Who we are
SportsMetrics (“SportsMetrics”, “we”, “us”) provides a mobile app that presents statistical analysis of sports matches, and the website at which this policy is published. The operator of the service is [Operator legal name and address].
This policy explains what personal data we collect, why, who we share it with, and the choices you have. For any privacy question, contact us at support@sportsmetrics.app.
What we collect
Information you provide through sign-in
You sign in with Apple or Google. We never receive your password. Depending on what your provider shares, we receive and store:
- your name or display name, email address (which may be a private relay address if you use “Hide My Email” with Apple), and profile photo URL;
- a unique identifier assigned to you by Apple or Google.
Information created when you use the app
- Wallet and purchases: your token balance, a record of every change to it, which game analyses you unlocked and when, your daily free pick usage, and purchase records (the pack, price, currency, store, and the store’s transaction ID). We do not receive or store your payment card details; payments are processed by Apple or Google.
- Preferences: your time zone, so that today’s games and your daily free pick reset at the right moment.
Technical information
- When you sign in, we store a hashed session token together with the device’s user-agent string and IP address, for security and to detect misuse.
- Our servers keep standard operational logs (for example request times, error details and IP address). We take care not to log secrets such as tokens.
We do not collect your precise location, contacts, photos, or microphone and camera data, and we do not use advertising identifiers or third-party advertising SDKs.
How we use it
| Purpose | Data | Legal basis (EEA/UK) |
|---|---|---|
| Create and secure your account | Sign-in profile, provider ID, session tokens, IP, user agent | Contract; legitimate interests (security) |
| Provide the service: unlocks, daily pick, wallet | Wallet, ledger, unlocks, time zone | Contract |
| Process and verify purchases, prevent fraud | Purchase records, store transaction IDs | Contract; legitimate interests; legal obligation |
| Keep the service reliable and abuse-free | Operational logs, IP address | Legitimate interests |
| Respond to your requests | Email and the content of your message | Contract; legitimate interests |
We do not sell your personal data, and we do not use it for advertising or profiling that has legal or similarly significant effects.
International transfers
Our providers may process data in countries other than your own, including outside the European Economic Area and the United Kingdom. Where we transfer personal data from those regions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Account data (profile, wallet, unlocks): for as long as your account exists.
- Session tokens: refresh tokens expire after 30 days and are rotated on each use; expired and revoked records are removed over time.
- Purchase and ledger records: deleted with your account, except where we must keep limited transaction records to meet tax, accounting or legal obligations.
- Logs: kept for a limited period for security and debugging, then deleted or anonymised.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data-protection authority. California residents have similar rights under the CCPA/CPRA, including the right to know and to delete; we do not “sell” or “share” personal information as those terms are defined.
Deleting your account. You can ask us to delete your account at any time by emailing support@sportsmetrics.app from the address on your account. Deletion removes your profile, wallet, unlocks and sessions. Unused tokens are forfeited and cannot be refunded after deletion. We will respond to verified requests within 30 days.
You can also stop Apple or Google sign-in from sharing data with us by revoking SportsMetrics’ access in your Apple ID or Google Account settings.
Security
We use encryption in transit, short-lived access tokens, hashed and rotating refresh tokens, rate limiting, and row-level access controls on our database. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.
Children
SportsMetrics is intended for people aged 18 or over. We do not knowingly collect personal data from anyone younger. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you in the app. Continued use after a change means you accept the updated policy.
Contact
Questions or requests about your data: support@sportsmetrics.app.
Operator: [Operator legal name and address].