Privacy Policy – tourneo.app

Last updated: 26 July 2026

1. Scope and Data Controller

This Privacy Policy applies to the public version 0.1.0 of the Tourneo Android application distributed through Google Play (the “Application”). It does not apply to private development builds used solely by the developer.

The controller of personal data is:

Maciej Pomiankiewicz, conducting business activity under the name Maciej Pomiankiewicz.
Registered office: ul. Siennicka 27A/464, 04-394 Warszawa, Poland.
Tax ID (NIP): 1133050730, REGON: 521202246.
Contact: admin@tourneo.app

2. No Account or Login

The public version of the Application does not provide account registration or login. It does not collect your name, email address, Google profile, contacts, advertising identifier, or payment information.

The Application creates an anonymous technical session when you use the optional shared-tournament feature. This session does not contain a user profile and is used only to communicate securely with the synchronization service.

3. Local Tournaments

Tournaments created and used only on your device are stored locally. They are not uploaded unless they are connected to a shared tournament. You can remove a local tournament at any time using the delete action in the Application. Uninstalling the Application also removes its local data, subject to your device’s backup settings.

4. Shared Tournaments

The public version cannot create or publish a shared tournament. It can optionally join an existing shared tournament by scanning its QR code or entering its join code. When you join, the Application downloads the tournament and keeps a local copy synchronized with the Tourneo backend.

For a joined tournament, the following information is transmitted to and stored by the backend:

A join code is a capability: anyone who receives a valid code may be able to view and modify the associated tournament. Do not publish a join code or include sensitive personal information in team or participant names. If you enter information about another person, make sure you have an appropriate basis to do so.

Deleting a joined tournament removes your local copy and local sharing credentials. It does not delete the organizer’s remote tournament. The organizer can stop sharing or delete the remote tournament.

5. Camera and QR Codes

Camera access is optional and is requested only when you open the QR scanner. Camera frames are processed on your device to recognize a Tourneo join code. They are not recorded, retained, or uploaded. You can instead enter the join code manually without granting camera permission.

6. Diagnostics

The public version uses Sentry for crash and error reporting. When an error occurs, Sentry may process:

The public version does not send screen captures to Sentry and does not use PostHog product analytics, advertising SDKs, behavioral advertising, or session replay.

7. Purposes and Legal Bases

We process data only to:

We do not sell personal data, use it for advertising, or carry out automated decision-making that produces legal or similarly significant effects.

8. Service Providers

We use the following service providers to operate the Application:

These providers process data on our behalf under contractual and security obligations. They may also process limited information as independent controllers where required to secure and operate their own services.

We may also disclose data to public authorities where required by applicable law.

9. Retention and Deletion

To request deletion of backend data, contact admin@tourneo.app. Include the tournament name and, if available, its join code so that we can identify the relevant record. Do not send participant details by email. We may need to verify that a request is authorized before deleting a shared tournament.

10. Security

Data is encrypted in transit using HTTPS/TLS. Shared-tournament operations are protected by randomized join codes, hashed code verification, revision checks, and server-side authorization. No system is completely secure, so keep join codes private and report suspected unauthorized access to admin@tourneo.app.

11. International Data Transfers

We select European processing regions where reasonably available. Some providers or their subprocessors may process data outside the European Economic Area. Where required, such transfers are protected by an adequacy decision, the EU Standard Contractual Clauses, or another lawful transfer mechanism.

12. Your Rights under GDPR

You have the following rights with respect to your personal data:

To exercise any of these rights, please contact us at admin@tourneo.app. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with your local supervisory authority.

13. Children’s Privacy

The Application is not directed to children under the age of 13 in the United States or under the age of 16 in the European Union. Do not include children’s full names or other sensitive information in a shared tournament. If we become aware that personal data of a child has been uploaded without an appropriate legal basis, we will take reasonable steps to delete it.

If you believe that a child has provided us with personal data, please contact us at admin@tourneo.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website, with the date of the latest revision shown at the top. If the changes are significant, we will notify you by appropriate means.