This page is in English, and the English version is the one that counts.

Privacy

Tupatane Grao helps football teams run match day. This page explains what the app keeps about you, who can see it, and how to have it removed.

Last updated 28 September 2026

Who runs it

Tupatane Grao is run by Jayson Mulwa, in Kenya. For any question or request about your details, email jayson.mulwa@gmail.com.

Each team also has an owner: whoever started it, usually the person who organises the game. The owner, and the admins they choose, add players to the squad and can remove them.

What the app keeps

• Your name, plus your shirt number and positions if an admin adds them.
• Your photo, if an admin adds one.
• Which match days you signed up for, whether you or an admin did it, and whether your payment was ticked off.
• Line-ups, results, and your goals, assists, clean sheets and appearances.
• Your man of the match votes.
• Comments you write on plays.
• If you turn on reminders: your phone’s notification address, which your browser’s push service gives it, and the language the app was in, so reminders arrive in it.

For each team, it also keeps the team’s name, where it plays, how players pay (such as a till number, or a phone number the owner chooses to add), and when the owner agreed to the terms of use.

It never asks players for their phone number, email address, ID number or location.

What it doesn’t do

• It never handles money. You pay your team directly, by M-Pesa or however the team asks, and the app only records that an admin ticked your payment off.
• It has no adverts, sells nothing, and doesn’t follow you around other websites.

Who can see it

Only people signed in to your team: your squad and its admins. Nobody outside the team can see it.

Man of the match votes stay secret while voting is open. Once it closes, everyone sees the totals, but never who voted for whom.

To see that Grao is working, we look at totals across teams, such as how many match days each team runs and how many sign-ups happen in the app. We don’t use them to follow individual players.

Cookies

The app sets a cookie that keeps you signed in on that phone for up to 60 days. If you pick a language (English, Kiswahili or Sheng), the app and this website remember it in one more cookie, for a year; it holds nothing but the language. Your phone also remembers whether you chose light or dark mode. If you turn on reminders, the app adds a small helper to your browser (a service worker) that shows them; it keeps nothing else. There are no advertising or tracking cookies.

Other services

• This website is hosted by Vercel, and the app runs on a rented server. Like any website, both keep technical logs, such as IP addresses, to stay running and secure.
• So that team codes can’t be guessed, the app counts wrong codes from each IP address for 15 minutes. It keeps that count in memory only.
• The website and the app load their font from Google Fonts, so Google sees your IP address when a page opens.
• Reminders travel through your browser’s own push service (Google, Apple, Microsoft or Mozilla). Each message is encrypted for your phone, so the push service can’t read it.

How long it’s kept

Your details stay while you’re in the squad. When an admin removes you, your name and photo are deleted. Past results then show you as “a former player”, so the team’s totals still add up.

Turning reminders off, or being removed from the squad, deletes your phone’s notification address. Comments stay under your name until you or an admin delete them. Photos are kept as files on the same server as the app. The app, photos included, is backed up daily and each backup is kept for 14 days, so removed details leave the backups within about two weeks.

A team’s owner can ask us to delete the whole team. Its details are removed from the app straight away, and from the backups within about two weeks.

Your rights

Under Kenya’s Data Protection Act, you can ask to see, correct or delete what the app keeps about you. Most of it is already in the app: tap your name to see your record. For anything else, ask your team’s owner or email us.

If you think your details have been mishandled, you can complain to the Office of the Data Protection Commissioner.

Children

Players under 18 need a parent’s or guardian’s permission before they, or their photo, go in the app. Team owners are responsible for getting it. If a parent or guardian asks, we’ll remove a child’s details straight away.

Changes

If this page changes in a way that matters, we’ll tell each team’s owner before the change takes effect.