← Back to ScoreZap

Privacy Policy

Last updated: February 27, 2026

1. Information We Collect

ScoreZap ("we", "our", "us") collects the following information when you use our app:

• Account Information: Name, email address when you register.
• Authentication Data: Login credentials (passwords are hashed and never stored in plain text). If you sign in with Google or Apple, we receive your name and email from those providers.
• Team & Game Data: Teams you create or follow, games, scores, and events you record.
• Device Information: Push notification tokens for delivering notifications. Device platform (iOS/Android/Web).
• Usage Data: App interactions for improving the service (no third-party analytics trackers are used).

2. How We Use Your Information

We use your information to:

• Provide and operate the ScoreZap service
• Send push notifications about games and team updates (configurable)
• Authenticate your identity and secure your account
• Improve the app experience
• Communicate service updates

3. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure). We implement:

• Row Level Security (RLS) on all database tables
• JWT-based authentication
• Email verification for account activation
• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest

4. Third-Party Services

We use the following third-party services:

• Supabase: Database, authentication, and real-time features (supabase.com)
• Google Sign-In: Optional OAuth authentication (policies.google.com)
• Apple Sign-In: Optional OAuth authentication (apple.com/legal/privacy)
• Expo Push Notifications: Delivering push notifications (expo.dev)

We do not sell your personal data to third parties.

5. Data Retention

• Active accounts: Data retained while your account is active.
• Deleted accounts: When you delete your account, your personal data is purged immediately. This includes your profile, team memberships, push tokens, and notification preferences.
• Game data: Scoring records for teams you owned are anonymised and retained for historical reference.
• Notification logs: Retained for operational purposes and deleted when associated games are removed.

6. Your Rights

You have the right to:

• Access: View all your personal data within the app.
• Correction: Update your profile information at any time.
• Deletion: Delete your account and all associated data from Profile > Edit Profile > Delete Account.
• Notification Control: Manage push notification preferences per team or disable all notifications.

For users in the EU/EEA, these rights are provided under the General Data Protection Regulation (GDPR). For users in Australia, these rights are provided under the Australian Privacy Principles (APPs).

7. Children's Privacy

ScoreZap is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your data, please contact us through the app's Contact Us form or email us at privacy@scorezap.app.