Data Deletion Policy

1. Purpose of This Policy

Overview: This Data Deletion Policy explains how users of the Passione90 mobile application (iOS and Android) and related services can request deletion of their personal data, how we process those requests, and what information may be retained where required by law. This Policy supplements our Global Data Protection & Privacy Policy and applies across the European Union (EU/EEA) and the United States.

Who This Covers: Account holders using any Passione90 role (Fan, Player, Coach, or Club), including parents or guardians acting on behalf of a youth player where parental consent applies.

2. How to Request Data Deletion

In-App Controls: Where available, you may initiate account and data deletion from Passione90 app settings using the self-service deletion controls. Completing an in-app deletion request starts the erasure workflow described below.

Email Request: You may also submit a deletion request by emailing privacy@passione90.app from the email address associated with your Passione90 account. Please include:

• Full name used on the account
• Account email address
• A clear statement that you request deletion of your account and personal data
• Any optional details that help us locate related content (for example, Club name or Player profile)

Identity Verification: To protect users from unauthorized deletion, we may ask you to verify ownership of the account before processing the request.

3. What We Delete

Personal Profile & Account Data: Upon a verified deletion request, we delete or irreversibly anonymize personal account information such as name, email, phone number, profile avatar, role persona, authentication credentials, and related profile settings stored in our systems (including Supabase-hosted account records).

User Content: Where reasonably practicable, we remove or anonymize user-generated content tied to your identity, including profile media, comments, Scout Reporter uploads associated with your account, and similar personal contributions.

App Preferences & Device Tokens: We remove push notification tokens and personal preference settings linked to your account once deletion is processed.

4. Processing Timeline

Acknowledgement: We aim to acknowledge deletion requests within a reasonable period after receipt and identity verification.

Completion Window: In line with our Privacy Policy retention standards, personal profile data associated with a verified deletion request is purged within 30 days, except where a longer retention period is required by applicable law (for example, tax, accounting, fraud prevention, or dispute resolution obligations).

Backups: Residual copies may remain temporarily in encrypted backups until those backups rotate out of the retention cycle. Backup copies are isolated from production use and are deleted or overwritten according to our backup lifecycle.

5. What May Be Retained

Legal & Compliance Records: We may retain limited information when retention is necessary to comply with legal obligations, establish or defend legal claims, prevent abuse or fraud, or satisfy financial/audit requirements. Retained data is limited to what is necessary and is not used for marketing.

Aggregated / Anonymized Data: Data that has been irreversibly anonymized so it can no longer identify you may be retained for analytics, security, and product improvement.

Third-Party Processors: Where personal data was shared with processors under our Privacy Policy (for example Supabase, Firebase FCM, Stripe, or PayPal), we instruct those processors to delete or anonymize personal data in accordance with our Data Processing Agreements, subject to their own legal retention duties.

6. EU GDPR — Right to Erasure

GDPR Article 17: EEA users may request erasure of personal data under applicable conditions of GDPR Article 17. We will assess and honor valid erasure requests unless an exemption applies (for example, compliance with a legal obligation or establishment/exercise/defense of legal claims).

Additional Rights: EU/EEA users may also request access, rectification, restriction, or data portability as described in our Privacy Policy by contacting privacy@passione90.app.

7. United States — Right to Delete

CCPA/CPRA & State Laws: Residents of California and other US states with comprehensive privacy laws may request deletion of personal information we collected from them, subject to statutory exceptions. We do not sell personal information for monetary consideration.

How to Exercise: Submit a deletion request via privacy@passione90.app or in-app controls. We will verify your identity and respond in accordance with applicable US state timelines.

8. Children's / Youth Accounts

Parental Requests: Parents or legal guardians who provided verifiable consent for a youth player may request deletion of the child's personal information by contacting privacy@passione90.app. We handle such requests in line with COPPA (US) and GDPR Article 8 (EU) requirements described in our Privacy Policy.

9. Third-Party Login & Store Accounts

Apple / Google Sign-In: Deleting your Passione90 account removes Passione90-held data for that account. It does not automatically delete your Apple ID or Google account. Manage those accounts with Apple or Google directly.

App Store Billing: Subscription or purchase records retained by Apple App Store or Google Play remain subject to those platforms' policies. Contact the relevant store for billing history or subscription cancellation.

10. Meta / Social Platform Connected Data

Connected Features: If you connected Passione90-related experiences with Meta (Facebook/Instagram) or other social platforms, you may also revoke permissions from within those platforms' settings. Passione90 deletion requests cover data we control; platform-side permissions and ads accounts remain under the respective platform's controls.

11. Contact for Deletion & Privacy Inquiries

Primary Contact: privacy@passione90.app

Legal Inquiries: legal@passione90.app

Related Documents: Privacy Policy · Terms & Conditions

Document Reference: P90-DDP-2026-V1 · Effective Date: October 18, 2026