Privacy Policy
Last updated: September 22, 2026
KitClub ("we", "our", "us") is a football shirt scanning, valuation and collector platform operated from Switzerland. This Privacy Policy explains what information we collect when you use our mobile application and website (the "Service"), how we use it, and the third parties who process it on our behalf. By using KitClub you agree to the practices described here.
KitClub is operated by Norman, who acts as the Data Controller for all personal data processed through the Service. You can reach us for any privacy matter or data protection request at kitclubinfo@gmail.com.
We comply with the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (FADP / nLPD, in force since 1 September 2023). This policy is designed to meet the transparency and information duties of both frameworks.
Account information:
Photos and collection data:
Content you create:
Usage and activity data:
Device and notification data:
Payment information:
Reseller information (verified resellers only):
KitClub uses AI to identify and value your football shirts. The photos you submit for scanning are processed by the AI services named in section 5 to identify the shirt and estimate its collector value; the results are stored as part of your collection.
KitClub uses artificial intelligence (AI) to identify football shirts and estimate their collector value from the photos you submit. When you scan or upload a shirt image, that image is sent to our AI image-analysis service, which identifies the team, season, manufacturer, shirt type, rarity and an estimated market value, and may generate descriptive narrative about the shirt. The identification and valuation results are stored as part of your collection so you can view and manage them in the app.
We do not sell your personal information.
Legal basis:
We process your data on the basis of your consent (given at sign-up and when you enable optional features such as push notifications), and on our legitimate interest in providing, securing and improving the core Service (including fraud prevention and usage analytics). You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We do not sell your personal information. We may share your information with:
Service providers (sub-processors):
Each of these sub-processors is bound by a data-processing agreement with us or with our platform provider, under which it may process your data only on our documented instructions and for the purposes described in this policy.
Other users:
Your username, profile picture, kit posts, scans and other public profile information are visible to other users of the Service.
Legal requirements:
We may disclose your information if required by law or if we believe disclosure is necessary to protect our rights or the safety of others.
International data transfers:
Your data is hosted and processed in the United States through our platform provider (Base44), and the sub-processors listed above may process data in their respective operating regions. Because KitClub serves users in the EU and Switzerland, these are international transfers governed by Chapter V of the GDPR (Articles 44–49) and Articles 16–17 of the revised Swiss FADP. The transfer basis is the European Commission's Standard Contractual Clauses (SCCs), incorporated in Base44's Data Processing Agreement, or other legally recognised transfer mechanisms, supplemented by technical measures such as encryption in transit and at rest.
We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, your personal data is deleted as well, except where specific records must be kept for legal, accounting or fraud-prevention purposes — in which case we retain only what is necessary and delete it once that purpose lapses. You can delete your account at any time through the Delete Account page in Account Settings, or by contacting us.
Depending on your location — including under the EU GDPR (if you are in the EEA/UK) and the revised Swiss FADP — you may have the right to:
You can delete your account and its data directly via the Delete Account page. To exercise any other right, contact us at kitclubinfo@gmail.com — we respond within 30 days, as required by the GDPR and the FADP.
KitClub is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is fully secure, however.
The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for significant changes, notify you in the app.
If you have any questions about this Privacy Policy, please contact us at:
Email: kitclubinfo@gmail.com
App: KitClub