Legal

Privacy Policy

The short version: we store what we need to run the product — your account, your lineups, your teams — and we never sell it.

Last updated · July 3, 2026

1. Overview

xiflow (the "Service") is a football tactics platform that lets you build, save, share, and analyze tactical lineups. This Privacy Policy explains what information we collect, why we collect it, and the choices you have. By using the Service, you agree to the practices described here.

2. What we collect

Account information

When you create an account we collect your name, email address, and a password (or a Google sign-in identifier if you choose that method). Authentication is handled by Firebase Auth.

Content you create

  • Lineups — formations, player placements, names, ratings, and notes
  • Teams — team name, badge URL, and members
  • Share links — generated links and view counts
  • Stats — aggregates computed from your lineups and sharing activity

Usage data

We collect limited analytics such as which pages you visit and which features you use, so we can improve the product. This does not include your tactical content.

3. How we use it

  • To create and manage your account
  • To save, retrieve, and sync your lineups and teams
  • To generate share links and record views
  • To compute your stats dashboard
  • To respond to support requests
  • To improve the product through usage analytics

4. Storage & security

Your data is stored in Firebase (Google Cloud) Firestore, the same infrastructure used by Google's own services. Access is governed by Firestore security rules that allow you to read and write only your own data, and allow public read access only for lineups you choose to share via a link.

A note on shared lineups

Anything you share via a link becomes publicly viewable by anyone with that link. Never include sensitive personal information in a lineup you intend to share.

5. Who we share with

  • Google / Firebase — for authentication, database, and hosting
  • Service providers who help operate the Service, under confidentiality obligations

We do not sell, rent, or trade your personal information. We do not share your lineups or teams with third parties except as required to operate the Service or by law.

6. Cookies & local storage

We use browser local storage to keep you signed in and remember your theme preference. We do not use third-party advertising cookies.

7. Your rights

  • Access a copy of your account data
  • Correct or update inaccurate information
  • Export your lineups and teams
  • Delete your account and associated data
  • Withdraw consent for optional analytics

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

8. Retention

We keep your account data for as long as your account is active. When you delete your account, we delete your lineups, teams, and share links within a reasonable period. Share links you created for public lineups are removed when the lineup is deleted.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced on the changelog and, where required, via email. Continued use of the Service after changes means you accept the updated policy.

11. Contact

Questions about this policy or your data? Reach us at privacy@xiflow.app.