Legal
Privacy Policy
Earpiece WhatsApp Service. Version 2026.1 · Effective 11 August 2026.
1. Who we are
Twelve Football AB
Brännkyrkagatan 95
117 26 Stockholm, Sweden
Corporate ID: SE559219677701
Contact: hello@twelve.football
We are the data controller for personal data collected through the Earpiece WhatsApp Service.
2. What data we collect
We collect and process the following categories of personal data:
- Identity data: name, employer (club), role/title.
- Contact data: phone number (used to deliver the WhatsApp service), email address (if provided).
- Usage data: messages sent through the Service, feature usage patterns, feedback.
- Technical data: device type, operating system, IP address (used minimally and temporarily for security and diagnostics).
- Payment data: payment method and subscription history (processed via third-party providers; we do not store full payment card details).
3. How we use your data
We use your personal data to:
- Deliver the WhatsApp-based Service.
- Respond to your questions and provide support.
- Monitor and improve the performance and relevance of the Service.
- Enforce our Terms and Conditions.
- Comply with legal obligations.
- (If applicable) Send you updates about new features or relevant offers, with your consent.
4. Legal basis for processing
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
- Contractual necessity: to provide the Service you've signed up for.
- Legitimate interest: to improve the Service, prevent misuse, and protect our systems.
- Consent: for optional communications such as marketing updates (you can withdraw consent at any time).
- Legal obligation: when required to retain or disclose data under law.
5. Data sharing
We do not sell your personal data. We may share it with:
- WhatsApp (Meta): to deliver the Service through their platform, in accordance with their privacy policy.
- Third-party processors: including Azure OpenAI, Azure cloud services, Auth0 (authentication), and payment providers — all GDPR-compliant and under data processing agreements.
- Authorities: if legally required to comply with obligations or respond to lawful requests.
A full list of sub-processors is available at twelve.football/third-party-products.
6. International transfers
Some of our service providers operate outside the EU/EEA. When data is transferred internationally, we ensure adequate safeguards such as Standard Contractual Clauses (SCCs) are in place.
7. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined above or to comply with legal obligations. If you cancel your account or request deletion, we will delete or anonymize your data within 30 days, unless otherwise required by law.
8. Your rights under GDPR
As a data subject, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Object to processing based on legitimate interests.
- Withdraw consent where processing is based on consent.
- Request data portability to another service.
- Lodge a complaint with your national data protection authority (in Sweden: Integritetsskyddsmyndigheten).
To exercise your rights, contact us at hello@twelve.football.
9. Data security
We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and monitoring of system activity.
10. Changes to this policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via WhatsApp or email. Continued use of the Service indicates acceptance of the updated policy.
Questions?
Please contact us at hello@twelve.football.
Version 2026.1 · Last updated 11 August 2026