it is erased or made non-identifying, except for items that must be kept to meet a legal obligation, handle a dispute, prevent fraud or protect users.

Data	Retention period
Account, profile, published content	For as long as the account exists. Deleted when the account is deleted.
Account whose email address was never verified and that was not created by the administration	Deleted automatically after 3 days.
Proof of acceptance of the terms (version accepted and date)	For as long as the account exists, as evidence of the agreement.
Parental consent and media permission for an underage player	For as long as the player's account exists, then for the time needed to prove the consent was obtained.
Technical error logs and video action logs	90 days, then deleted automatically.
Other diagnostic and telemetry logs	30 days, then deleted automatically.
Content withdrawn by a user or by moderation	Removed from the service immediately; may persist for the length of one technical backup cycle.
Registration state and payment reference	For as long as the account exists, then for the time required by the applicable accounting obligations.
Technical notification token	For as long as it is valid; deleted on sign-out, uninstall or account deletion.
Reports and exchanges with support	For the time needed to handle them, then to prevent recurrence and evidence the decision taken.

The automatic deletions above are applied by technical rules of the service, not by a manual action. Backup copies expire on their own technical cycle, which can leave a deleted item in existence for a short period after it is removed from the service.

7. Your choices and your rights

You can use the application settings to change some information, your profile visibility and whether you receive messages. The features available depend on your role and on safety protections, in particular for underage accounts.

Depending on the rules applicable to your situation, you can request access to your data, its correction, its erasure, the restriction of some uses, object to certain processing, or withdraw a permission. You can also ask for an explanation of a decision taken about your account. Contact contact@adfoot.org, stating the account's email address and the nature of your request. We may ask for reasonable information to verify your identity and avoid disclosing data to the wrong person.

A parent or guardian can contact support@adfoot.org to request the activation, deactivation or withdrawal of the parental consent and the media permission. Adfoot may temporarily hide the record or the media while the request is processed. The parent does not need an Adfoot account to make that request.

You can request deletion of the account from the application, or follow the account deletion procedure. You may also contact the competent data protection authority where the applicable law allows it.

8. Underage accounts

Adfoot is intended for players aged 12 and over. For every player under 18, the administration separately records the oral or written consent of a parent or guardian, together with their name, their relationship to the player, and the method and date of confirmation. The team can explain the process orally, in a language the parent understands. The parent does not need to create an account or sign anything in the application; the player accepts the terms themselves.

Without a recorded consent, the minor's profile stays hidden from recruiters and media are not published. Once consent is given, the football record is limited to verified recruiters and contact requests go through Adfoot. Photos and videos require a separate media permission; videos are moderated before publication. No promotional image permission is implied by these consents: use in Adfoot campaigns or store screenshots requires a specific agreement.

A player's profile is reclassified automatically as an adult profile after their eighteenth birthday, so that the applicable rules do not depend on the player editing their account.

9. Security

Adfoot applies access controls, server-side security rules and technical protections suited to the service's features. No connected system can guarantee zero risk. If you believe an account or data has been compromised, contact support@adfoot.org immediately.

10. No solely automated decisions

Technical controls may help secure accounts, filter access or organise content. Searching for a player, a club's interest, and the outcome of an application or a recruitment are matters for the people concerned; Adfoot does not guarantee a selection or a result. Moderation and account decisions can be reviewed by the administration.

11. Changes to this policy

This policy may be updated if the service or its processing changes. The version and its date are shown at the top of this page. If a significant change requires a new acceptance, the application will ask for it before you continue using the feature concerned.

This text is Adfoot's common policy in the countries where the service is offered. The French version is the reference version; the English translation is provided for understanding. It does not limit any mandatory right provided by the rules applicable to the user; where those grant additional protection, that protection continues to apply.

12. Contact

Personal data and publisher: contact@adfoot.org
Account, reports, security, parental consent: support@adfoot.org