MisterLink Privacy Policy

1. Introduction

Welcome to MisterLink. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

MisterLink is a platform that connects sports coaches with clubs in Switzerland. We operate in compliance with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

When you register and use MisterLink, you may provide:

• Account Information: Email address, password, name, role (coach or club)
• Profile Information:
  • For Coaches: Biography, qualifications, certifications, languages spoken, positions coached, age groups, experience, availability, photos, CV/resume, contact preferences
  • For Clubs: Club name, description, location (canton, city), facilities, languages, contact information
• Job Postings and Applications: Job descriptions, position details, application materials, communications
• Communications: Messages sent through our support system

2.2 Information Collected While Operating the Service

• Server logs: IP address, access times and error messages, recorded automatically by our hosting provider
• Push tokens: If you allow notifications, we store your device's push token and your notification settings. This is the only way we can notify you. Turning notifications off or deleting your account removes the token.
• Profile views: When you open someone else's profile, we record that a view happened. The profile owner only ever sees the number of views, never who viewed them. Opening the same profile again on the same day counts once.

No tracking: We do not use any analytics or advertising tools. We do not record which features you use or how long you stay in the app, and we do not track you across other apps or websites.

2.3 Information from Third Parties

• OAuth Authentication: If you sign in with Google or Apple, we receive basic profile information (name, email) as permitted by those services. With Sign in with Apple you may hide your real address, in which case we only receive a relay address.

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Operate the platform, match coaches with clubs, facilitate job postings and applications
• Account Management: Create and manage your account, authenticate users
• Communication: Send service-related notifications, respond to inquiries
• Notifications: Tell you when something happens that concerns you, such as a new application on your posting
• Safety and Security: Detect fraud, prevent abuse, enforce our terms
• Legal Compliance: Comply with legal obligations and respond to legal requests

4. How We Share Your Information

4.1 What Other Users See

• Coach Profiles: Name, biography, qualifications, experience, positions, age groups, languages and photo are visible to signed-in clubs. You also appear in the coach directory, which other signed-in coaches can browse — you can switch that off in your profile at any time. Clubs can find you either way.
• Club Profiles: Club name, description, location, facilities
• Job Postings: Position details, club information, requirements

Your CV is not public. It is kept in a closed storage bucket and can only be reached through a time-limited link that we generate for a specific, authorised club. Your phone number and email address are likewise never published openly.

4.2 With Your Consent

When you apply for a job or contact a club, the profile details needed for that purpose and your contact information are shared with them. This step is always triggered by you.

4.3 Service Providers

We work with providers without whom the platform could not run:

• Supabase: Database, authentication and file storage (servers in the EU)
• Firebase Cloud Messaging (Google): Delivery of push notifications. Your device's push token and the message text are transmitted.
• Infomaniak: Hosting of misterlink.ch and delivery of our emails (Switzerland)

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4.5 We Do NOT:

• Sell your personal data to third parties
• Share your data for advertising purposes
• Use your data for purposes other than those described in this policy

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal compliance, dispute resolution, or fraud prevention.

6. Your Rights (GDPR & FADP)

Under Swiss and EU data protection law, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Correction: Update or correct inaccurate data
• Right to Erasure: Request deletion of your account and data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing of your data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us at info@misterlink.ch or use the account deletion feature in the app settings.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Row-level security policies in our database, so each person only sees their own data
• CVs kept in a closed storage bucket, reachable only through time-limited links
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Your data is primarily stored on servers located in the European Union (via Supabase). If data is transferred outside the EU/Switzerland, we ensure appropriate safeguards are in place (such as standard contractual clauses).

9. Children's Privacy

MisterLink is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

10. Cookies

Our mobile app does not use cookies. On misterlink.ch we only set what is required to operate the site — nothing for advertising or audience measurement.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy in the app
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

Your continued use of MisterLink after changes constitutes acceptance of the updated policy.

12. Contact Us

13. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) - www.edoeb.admin.ch
• EU: Your local data protection authority