Who we are. SportsPal ("SportsPal," "we," "us," "our") provides a platform to discover, join, and organize sports activities and chat with other users. Contact: sportspalapplication@gmail.com
Important: This Privacy Policy explains how we collect, use, disclose, and protect your information. Some countries give you non-waivable rights. Nothing here limits those.
Quick Summary (plain language)
We collect: the info you provide (profile, messages, photos), device/usage data, optional location, and data from sign-in providers.
We use data to run SportsPal (profiles, discovery, activities, messaging), keep users safe (moderation, anti-abuse), and improve performance/analytics.
Profiles and activity participation are visible to others; your exact real-time location is not publicly posted without your action (we use approximate distances for discovery).
We do not sell your data and do not share it for cross-context behavioral advertising under California law.
You control permissions (location, camera, notifications), and you can access, export, correct, or delete your data.
Messages are not end-to-end encrypted; we may review content for safety and to enforce rules.
Data may be processed outside your country with lawful transfer safeguards.
1) Scope and Definitions
Service: SportsPal mobile apps, sites, APIs, and related features.
Personal data / personal information: Information that identifies or can reasonably identify you.
Sensitive data: Categories defined by law (e.g., precise location, government IDs, financial data, health info, sexual life). We do not require you to provide sensitive data; do not include it in your profile or chats.
Controller: SportsPal acts as controller for your data when you use the Service.
2) Information We Collect
A. Information you provide
Account & Profile: name/username, email, password (hashed), bio, interests, favorite sports, profile photo/video, pronouns (optional).
Content: messages, photos/videos, activity titles/descriptions, comments, reactions, reports, and any attachments you upload.
Preferences: discovery radius, visibility, notifications, language, theme.
Support & Verification: inquiries, appeals, safety reports; if we request, limited ID info to verify identity for safety workflows (optional, where lawful).
B. Information collected automatically
Location (optional): approximate or precise location if you grant permission (to power discovery, distance, and safety/anti-abuse).
Device & diagnostics: device model, OS, app version, language, performance metrics, crash logs.
Identifiers: device/app identifiers, push token, IP address (security, geofencing, anti-abuse).
Usage data: feature use, screens viewed, timestamps, referrers/UTM.
C. Information from others
Sign-in providers: Apple, Google, or others you choose (e.g., name, email, auth token).
Payments (if/when offered): limited billing metadata from processors (we do not store full card numbers).
Safety/anti-abuse services: results from spam/fraud detection, block lists.
We do not intentionally collect special category/sensitive data. Do not post it.
3) How We Use Information (Purposes & Legal Bases)
Service delivery & core features (accounts, profiles, discovery, activities, chat, notifications).
Legal bases: Contract; Legitimate interests (smooth, safe service).
Safety, integrity, and moderation (detecting fraud/spam/abuse; processing reports; enforcing rules; protecting users).
Legal bases: Legitimate interests; Legal obligation; Vital interests (in emergencies).
Location features (showing nearby activities/people; distance estimates; combating spam via geosignals).
Legal bases: Contract; Consent (where required); Legitimate interests.
Analytics & performance (improve reliability, speed, UX; troubleshoot).
Legal bases: Legitimate interests; Consent where required (e.g., in the EEA for certain analytics SDKs).
Communications (transactional and safety notifications; optional marketing with consent or as permitted by law).
Legal bases: Contract; Legitimate interests; Consent (marketing where required).
Compliance & defense (legal obligations, tax/accounting, responding to lawful requests, defending legal claims).
Legal bases: Legal obligation; Legitimate interests.
We do not use automated decision-making that produces legal or similarly significant effects without human involvement. We use ranking/matching signals and safety heuristics to prioritize relevant results and detect abuse.
4) Location Data
Choice: You can grant/deny location permission in system settings at any time.
Use: discovery, distance, safety/anti-abuse, basic analytics.
Display: We generally show approximate distance, not your exact coordinates.
Accuracy: GPS and network signals can be inaccurate; do not rely on the app for safety-critical navigation.
5) Messaging, Media, and Moderation
Messages are not end-to-end encrypted.
We may scan, review, or analyze content (including messages and metadata) using automated tools and/or human review to:
- enforce our Community Rules and Terms;
- detect spam/fraud/malware;
- respond to user reports and legal requests.
Do not share information you consider highly confidential.
6) Sharing and Disclosures
We do not sell personal information and do not share it for cross-context behavioral advertising under California law.
We share the minimum necessary with:
Other users: your public profile and content (e.g., activity participation, profile photo, username, sports). Messages are visible to chat participants.
Service providers (processors): hosting, databases, storage/CDN, push notifications, analytics/crash reporting, moderation/anti-abuse, email, build/OTA update services—each bound by contracts to process data only for us.
Change of control: in a merger, acquisition, or asset transfer, your data may transfer under this policy's protections.
Legal/safety: to comply with law or protect the rights, property, or safety of SportsPal, our users, or the public (e.g., valid court orders, emergency threats).
7) International Data Transfers
Your information may be processed in countries other than your own. Where we transfer personal data from the EEA/UK, we rely on lawful transfer mechanisms (e.g., EU Standard Contractual Clauses and UK addendum) and apply appropriate safeguards.
8) Retention
We keep data only as long as necessary for the purposes above, including security/fraud prevention and legal compliance, then delete or anonymize it.
Typical periods (subject to change for safety/legal holds):
Account & profile: while your account is active and up to 24 months after deletion (to allow recovery and defend against abuse/fraud).
Messages & activities: while your account is active; selected records may persist longer for safety/legal reasons.
Logs/diagnostics: 12–24 months.
Reports & enforcement: retained as long as necessary to protect users and comply with law.
9) Your Choices & Controls
Permissions: manage location, camera, photos, microphone, and notifications in device settings.
Discovery & visibility: adjust profile visibility and discovery radius.
Marketing: opt out in-app or via "unsubscribe."
Blocking & reports: block users and report content anytime.
Data requests: access/export, correct, or delete your data by emailing sportspalapplication@gmail.com from your account email. We may verify identity before acting.
10) Your Rights by Region
EEA & UK (GDPR/UK-GDPR)
You have the right to access, correct, delete, restrict, object, and data portability; to withdraw consent (doesn't affect prior processing); and to lodge a complaint with your data protection authority (e.g., Hellenic DPA in Greece, ICO in the UK).
U.S. States (e.g., CA/CPRA, CO, CT, VA, UT)
You may have rights to know/access, correct, delete, and port personal information, and to opt out of targeted advertising, sale, and certain profiling. We do not "sell" personal information and do not "share" it for cross-context behavioral advertising. You may authorize an agent to make requests. We will verify requests.
Brazil (LGPD)
You may request confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing; and to revoke consent.
India (DPDP Act, 2023)
You have rights to access/correct, erase, grievance redressal, and to nominate another individual in case of incapacity. We provide notices in clear language and honor lawful requests.
How to exercise rights (all regions): Email sportspalapplication@gmail.com. We'll respond within the timelines required by law and may request verification.
11) Children's Privacy
SportsPal is not intended for users under 16 in the EEA/UK (or the age required by your country) and under 13 elsewhere. We do not knowingly collect data from children. If you believe a child is using SportsPal, contact us; we will take appropriate action.
12) Security
We use administrative, technical, and organizational safeguards (encryption in transit, access controls, least-privilege, monitoring). No system is 100% secure. Protect your account with a strong, unique password and secure your devices.
Incident response: We assess and respond to suspected breaches and will notify you and/or regulators as required by law.
13) Cookies, SDKs, and Similar Technologies
We do not use traditional browser cookies inside the mobile app, but we use SDKs and similar technologies for authentication, analytics/crash reporting, performance metrics, push notifications, moderation/anti-abuse, and build/OTA updates. Where required (e.g., EEA), we request consent or offer opt-outs.
14) Third-Party Services and Links
The Service may link to or integrate third-party services (e.g., sign-in providers, maps, app stores). Their privacy practices are governed by their own policies. Use them at your discretion.
15) Law Enforcement and Legal Requests
We review legal requests to ensure they are valid and appropriately scoped. We may preserve or disclose information if we believe it's necessary to comply with law, court orders, or to protect users, our rights, or the public. We may notify affected users where lawful and feasible.
16) Do Not Track; Global Privacy Controls
Some browsers send "Do Not Track" or GPC signals. We do not respond to DNT signals at this time. We honor legally recognized opt-out signals where required by law.
17) Changes to This Policy
We may update this Policy as our practices evolve. We will post the updated version with a new "Last Updated" date and, where appropriate, provide additional notice. Continued use of the Service means you accept the updated Policy.
18) Contact Us
Questions or requests about privacy?
Email: sportspalapplication@gmail.com
19) Regional Annexes
A) California "Notice at Collection"
Categories collected: identifiers (account, device, IP), geolocation (if permitted), internet activity/usage, profile and UGC (photos, messages, activities), inferences for discovery/safety, diagnostics.
Purposes: provide and secure the Service; discovery/matching; communications; analytics/performance; compliance.
Sources: you, your devices, sign-in providers, anti-abuse partners.
Retention: see Section 8.
Sale/Share: We do not sell personal information and do not share it for cross-context behavioral advertising.
Rights & how to exercise: see Section 10.
B) EEA/UK Controller; Transfers
Controller: SportsPal (contact above).
Transfers: EU SCCs/UK addendum and safeguards as per Section 7.
Complaints: contact your local DPA (e.g., Hellenic DPA, ICO).
Representative/DPO (if appointed): We will update this Policy with representative or DPO details when designated.
C) India
Data fiduciary: SportsPal (contact above).
Grievance redressal: same contact.
Nominated person: You can nominate an individual to exercise your rights on your behalf under the DPDP Act.
20) Processors & SDKs (Categories, not exhaustive)
For transparency, we use service providers for:
- Hosting & databases/CDN (store profiles, activities, media).
- Authentication & sign-in (Apple/Google sign-in you select).
- Push notifications (deliver activity/chat updates).
- Crash reporting & performance analytics (app stability).
- Build and over-the-air updates (app delivery and updates).
- Moderation/anti-abuse (spam/fraud detection, content safety).
We bind processors to confidentiality and data-protection obligations. A detailed vendor list is available upon request and will be updated as our stack evolves.