Privacy Policy

Last updated: 2026-10-21

1. Data controller

The controller of your personal data is Jędrzej Meder, who runs SpinMyTeam. You can contact the controller at: kontakt@spin-my-team.com.

2. What data we collect

While you use the SpinMyTeam app we collect the following data:

  • E-mail address (required for registration and sign-in)
  • First and last name or nickname (optional, for display in groups)
  • Activity data within the app (matches, sign-ups, ratings)
  • Technical information (IP address, browser type, operating system)
  • If you sign in with Facebook: your name, profile photo, e-mail address and Facebook account ID, which Facebook shares with SpinMyTeam with your consent

3. Purpose of processing

We process your data for the following purposes:

  • Providing SpinMyTeam app services
  • Sending e-mail notifications about matches and changes
  • Ensuring account security
  • Analysing and improving the app
  • Communicating with users

4. Legal basis for processing

Data processing is based on:

  • Art. 6(1)(b) GDPR - performance of a service contract
  • Art. 6(1)(f) GDPR - the controller's legitimate interest
  • Art. 6(1)(a) GDPR - the user's consent (in the case of marketing communication)

5. Data sharing

Your data may be shared with:

  • Other members of groups you belong to (name/nickname, statistics)
  • Cloudflare, which hosts and delivers the application (hosting and CDN) and therefore handles the traffic between you and SpinMyTeam
  • Supabase, which provides the database and authentication where account and group data is stored
  • Resend, which delivers transactional e-mails such as sign-in links and invitations
  • Public authorities under applicable law

6. Retention period

We retain data for as long as you use the service and for 30 days after account deletion. Statistical data may be retained in anonymised form for a longer period.

7. Your rights

You have the following rights:

  • Right of access to your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with the supervisory authority (UODO)

8. Deleting your account and data

You can ask us at any time to delete your SpinMyTeam account and all personal data linked to it, including data received from Facebook if you sign in with Facebook:

  • Send an e-mail to kontakt@spin-my-team.com from the address you use in SpinMyTeam, with the subject "Delete my account". If you sign in with Facebook, send it from the e-mail address of your Facebook account.
  • We delete the account and the personal data linked to it, including your name, profile photo, e-mail address and Facebook account ID, without undue delay and at the latest within one month, and confirm the deletion by e-mail.
  • To also remove SpinMyTeam's access on Facebook's side, open Facebook, go to Settings & privacy → Settings → Apps and websites and remove SpinMyTeam. This alone does not delete the data we hold, so send the e-mail above as well.

9. Cookies

The SpinMyTeam app uses cookies that are necessary for it to function correctly (sign-in session, preferences). You can manage cookie settings in your browser.

10. Security

We apply appropriate technical and organisational measures to protect your data, including connection encryption (SSL/TLS), secure data storage and regular security updates.

11. Contact

For matters relating to personal data protection you can contact us at: kontakt@spin-my-team.com