1. Who we are
Cleatz ("Cleatz", "the app", "we", "us") is a football boot design app published by Tapmax Apps. This policy explains what happens to information when you use the app or this website (cleatzapp.com).
If you have a question about anything here, or want to exercise any of the rights in section 12, email [email protected].
2. What we don't collect
- No passwords, ever. Signing in uses Sign in with Apple or Google Sign-In, so authentication happens with them, not us. We never receive, store or transmit your password.
- An account is optional. Every design feature works signed out. Sign in only if you want your boots backed up.
- No contacts, camera, microphone, location or health data. The app doesn't ask for these and doesn't use them.
- No analytics or crash-reporting SDKs. We don't track how you use the app.
- We don't sell your data. Not to anyone, for any purpose.
If you never sign in, your boots live only on your device, and uninstalling the app deletes them — there is nothing on our side to restore from.
3. Accounts and cloud backup (optional)
The app offers an optional account so your saved boots survive losing or replacing your phone. It is entirely opt-in — you choose to sign in from Settings in the app, and nothing is uploaded before you do.
How signing in works
We support Sign in with Apple (on iPhone) and Google Sign-In (on Android) only. There is no email-and-password option. Apple or Google confirms who you are and passes us a secure token — never your password. From that we receive an account identifier and, if the provider supplies it, your email address. Apple's Hide My Email gives us a relay address rather than your real one, and that works fine.
What gets backed up
Once signed in, we store each boot you save: its name, the design itself (colours, patterns, materials, graphics and text — as design data, not images), the pose you chose for its picture, and when it was created and last edited. We do not upload pictures of your boots; they're redrawn on your device from the design data.
This data is held in our database, provided by Supabase and hosted in the European Union (Ireland). Access is enforced in the database itself so that an account can only ever read and write its own boots.
Deleting your account
In the app, go to Settings › Delete account. This permanently deletes your account and every boot backed up to it, immediately. Boots already saved on your phone stay on your phone. Signing out simply stops backing up; it deletes nothing. See also Delete your account.
4. Advertising
Cleatz is free and is funded by ads served by Google AdMob — a banner, occasional full-screen ads (for example after saving a boot), and, on Android, an occasional ad when the app opens. To do that, Google may process your device's advertising identifier, IP address, and how you interact with an ad. Depending on your consent choices (section 6), ads are either personalised or non-personalised.
Patterns and textures can be unlocked for your current session by choosing to watch a rewarded video ad. Watching one is always optional. The unlock is held only in your phone's memory and resets when you close the app; nothing is recorded about it on our side.
5. Content, photos and storage on your device
- Artwork. Logos and texture artwork are downloaded from a content delivery network (bunny.net). As with any request over the internet, the servers receive your IP address in order to send the files back.
- Saving pictures. When you save a boot with "Also save image to Photos" switched on, the app asks permission to add the picture to your photo library and writes it there. It does not read your existing photos.
- On your device. Your current design, saved boots, picture thumbnails and settings (such as dark mode) are stored on your phone so they're there next time you open the app.
6. Your consent choices
- On iPhone, Apple's App Tracking Transparency prompt asks whether the app may track you across other companies' apps and websites. If you decline, your advertising identifier isn't used for personalised ads. You can change this any time in Settings › Privacy & Security › Tracking.
- In the EEA and UK, Google's consent form appears before personalised ads are enabled and records whatever choice you make.
- On Android, you can reset or delete your advertising ID in Settings › Google › Ads (or Settings › Privacy › Ads).
Declining personalised ads doesn't restrict any feature — you'll just see less relevant ads.
7. Legal bases for processing
If you are in the UK or the European Economic Area, we rely on: consent for personalised advertising and advertising identifiers; performance of a contract to provide the app and, if you sign in, cloud backup; and legitimate interests for delivering artwork and non-personalised ads that keep the app free.
8. Who your data is shared with
We do not sell or rent data. It is shared only with the service providers that make the app work:
- Google — AdMob advertising, and Google Sign-In on Android. See the Google Privacy Policy and how Google uses data from partner apps.
- Apple — Sign in with Apple on iPhone. See Apple's Privacy Policy.
- Supabase — accounts and backed-up boots, for signed-in users only. Hosted in the EU (Ireland). See the Supabase Privacy Policy.
- bunny.net — content delivery for app artwork. See the bunny.net Privacy Policy.
- Cloudflare — hosting for this website. See the Cloudflare Privacy Policy.
We may also disclose information if we are legally required to do so.
9. International transfers
Your account and backed-up boots are stored in the European Union (Ireland). The other providers above operate globally, so advertising and content-delivery data may be processed outside the UK or EEA, including in the United States, under the safeguards those providers put in place (such as the European Commission's standard contractual clauses).
10. How long data is kept
Designs and settings stay on your device until you delete them or uninstall the app. If you have an account, your account and backed-up boots are kept until you delete the account, which removes them immediately; boots you delete in the app are marked deleted so the deletion reaches your other devices. Advertising data is retained by Google under its own policies.
11. Security
We hold no passwords. For signed-in users, access to backed-up boots is enforced in the database itself, so each account can only read and write its own rows. Data in transit is encrypted using HTTPS. No method of transmission or storage is completely secure, but the information involved is deliberately small.
12. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent at any time. The most direct controls are in the app: the consent choices in section 6, and Settings › Delete account. For a formal request, email [email protected] with the Apple or Google identity you signed in with. If you have never signed in, we hold no record tied to you.
If you are in the UK you may complain to the Information Commissioner's Office; in the EEA, to your local data protection authority. California residents: we do not sell or share personal information as defined under the CCPA/CPRA.
13. Children
Cleatz is a general-audience app and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact [email protected] and we will delete what we can identify.
14. Changes to this policy
If this policy changes, the updated version will be posted on this page with a new "last updated" date.
15. Contact
Questions, requests or complaints: [email protected].