Legal
App privacy notice
Last updated 29 October 2026 (error reports added)
In short: you can use Midweeker without an account, and then your trips stay on your phone. If you create an account, we keep your email address, your trips and your preferences so they're on every device. Booking references are encrypted. We don't sell your data, show adverts or track you. You can delete your account, and everything in it, from the Account screen at any time.
Who we are
Midweeker is an independent business based in the United Kingdom (“Midweeker”, “we”, “us”), and the controller of the personal data described here. Contact: hello@midweeker.com. This notice covers the Midweeker app. The website has its own privacy notice.
Without an account
The club you follow, your home airport, the trips you plan, your checklists and your bookings are saved only in your browser's storage on your device. We don't receive them. Clearing your browser data, or uninstalling the app, deletes them.
With an account
- Account: your email address and password. The password is stored only as a secure hash, which we can't read.
- Preferences: your home airport and the club you follow.
- Trips: the match, destination, dates, ticket status and the seat details and notes you add.
- Bookings: the flights, trains, hotels and other travel you add. Booking references are encrypted in our database.
We use these only to run your account and show your trips on your devices. Our lawful basis is the contract between us: you ask us to keep them. We keep them until you delete them or your account.
Kick-off alerts
If you turn on kick-off alerts, your browser gives us a push address and keys for your device, which we store with your account. We use them only to send a notification when a kick-off is confirmed or moved for a match you have a trip for, or an away match of your club. Our lawful basis is your consent. Turn alerts off in Account, or in your phone's settings, and we stop. We delete the push address when you turn alerts off, when your device's push service says it's no longer valid, or when you delete your account.
Error reports
When something goes wrong in the app, it sends us a short error report so we can fix it: the error message, which part of the app it happened in, the app version and the type of browser (for example “Chrome Android”). Reports never include your name, email address, trips or anything you've typed, and they can't be linked to you. We keep them for 30 days. Our lawful basis is our legitimate interest in keeping the app working.
Shared trip links
When you share a trip, the plan you choose to include is written into the link itself. We don't store it. Anyone with the link can see what's in it. Booking references, seats and booking notes are never included.
Football data and links to other sites
Fixtures, tables and guides come from our own database, and loading them doesn't identify you. Buttons for flights, hotels, routes and tickets open other companies' websites, such as Skyscanner, Booking.com, Rome2Rio and club ticket pages. Their privacy policies apply there. Some of these may be affiliate links: if you book, we may earn a commission. The partner then learns that you came from Midweeker, but not who you are.
Who processes data for us
- Supabase stores accounts, trips and alert subscriptions, and handles sign-in and our server functions. See Supabase's privacy policy.
- Cloudflare hosts the app and protects it from attacks, and briefly processes your IP address to do so. See Cloudflare's privacy policy.
- Your device's push service (Apple, Google or Mozilla) delivers alerts, if you turn them on.
They act on our behalf. Some may process data outside the UK, protected by the safeguards UK law requires, such as the UK–US data bridge or the UK's approved contract terms. We don't sell personal data or share it for advertising.
Deleting your account
Go to Trips, then Account, then Delete my account. This immediately and permanently deletes your account, preferences, trips, bookings and alert subscriptions. Trips saved only on your device stay there until you clear them. If you can't sign in, email hello@midweeker.com from your account's email address and we'll delete it for you.
Your rights
Under UK data protection law you can ask to see, correct, delete or receive a copy of your personal data, and to restrict or object to how we use it. Most of this you can do in the app. For anything else, email hello@midweeker.com and we'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
Accounts are for people aged 16 or over.
Security
The app is served only over encrypted connections. Each account's data is protected by database rules that let only that account read or change it, and booking references are encrypted.
Changes
We'll update this notice when the app changes, and tell you in the app about any important change. The date at the top shows the latest version.