PRIVACY POLICY

ScorePit ("we", "us", "our") is a score prediction app that lets you create private leagues with friends, predict match results and compete on leaderboards. This Privacy Policy explains what personal data we collect, why we collect it and how we use it when you use our iOS application and website (scorepit.app).

If you have questions about this policy, contact us at privacy@scorepit.app.

We collect the minimum data necessary to operate the service.

Account & Profile Data

• Name — provided by Apple or Google at sign-in, or set by you.
• Email address — used to identify your account and send essential notifications. We do not send marketing email without your explicit consent.
• Profile photo — optional. You may upload a profile picture; it is stored securely and visible only to members of your leagues.
• Authentication identifiers — anonymous user IDs from Apple Sign-In or Google Sign-In, used to link your account across devices.

Activity Data

• Score predictions — the match scores you submit before fixtures.
• League membership — which leagues you belong to, your rank and points history.
• App interactions — basic usage analytics (screens visited, errors) to improve stability. This data is anonymised and not linked to your identity.

Data We Do NOT Collect

• Location data
• Contacts or address book
• Payment or financial information
• Health or biometric data
• Browsing history outside ScorePit

We use your data only to:

• Create and manage your ScorePit account.
• Display your predictions, points and league standings to you and your league members.
• Send essential in-app notifications (e.g., match reminders, score updates) — you can disable these in iOS Settings.
• Resolve support requests you contact us about.
• Comply with our legal obligations.

We do not sell, rent or share your personal data with third parties for advertising or marketing purposes. We do not use your data to build advertising profiles.

ScorePit uses the following third-party providers, each bound by their own privacy policies:

• Supabase (supabase.com) — our database and authentication infrastructure. Your account data and predictions are stored on Supabase servers hosted on AWS (EU region).
• Apple Sign-In — Apple may provide us with your name and email (or a private relay address). Apple's privacy policy governs what Apple collects.
• Google Sign-In — Google may provide us with your name and email. Google's privacy policy governs what Google collects.

We do not integrate advertising SDKs, analytics SDKs that track you across apps, or social media tracking pixels.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data (name, email, profile photo, predictions) within 30 days, except where we are required by law to retain certain records.

Anonymised, aggregated league statistics (e.g., final leaderboard positions without personal identifiers) may be retained indefinitely for historical records.

Depending on where you live, you may have the right to:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate or incomplete data (most data can be edited directly in the app).
• Deletion — request deletion of your account and all associated personal data. You can do this in the app under Profile → Settings → Delete Account, or by emailing us.
• Portability — request an export of your data in a machine-readable format.
• Objection — object to our processing of your data where we rely on legitimate interests.

To exercise any of these rights, email privacy@scorepit.app. We will respond within 30 days.

ScorePit is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us immediately and we will delete it.

Users between 13 and 17 should use ScorePit only with parental or guardian consent.

We use industry-standard security measures to protect your data, including TLS encryption in transit and at-rest encryption via Supabase. Access to production data is restricted to authorised personnel only.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take commercially reasonable steps to protect your data.

ScorePit is operated from Portugal. Your data is stored on Supabase infrastructure in the EU. If you access ScorePit from outside the EU, your data may be transferred to and processed in the EU. By using ScorePit, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, sending an in-app notification. Continued use of ScorePit after changes are posted constitutes your acceptance of the updated policy.

For any privacy-related questions, requests or concerns, contact us at:

privacy@scorepit.app