Privacy Policy

Last updated: August 18, 2026

1. Data Controller

The entity responsible for processing your personal data is Widdo Inc., a corporation incorporated under the laws of the State of Delaware, USA. For any inquiries regarding data processing, contact us at hey@widdo.co.

2. Data We Collect

Identity & Contact Data

• Full name, government ID number, date of birth
• Email address, phone number, physical address
• Profile photo (optional)

Club Member Data

• Player information: name, age, category, position, relevant medical data
• Parent/guardian information: name, contact, relationship to athlete
• Coach information: name, specialization, certifications

Payment Data

• Billing details and payment method (securely processed via certified payment providers)
• Transaction history and account statements

Usage Data

• IP address, browser type, device information
• Pages visited, session duration, navigation patterns
• Attendance records and in-platform activity

Mobile App Data

• Device push token, so we can deliver notifications, plus device model and operating system version
• Biometric unlock (Face ID / Touch ID / fingerprint): your biometric data never leaves your device. Widdo only receives a success or failure signal from the operating system
• Camera and photo library: only the images you choose to attach as a payment receipt
• A local cache stored on your device so the app works without a connection
• Crash and error reports, which may include device model, OS version and app state at the time of the error

3. Purposes of Processing

• Service delivery: Manage clubs, players, attendance, schedules, and communications.
• Billing: Process subscriptions, invoices, and payment collection.
• Communications: Send service notifications, updates, and support responses.
• Support: Respond to inquiries and resolve issues.
• Analytics: Improve the platform based on aggregated usage patterns.
• Legal compliance: Fulfill tax, regulatory, and legal obligations.
• Marketing: Send promotional content only with your prior consent; you may opt out at any time.

4. Legal Basis

We process personal data based on the applicable legal framework in your jurisdiction. The following table summarizes the primary data protection laws and supervisory authorities:

Depending on your location, processing may be based on contractual necessity, legitimate interest, legal obligation, or your consent.

5. Data Sharing

We share data only with trusted third-party service providers necessary to operate the platform. We never sell your personal data.

• Stripe — Payment processing (our only payment provider)
• Google Firebase (FCM) & Apple (APNs) — Delivery of push notifications to your device
• Sentry — Crash and error reporting
• Vercel — Frontend hosting and CDN
• DigitalOcean — Backend infrastructure and database
• Resend — Transactional email delivery
• Google Analytics — Aggregated usage analytics

Each provider is contractually obligated to protect your data and process it only for the stated purposes.

6. Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Hashed and salted passwords (bcrypt)
• Automated daily backups
• Role-based access control (RBAC) across the platform
• Server monitoring and intrusion detection

7. Your Rights by Jurisdiction

USA

• CCPA / CPRA (California): Right to know, access, correct, delete, and opt out of the sale or sharing of personal information. Widdo does not sell or share personal data.
• Equivalent rights apply under the privacy laws of other states (Virginia, Colorado, Connecticut, Texas and others).
• COPPA: Widdo accounts are for adults only (18+). Minor athletes do not hold accounts; their data is entered by the club or by their parent or guardian. See section 11.

Canada

• PIPEDA: Right of access to your personal information, to challenge its accuracy, and to withdraw consent.
• Quebec (Law 25): Additional rights to data portability and to request that processing cease.
• Right to lodge a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, with the CAI.

Mexico

• LFPDPPP — ARCO rights: Access, Rectification, Cancellation and Opposition.
• Right to revoke consent and to limit the use or disclosure of your data.
• Right to file a complaint with INAI.

Colombia

• Ley 1581/2012 (habeas data): Access, update, rectify and delete your data, and revoke the authorization granted.
• Right to request proof of the authorization granted, and to be informed of how your data has been used.
• Right to file a complaint with the Superintendencia de Industria y Comercio (SIC).

If you reside in another country, we honor the rights granted by your local data protection law.

To exercise any of these rights, contact us at hey@widdo.co.

8. Cookies

• Essential cookies: Required for authentication, session management, and security. Cannot be disabled.
• Analytics cookies: Google Analytics for aggregated usage statistics. You may opt out via browser settings or the Google Analytics opt-out extension.

9. Data Retention and Account Deletion

You can delete your account at any time from the mobile app (Settings → Account → Delete account) or by requesting it at widdo.co/en/delete-account. Before deleting, you can export your data.

What we delete

• Your credentials, email, phone number, government ID and date of birth
• Your profile photo, preferences and language settings
• Your sessions, access tokens and device push tokens

Deletion is completed within 30 days of the request.

What stays with the club

Attendance, charges, payments, receipts and category history remain in your club’s records in pseudonymized form: your name is replaced by an anonymous identifier and the link to you as a person is severed. Those records are the club’s own books, and the club — not Widdo — is the controller of that information. Widdo processes it on the club’s behalf.

Legal retention

• Billing records: Retained for 5 years to comply with tax and accounting regulations.
• Usage data: Aggregated and anonymized after the subscription ends.
• Any other data whose retention is required by applicable law, for as long as that law requires.

Club owners

If you are the only owner of an active club, you must first transfer ownership to another administrator. This prevents a club from being left with no one able to manage the data of its players, coaches and families.

10. International Data Transfers

Your data may be processed in the United States, where Widdo Inc. is incorporated, or in other countries where our infrastructure providers operate. We apply adequate safeguards — including standard contractual clauses and data processing agreements — to protect your data during international transfers in accordance with applicable law.

11. Minors

Widdo accounts are for adults only. You must be at least 18 years old to create an account or to log in. The app is not directed to children and we do not knowingly allow anyone under 18 to register.

Widdo does hold data about athletes who are minors, but a minor athlete has no account and no credentials: they exist as a record created and managed by the club or by their parent or legal guardian, who are the ones who provide that information.

• The club is responsible for obtaining and documenting parental consent before registering a minor, as required by COPPA in the USA and by the equivalent law in each country.
• We do not use minors’ data for advertising, behavioral profiling, or any purpose beyond the club’s sports management.
• A parent or guardian may request access, correction or deletion of their child’s data by writing to hey@widdo.co or through the club.

If we learn that someone under 18 created an account, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new "Last updated" date. For substantial changes, we will notify you via the platform or email.

13. Contact

For privacy-related inquiries or to exercise your data protection rights, contact us at hey@widdo.co.

Widdo Inc. — Incorporated in the State of Delaware, USA.