BBALLLast updated: 6 October 2026 · Version 1.0
This Privacy Policy explains how Otimo AS (company registration number 915790526), Loddefjordveien 14, 5171 Loddefjord, Norway, processes personal data when you use the BBall app and the website bball.com (the “Service”). Otimo AS is the data controller for this data.
1. Contact
Data controller: Otimo AS. For privacy questions contact geir@otimo.no, phone +47 473 20 258.
Otimo AS has not appointed a Data Protection Officer. All privacy questions go to the contact above.
2. What data we process
2.1 Data you provide in the app
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email, phone number, profile | Create and manage your account |
| Team & activity | Team membership, practices, attendance, matches, events | Core app functionality |
| Health & wellbeing | Injuries, sleep, motivation, fatigue | Tracking you record yourself |
| Communication | Chat messages with team / coaches | In-app messaging |
| Shared content (premium) | Documents, images, video in library | Team sharing for premium users |
2.2 Data we collect automatically
- Technical device data: IP address, browser type, time zone, and device/app identifiers.
- Usage data: how you use the app and website, for troubleshooting and improvement.
- Website visit statistics: which pages are viewed, how long and how far down they are read, the referring site, device type, language and an estimated country and city. See section 10.
We do not track you across other apps or websites for advertising.
2.3 Data in the online store
When you buy products in the BBall store we process:
- Order and delivery data: name, address, email, phone, order history.
- Payment data: handled by our payment provider, Stripe. We receive a confirmation and limited transaction details, and we never store full card numbers ourselves.
3. Legal basis (GDPR Art. 6 and 9)
| Processing | Legal basis |
|---|---|
| Create and run your account | Contract (Art. 6(1)(b)) |
| Core features: teams, practices, attendance | Contract (Art. 6(1)(b)) |
| Injury / health data | Explicit consent (Art. 9(2)(a)) |
| Sleep, motivation, fatigue | Consent (Art. 6(1)(a)) |
| Store — orders and payment | Contract (Art. 6(1)(b)) / legal obligation (accounting) |
| Security and troubleshooting | Legitimate interest (Art. 6(1)(f)) |
4. Processors and sharing
We never sell data. We use a few providers that process data on our behalf (processors), under a data processing agreement:
| Provider | Role | Location / transfer |
|---|---|---|
| Google (Firebase Authentication) | Login / authentication | USA — see section 5 |
| Hostinger | Website / store platform | EU (Germany) |
| Amazon Web Services | App backend and file storage | EU (Sweden, Stockholm region) |
| Stripe | Store payments | EU (Ireland); transfers to the USA rely on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework |
5. Transfers outside the EEA
Firebase Authentication runs from data centres in the USA, so login data is processed in the United States. The transfer relies on the EU Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework. Google acts as processor and Otimo AS as controller. A data processing agreement with Google is in place.
6. Retention
- Account data: deleted when you close your account, at the latest 90 days later.
- Wellbeing and injury entries: reset every school year, following the basketball season. You can also delete them, or withdraw your consent, at any time.
- Order and payment data: kept for 5 years to comply with the Norwegian Bookkeeping Act.
- Chat messages: team chats are deleted when the team is deleted. One-to-one chats are deleted when either person deletes their account or the chat content.
7. Children and young people
BBall may be used from the age of 13. The age limit is applied through the age rating and parental controls in the App Store and Google Play. If you are under 13, please do not use the app. Where the age of consent is higher than 13, users below it should use the app only with a guardian’s consent. If we learn that an account belongs to a child under 13, we delete it.
8. Your rights
You have the right to access, correction, deletion, restriction, data portability, and to object to processing. Where processing is based on consent, you can withdraw it at any time. Contact geir@otimo.no to exercise your rights. To delete your account, see our Delete Account page.
You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no, if you believe the processing breaches the rules.
9. Security
We use technical and organisational measures to protect your data, including encryption in transit (HTTPS) and access controls. No transmission over the internet can be guaranteed 100% secure, but we work to protect your data.
10. Cookies
The bball.com website and the BBall Store set no cookies and store nothing in your browser. We do not use advertising or third-party analytics on the website, so no cookie banner is needed. Payments in the store are handled on Stripe’s pages, which follow Stripe’s own cookie policy.
Visit statistics without cookies. We count visits to bball.com with our own measurement, run by Otimo AS on our server in the EU. It uses no cookies and stores nothing on your device. We do not store your IP address: it is used once to filter out bots and to estimate your country and city, which is looked up with the geolocation service ip-api.com. Visits are linked within one day by a one-way code that changes every day, so we cannot follow you over time. The statistics are deleted after 24 months.
11. Changes
We may update this policy. For material changes we will notify you in the app or on the website and update the “last updated” date above.