1. Who is responsible
The operator of AFA is «DAPY LABS» LLC, Armenia. Contact hello@dapylabs.com about data or privacy. Company details and the official source are on the operator page.
2. Scope
AFA is preparing for public launch. This public website introduces the product and provides contact details, documents and a way to request data deletion. You do not need to register or upload files on this website.
The account and app sections apply when you use the corresponding functions in your available version of AFA. This information is updated before public launch and before additional third-party services are enabled.
3. Data processed
- Account and access: phone number, email, name, sign-in verification and session information. Passwords are stored as protected hashes.
- Profile: the name, photo, date of birth, city and football information you add; height, weight and other optional fields if you provide them.
- Team functions: league and team participation, follows, requests, messages, images, video and voice messages you submit.
- Fantasy and purchases: squads, cards, progress, virtual-wallet transactions, purchase identifiers and subscription status.
- Device and security: app version, OS, IP address and technical request records; device token and session binding if push notifications are enabled.
- Support: the message, reply contact and attachments you choose to send.
4. Purposes
Data is used for sign-in and account protection, profiles, team communication, selected functions and purchases, responding to requests, preventing abuse and fixing errors.
Photos may be processed to format a profile or create a card image. Camera, library and microphone permissions support the corresponding actions. Optional functions can be left unused, and device permissions can be changed in system settings.
5. Visibility and recipients
Public league, team and profile information is visible in the relevant sections. Team messages are intended for members with chat access. Consider the audience before submitting content; people may retain information they have already received.
This website is hosted through OpenAI Sites and Cloudflare infrastructure. Technical delivery and protection may process your IP address, request time, URL and browser information. Support correspondence uses the company's email infrastructure; the email domain uses Zoho.
Where notifications are available and allowed, delivery uses Firebase Cloud Messaging and, on iOS, Apple's Push Notification service. Where purchases are available, the store processes payment and AFA receives information needed to validate it rather than bank-card credentials.
Provider infrastructure may be outside your country. Production services and territories require a separate data-handling review; the active setup is described here before activation.
6. Advertising and notifications
This website has no advertisements, advertising SDKs or mailing-list forms. In-app ad delivery has not been activated for public launch. Active networks, data practices and consent settings will be disclosed before it is enabled.
System push notifications use neutral wording. Personal details are available after sign-in. Push can be disabled in device settings.
7. Retention and deletion
Account and function data is retained while needed to provide those functions and maintain the account. Uninstalling the app does not delete the server account. Use the request page to delete the account or specific data.
After ownership verification, a full deletion request covers the account and associated personal data. Where a limited record must be retained for mandatory accounting, a dispute or abuse prevention, we explain the record, basis and applicable period. Keeping that limited record does not keep an active account.
Removal from backups depends on the approved backup cycle for the environment and is explained when processing a request. Specific production retention and backup periods must be published before the app's public launch.
8. Your choices
Contact hello@dapylabs.com to request access, correction or deletion, or an explanation of processing. We may need to verify account ownership. Do not send passwords or SMS codes.
AFA is intended for users aged 13 and over. If you believe we received data from a child under 13, contact us for investigation and deletion. Additional restrictions and consent requirements apply to minors where required.
9. Security and changes
We use access controls and technical safeguards. Do not share account access or verification codes. No internet service can promise absolute security.
Changes are reflected on this page with an updated date. Publishing an update does not replace any separate consent that is required.