Privacy information (draft)

This page is a draft, not the final privacy policy. Legal grounds, remaining retention criteria and service-provider arrangements must be confirmed before publication.

Juan Lopez, based in Spain, is responsible for Inntalent and its processing of personal information. Contact privacy@inntalent.net for privacy requests or reports of inappropriate content. For general support, contact info@inntalent.net.

Inntalent uses Amazon Cognito for sign-in. The application stores account identifiers, email, display name and language preference. Athlete profiles can also contain optional date of birth, locality, country, sports and profile images.

The application records team and competition membership, match participation, results, officiating actions, profile posts and follows. Published competition and match pages and public profile images can be viewed outside your account. Some profile information and activity are visible to other signed-in users. Private conversations are accessible to their participating profiles and Inntalent employees. Institution and competition administrators share their entity inbox history.

If you use fantasy or duels, we store your player selections, round scores, opponents, results and Talents movements linked to your account. Talents are virtual points: they cannot be purchased, withdrawn or exchanged for money. This is sporting and game activity, not a payment account.

The mobile app stores session credentials securely and keeps language preferences and prepared match data on your device. Referee actions recorded offline remain locally until they can be sent to the server. Closing the app does not confirm that synchronization has finished.

Amazon Web Services provides authentication, hosting, data storage and delivery of public images. The installed app contacts Expo to check for and download compatible updates. These network connections expose technical information such as your IP address and request metadata to the receiving provider. Support and privacy messages are handled through our Google Workspace email service. When automatic content checks are enabled, new post text and re-encoded images are sent to OpenAI for safety classification before publication. We do not add account identifiers to these requests. Flagged content stays private for authorized review; contact privacy@inntalent.net to contest a decision. Review records are deleted 90 days after closure. Provider arrangements and any international transfers remain subject to completion of the final policy.

A location can include a Google Maps preview. Where configured, the preview loads from Google as it becomes visible and communicates technical connection information to Google, even if you do not open the map link. Opening a map or another external link also connects you to that service, under its own privacy policy. The venue address or locality entered in a profile is not a measurement of your device location.

Account and sporting data are kept to provide the service until erased or otherwise removed through its lifecycle. Private message text remains after account deletion without account attribution; no automatic message expiry is configured. Production automated database backups are retained for 14 days and application service logs for 30 days. Deleted versions of original profile images expire after 30 days; managed-media audit records expire after 90 days. These periods do not cover manually retained database snapshots, downloaded public copies or disconnected devices. A manual snapshot requires a separate disposal decision; live deletion does not rewrite an existing backup.

We keep your report category, explanation, the reported content version and review decision privately for safety review. Reports do not reveal your identity to the reported profile. Personal blocks apply to your account across its profiles and do not change other managers’ access. We also record the community-rules version and time you accept it. Juan Lopez reviews reports daily; contact privacy@inntalent.net for concerns or appeals. Closed reports and their evidence are deleted after 90 days; open cases require resolution. Account deletion also removes your submitted reports, personal block list and rules acceptance. Reports are not automatically forwarded to the filtering provider.

You can start account deletion from the app or the public deletion page. Personal account fields, personal posts and personal media are erased through a process that can require retries. Shared sporting results remain without personal attribution. Accepting a request is not the same as completing all cleanup. Synchronize pending referee actions before deleting; devices that stay offline cannot be remotely cleared. A restore must reapply accepted erasures before service resumes.

You may request access, correction, deletion, restriction, objection or portability where applicable by contacting privacy@inntalent.net. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. We may need proportionate verification to protect your information. You may also complain to the Spanish Data Protection Agency (AEPD). Do not send passwords or identity documents with an initial request.

For questions about your information or a request concerning access, correction or deletion, contact the privacy address below. Describe your request without sending passwords, access codes or identity documents in the first email.