Privacy Policy

1. Who can use Fannan

You must be 18 or older to create a Fannan account. Players under 18 are added by their parent or guardian from the guardian’s own account. When you add a player, you confirm that you are that player, or their parent or guardian and allowed to register them.

2. Information we collect

We collect only what we need to run the Service:

• Account: your name, mobile number, password (stored only as a secure hash), language and notification preferences.
• Players: name, date of birth, gender, nationality, Civil ID number, playing position and photo.
• Training: programs and enrollments, attendance, skill assessments recorded by the academy’s coaches, and height and weight measurements.
• Applications: the academies you apply to, any note you add, and the academy’s trial notes and decision.
• Location: with your permission, your device’s precise location, used only to show how far each academy is from you, and a home location if you save one. You can turn location access off at any time in your device settings.
• Purchases: invoices, payments and store orders (items, amounts, status and dates).
• Device: a device identifier, the platform (iOS or Android), the device model, the app version, your language and time zone, and a push notification token. We use them to send you notifications, to check that your app version is still supported, and to measure our advertising (section 7).
• Security logs: technical records such as IP address and access times, used to keep the Service secure.
• Crash and diagnostic data: device model, operating system version, app version and error traces, used to find and fix problems.
• Academy staff using the dashboard: name, mobile number, password and role.
• Website: if you join our waiting list on joinfannan.com, your email address, the page you signed up from, your browser type and IP address.

3. Civil ID scanning

Scanning a Civil ID is optional: you can type the details instead. If you choose to scan and agree first, a photo of the front of the card is sent to an AI service provider we use to read the name, Civil ID number, date of birth, gender and nationality. You check the details before saving them. We do not store the photo.

4. Payment data

Payments are processed by a third-party payment gateway. We do not store card numbers or other sensitive card data; the payment gateway handles them under the PCI-DSS card security standard. To create a payment we share the amount and the details needed to identify it, such as your name and mobile number. We keep a record of each payment (amount, status and date) for billing.

5. How we use your data

We use your data to run Fannan and to measure how our own advertising performs (section 7). We do not sell it, and we do not collect your device’s advertising ID. We use it to:

• Run the Service: apply to academies, enroll, pay, and follow attendance and progress.
• Verify your mobile number with a one-time code sent on WhatsApp when you sign up or reset your password.
• Send notifications about applications, attendance, invoices and payments, by push notification, WhatsApp and in the app.
• Keep accounts and payments secure and prevent fraud.
• Find and fix errors, and improve the Service using aggregated usage data.
• Measure our advertising: tell Meta and TikTok when one of our ads led to a sign-up or a payment.

6. Who we share it with

We share data only as far as needed to run the Service:

• The academy you apply to or enroll with: your players’ details, attendance, assessments, measurements and payments, so it can train them and bill for the training.
• Meta (WhatsApp): your mobile number and the message, to send verification codes, invitations and payment links.
• Meta and TikTok (advertising measurement): sign-up and payment events with hashed identifiers, as described in section 7.
• An AI service provider: the Civil ID photo, only if you choose to scan one.
• A third-party payment gateway: the details needed to process payments.
• Expo: your device’s push notification token and the notification text, to deliver push notifications.
• Sentry: crash and error reports from the app, to find and fix problems.
• DigitalOcean: hosts our servers, database and stored photos.
• Cloudflare: hosts our website and its waiting list.
• Authorities, where the law requires it.

7. Advertising measurement

We advertise Fannan on Meta (Facebook and Instagram) and TikTok. To learn which ads lead to sign-ups and payments, our server tells these platforms when an account is created or a payment succeeds. No advertising tool inside the app sends your data, and we do not collect your device’s advertising ID.

On iPhone, we follow your choice on Apple’s tracking prompt: unless you allow tracking, we do not send your hashed mobile number or your hashed account ID. You can change your choice at any time in Settings → Privacy & Security → Tracking.

We never send the details of the players on your account, your password, verification codes or card details, and we never sell your data. Meta and TikTok use these events to measure our ads and improve how they are shown, under their own privacy policies.

What we send with each event:

• The event itself: a sign-up, or a payment with its amount and time.
• Your mobile number and account ID as one-way hashes (SHA-256) only, never in readable form, so the platform can match the event to an ad it showed.
• Technical details of the request: IP address, device type and model, operating system, app version, language and time zone.

8. Players under 18

The details of a player under 18 are entered and managed by their parent or guardian, who can view, correct or delete them at any time. A player under 18 does not have their own Fannan account. An academy sees a player’s details only when the player applies to it or trains with it. We use these details only to provide the Service, never for advertising.

9. How long we keep data

We keep your data while your account is active, and as needed to meet our legal and accounting obligations.

When you delete your account (in the app under Profile → Delete account, or by email; see joinfannan.com/en/delete-account), we delete your name and saved location; the personal details of the players on your account (name, date of birth, Civil ID, nationality, gender and photos) and their height and weight measurements; the contact details on your store orders; and your in-app notifications and push notification tokens. We also sign you out on every device.

We keep your phone number, so it can’t be used to open a new account and so support can restore the account on request. We also keep payment, invoice, order, attendance and assessment records without those personal details, because academies need them for their records and accounting.

10. Data security

We apply reasonable technical and organizational measures to protect your data, including password hashing and encrypted connections. However, no transmission of data over the internet can be guaranteed to be absolutely secure.

11. International transfers

Our servers are hosted by DigitalOcean outside Kuwait, and the service providers listed above may process data in other countries. We take appropriate steps to protect your data wherever it is processed.

12. Your rights

You have the right to access and correct your data, and to delete your account at any time from the app (Profile → Delete account) or by emailing us at the address below. The Delete your account page (joinfannan.com/en/delete-account) explains exactly what is removed and what is kept.

13. Changes to this policy

We may update this policy from time to time and will post the updated version on this page with the update date.

14. Contact us

For any privacy question or about your data, email us at [email protected].