Privacy
What Ficha collects, what happens to it, and what you can do about it. Nothing here is a promise the product does not keep.
Last changed 21 September 2026.
Who
Ficha is run by the person you can reach at hello@ficha.ownsome.app.
What is collected
- An email address and a password. The password is held by the sign-in service and never seen by Ficha.
- Your name and email, if you leave them on the waitlist. We email that address once, when Ficha opens, and for nothing else.
- The files you upload — a league export, or figures you paste or type — the decks made from them, the photographs you add and the documents you export.
- A browser session, so you stay signed in; and server logs — the address a request came from and the path it asked for — kept for a short time to keep the service running.
Nothing else. No advertising trackers, no analytics from a third party, no profile of you built from anything but what you gave.
What happens to an uploaded file
It is read so that decks can be built from it, and stored so that they can be built again. The figures in it are your own data: they are not sold, not shared, and not used for anything but the documents you ask Ficha to make. Nobody at Ficha reads your files except to fix a fault you have reported, and then only that file.
A file stays until you delete the deck that uses it or delete your account. Deleting your account deletes it at once.
Where it is kept
Your files and decks are stored with Supabase, in the United Kingdom and the European Union, on servers Ficha rents. The application runs on Fly.io in London. Email is sent through Resend from an address on this domain. When payments exist they go through Stripe: Stripe holds your card, and Ficha never sees a card number.
Cookies
A session cookie keeps you signed in. The waitlist sets none. That is all.
Deleting your account
From the account screen, one button: Delete my account. It deletes your uploaded files, every deck and export made from them, your photographs and your membership, at once and for good. A sign-in that Ficha created is deleted with it; a sign-in you also use for another product on the same platform is kept, because it is not only Ficha's to delete.
Your rights
You can ask for a copy of what Ficha holds about you, have it corrected, or have it deleted, at any time: write to hello@ficha.ownsome.app from the address on your account. Where the law where you live gives you further rights over your data, they apply.
Changes
If this page changes in a way that matters, everyone with an account is emailed before it takes effect.