iCat Studios
iCat Studios

Potentials: FC26 Career Mode

Privacy Policy

Your privacy matters to us

Back to all policies

This document is provided in multiple languages for your convenience. In case of any conflict or difference between language versions, the English text shall prevail.

Last updated: July 24, 2026

Application: Potentials: FC26 Career Mode

Developer: iCat Studios

At iCat Studios ("we", "us", "our"), we respect the privacy of users ("you", "your") of the Potentials: FC26 Career Mode mobile application ("the App"). This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and your rights when using our App.

By creating an account or using the App, you agree to this Privacy Policy.

1. Data We Collect

1.1 Account Information

Potentials now offers optional user accounts. When you sign in with Apple or Google, we receive the following information from Apple or Google:

  • Email address (Apple provides a relay email if you select "Hide My Email")
  • First name and last name (Apple provides this only on first sign-in; Google provides it on every sign-in)
  • Provider User ID: a unique identifier used to recognize your account

Sign-in with Apple is available on iOS. Sign-in with Google is available on both iOS and Android. You can browse most of the App's data features without an account, but an account is required to post comments and use the social features.

1.2 Profile Information

Information you set on your profile in the App:

  • Username (shown to other users next to your comments and replies)
  • Country
  • Favorite club
  • Favorite squad
  • Avatar (optional)
  • Pro subscription status: whether you have an active Pro membership and its expiration date

1.3 User-Generated Content (Comments and Replies)

The App lets you post comments on footballers and clubs and reply to other users. Please note:

  • Your comments and replies are public and can be seen by all other users of the App.
  • They are stored on our servers and displayed together with your username and avatar.
  • Your reports about other users' comments are stored so our moderation team can review them.

1.4 Cloud Sync Data

When you have an account, the following data is stored on our servers and tied to your account so it syncs across your devices:

  • Your favorite players and clubs
  • Your saved squads
  • Your app settings and filter preferences

1.5 Device and App Information

  • Device ID (for anonymous session management)
  • Operating system (iOS/Android version)
  • App version and platform (version code, version name, and whether you are on iOS or Android): used to provide version-specific support and identify compatibility issues
  • Push notification token: a unique token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) so we can deliver reply notifications and important announcements. You can disable push notifications at any time from your device settings.

1.6 Advertising Identifier

The App may collect your Advertising Identifier (IDFA on iOS, GAID/Advertising ID on Android) only with your consent, for advertising through Google AdMob:

  • On iOS, you will see an App Tracking Transparency (ATT) prompt. If you choose "Ask App Not to Track," the IDFA is not used for tracking and you will receive non-personalized ads.
  • On Android, the GAID is used unless you opt out via Settings → Google → Ads → Delete advertising ID.
  • When collected, the Advertising Identifier is shared with Google AdMob for ad delivery, attribution, and frequency capping.

1.7 Analytics and Crash Data

  • We use Microsoft App Center to collect anonymous usage statistics and crash reports, so we can monitor stability and improve the App. Crash reports are filtered to exclude personally identifiable information.

1.8 Automatically Collected Data

  • IP address: used for security purposes, including rate limiting on authentication endpoints and abuse prevention. We do not use IP addresses to build advertising profiles.

2. How We Use Your Data

We use the collected data for the following purposes:

  • Account creation and management: To let you sign in and use the App's account features
  • Community features: To publish your comments and replies and show them to other users
  • Trust and safety: To process reports and blocks, and to suspend or ban accounts that violate our Terms of Use
  • Cloud sync: To keep your favorites, squads, settings, and filters available across your devices
  • Pro subscription management: To verify your subscription status and grant access to Pro features
  • Communication: To send reply notifications and important announcements about the App
  • Account security: To prevent fraudulent accounts and rate-limit suspicious activity
  • Advertising: To display advertisements within the App and measure their performance: see section 8 for details
  • Analytics and improvement: To analyze usage statistics anonymously and improve the App

3. Who We Share Your Data With

Potentials does not sell or rent your personal data to third parties. We share data only with the trusted service providers listed below, and only to the extent necessary to operate the App.

3.1 Service Providers

These service providers only process data on our behalf and under our instructions.

3.2 Legal Requirements

Your data may be shared with authorities in response to a court order, legal investigation, or legal obligation.

3.3 Information Visible to Other Users

The following information is visible to other users:

  • Your username and avatar
  • Your comments and replies (public)

The following information is never shown to other users:

  • Your email address
  • Your real first and last name
  • Your device information
  • Your advertising identifier
  • Your subscription expiration date

4. Where and How Long We Store Your Data

4.1 Data Storage Location

All user data is stored in Amazon Web Services (AWS) Frankfurt (eu-central-1) data centers within the European Union.

4.2 Retention Period

  • Active accounts: Your data is retained as long as your account remains active.
  • Inactive accounts: Accounts that have not signed in for 2 years may be automatically deleted.
  • Deleted accounts: When you delete your account, your personal data is permanently deleted within 30 days (including backups). Comments you posted may be retained in an anonymized form (detached from your identity) to preserve the integrity of conversations.
  • Anonymous statistics: Anonymous aggregate statistics may be retained after deletion (contains no personal information).

5. Your Rights

Under GDPR (Europe) and KVKK (Turkey), you have the following rights:

  • Right of access: Learn what data we process about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): Request deletion of your data
  • Right to restriction of processing: Limit how your data is processed
  • Right to data portability: Receive your data in a machine-readable format
  • Right to object: Object to data processing
  • Right to withdraw consent (advertising tracking): You may revoke ATT permission on iOS via Settings → Privacy & Security → Tracking, or reset/delete your advertising ID on Android at any time

Because our servers are located in the European Union (AWS Frankfurt), your data may be processed outside your home country. These international transfers meet the security standards required by GDPR and KVKK.

How to Delete Your Account

You can delete your account in three ways:

6. Children's Privacy

Potentials is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will delete that data as soon as possible.

7. Data Security

We take industry-standard security measures to protect your data:

  • HTTPS encryption: All network traffic is encrypted using SSL/TLS
  • Passwordless authentication: We do not store passwords; all sign-ins are handled via Apple and Google
  • JWT-based session management: Sessions are managed with secure, temporary tokens
  • Rate limiting: Authentication and sensitive endpoints are rate-limited per IP to prevent brute-force attacks and abuse
  • Access control: Access to the database is restricted to authorized system accounts only
  • Regular security updates: Our systems are kept up to date

However, please keep in mind that no method of transmission over the internet is 100% secure.

8. Advertising and Tracking

8.1 In-App Advertising

Potentials is partly supported by advertising through Google AdMob. Pro members enjoy an ad-free experience.

8.2 App Tracking Transparency (iOS)

On iOS 14.5 and later, Apple requires us to ask your permission before tracking you across apps and websites. The first time you launch the App you will see an App Tracking Transparency prompt:

  • If you select "Allow," your IDFA may be used for personalized ads, attribution, and frequency capping.
  • If you select "Ask App Not to Track," your IDFA is not used for tracking and the ads you see will be non-personalized.

You can change your decision at any time in Settings → Privacy & Security → Tracking.

8.3 Android Advertising ID

On Android, your Google Advertising ID (GAID) may be used by AdMob. You can reset or delete your advertising ID at any time via Settings → Google → Ads. After deletion, ads will be non-personalized.

8.4 Cookies

The Potentials mobile app does not use browser cookies. Tracking on mobile is governed by the platform-level mechanisms described above, not cookies.

9. Third-Party Content and Trademarks

Potentials is an independent companion app for football career-mode players. The App displays player names, club names, league names, ratings, and similar identifiers to help users browse and analyze football data. These names and any associated trademarks are the property of their respective owners - including but not limited to EA Sports, FIFA, individual football clubs, leagues, national federations, and the players themselves.

Potentials is not affiliated with, endorsed by, sponsored by, or in any way officially connected to EA Sports, the EA SPORTS FC or FIFA brands, or any club, league, federation, or organization referenced in the App. All third-party names and trademarks are used solely for identification and descriptive purposes under the principle of nominative fair use.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect once they are published on this page, and the "Last updated" date at the top will be refreshed. Significant changes will be announced via in-app notifications.

11. Contact

For questions about this Privacy Policy or data processing requests:

Requests under GDPR or KVKK can be sent to the email address above. We will respond within 30 days.

© 2026 iCat Studios. All rights reserved.