Privacy Policy — Matchday Passport

Last updated: 19 July 2026

Your passport is private by default. Matches you log stay on your device unless you choose to publish them to the shared feed. There are no ads, no analytics, no tracking, and no third-party SDKs — the app's only backend is Apple's iCloud (CloudKit).

What stays on your device

The matches you log — teams, scores, venues, dates, notes, and any photos or videos you attach — are stored in the app's private storage on your iPhone. A stamp leaves your device only if you tap Publish on it. If you delete the app, on-device data is removed with it.

What we collect (only if you use the social features)

If you claim a fan handle and publish stamps, the following is stored in Apple's CloudKit database so other fans can see it, under whatever visibility you chose (followers or everyone):

• Content you publish — the stamps you choose to share (match, score, your text, photos, video), comments, reactions, follows, and match check-ins.
• Your fan profile — the @handle and display name you pick.
• Your Apple user identifier — the anonymous CloudKit user record ID that comes with your iCloud account. It links your published content to your account. We never see your name, email, phone number, or Apple ID credentials.
• Reports you file — if you report content, the report (reason and your user identifier) is stored so we can act on it.

All of this is used solely to make the app work. It is linked to your iCloud identity, is never used for tracking or advertising, and is never sold or shared with anyone. Signing in is your iCloud account itself — the app has no passwords and no sign-up forms.

Location

The app never requests or uses your location. The "who's here" list on a match page is populated only by your own explicit check-in, and shows a stadium name — never coordinates.

Photos and videos

Attaching media uses the system picker; the app does not request access to your full photo library. Media is uploaded only as part of a stamp you publish, and is deleted when you unpublish the stamp or delete your account.

Deleting your data

Profile → Account → "Delete my fan account" permanently deletes your fan profile and everything you shared — published stamps, media, comments, reactions, follows, and check-ins — for everyone. Your on-device passport stays on your phone. No email or support contact is required.

Children

The app is rated 13+ and is not directed at children.

Service providers

Published content is stored in Apple's CloudKit service under Apple's own security and privacy practices. Match schedules shown in the app come from the Football-Data.org API; nothing about you is sent to them.

Changes

If this policy changes, the updated version will be posted here.

Contact

Questions? Email cnwt20060606@outlook.com.

Matchday Passport is an independent fan app. It is not affiliated with, endorsed by, or connected to FIFA, any national football association, or any official tournament organizer.