Privacy Policy

1. Introduction

Scoorz ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our Service, we collect:

• Account Information: Email address, display name, password (encrypted)
• Profile Information: Profile photo, preferences, favorite teams/leagues/sports
• Payment Information: Processed securely by Stripe (we do not store card details)
• Age Verification: Date of birth or government ID (for prediction features)
• Communication Data: Support inquiries, feedback, and correspondence

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, click patterns
• Device Information: IP address, browser type, device type, operating system
• Location Data: Approximate location based on IP address
• Cookies: Session cookies, preference cookies, analytics cookies
• Log Data: Access times, error logs, performance data

2.3 Third-Party Data

We receive data from third-party services:

• Authentication Providers: Google, Apple (name, email, profile photo)
• Payment Processor: Stripe (subscription status, payment history)
• Analytics Services: Usage patterns and demographics

3. How We Use Your Information

We use your information to:

3.1 Provide and Improve the Service

• Create and manage your account
• Process subscriptions and payments
• Generate AI predictions tailored to your interests
• Display live scores and sports data
• Personalize your experience based on favorite teams/leagues
• Improve AI model accuracy and performance
• Analyze usage patterns to enhance features

3.2 Communicate with You

• Send transactional emails (account creation, password reset, payment confirmations)
• Notify you about match updates, prediction results, and favorite team scores
• Send promotional emails about new features or offers (with opt-out option)
• Respond to support inquiries and feedback

3.3 Ensure Safety and Compliance

• Verify age for prediction-related features
• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations and regulatory requirements

3.4 Marketing and Analytics

• Analyze trends and user behavior to improve the Service
• Measure effectiveness of marketing campaigns
• Create aggregated, anonymized statistics

4. How We Share Your Information

We do NOT sell your personal information. We share your data only in these limited circumstances:

4.1 Service Providers

We share data with trusted third-party providers:

• Firebase (Google): Database, authentication, hosting
• Stripe: Payment processing
• Anthropic: AI prediction generation (anonymized match data only)
• API-Sports: Sports data provider
• Email Service Provider: Transactional and notification emails

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law:

• To comply with legal processes (subpoenas, court orders)
• To respond to government requests
• To enforce our Terms of Service
• To protect our rights, safety, or property
• To investigate fraud or security incidents

4.3 Business Transfers

If Scoorz is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated Data

We may share anonymized, aggregated data (e.g., "70% of users prefer soccer predictions") with partners, researchers, or the public. This data cannot be used to identify you.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 30 days; some data retained for legal/financial reasons (e.g., payment records for 7 years)
• Prediction History: Retained to calculate accuracy; anonymized after 2 years
• Support Inquiries: Retained for 3 years
• Analytics Data: Aggregated data retained indefinitely

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Authentication: Password hashing with bcrypt; OAuth 2.0 for social logins
• Access Controls: Role-based access; employees access data only when necessary
• Firestore Security Rules: Database-level access restrictions
• Regular Audits: Security reviews and vulnerability assessments
• Backup Systems: Regular automated backups

Note: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

Right to Access: Request a copy of all personal data we hold about you.

Data Portability: Download your data in a structured, machine-readable format (JSON or CSV).

7.2 Correction and Update

Right to Rectification: Update or correct inaccurate information through your profile settings or by contacting support.

7.3 Deletion

Right to Erasure: Request deletion of your account and personal data. We will delete data within 30 days, except where we must retain it for legal reasons.

7.4 Restriction and Objection

Right to Restrict Processing: Request that we limit how we use your data.

Right to Object: Object to processing of your data for marketing purposes.

7.5 Withdraw Consent

Right to Withdraw: Withdraw consent for optional data collection at any time (e.g., opt out of marketing emails).

7.6 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@scoorz.com or use the data export/deletion tools in your account settings. We will respond within 30 days.

8. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Data Controller: Scoorz is the data controller for your personal information
• Data Transfers: Data may be transferred outside the EEA to the US (Firebase, Stripe, Anthropic). We use standard contractual clauses and ensure adequate protection
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority

9. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We do NOT sell your personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise CCPA rights, contact privacy@scoorz.com or call 1-XXX-XXX-XXXX.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings (theme, favorite teams)
• Analytics Cookies: Track usage patterns to improve the Service
• Marketing Cookies: Measure ad campaign effectiveness

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

11. Children's Privacy

Scoorz is NOT intended for users under 18 (or 21 in some jurisdictions). We do not knowingly collect personal information from children.

If we discover that a child has provided personal information, we will delete it immediately. If you believe a child has provided information, contact us at privacy@scoorz.com.

12. International Data Transfers

Scoorz operates globally. Your information may be transferred to and processed in countries other than your own, including the United States.

We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EEA transfers
• Privacy Shield Framework compliance (where applicable)
• Security measures equivalent to or exceeding EU standards

13. Third-Party Links

Our Service may contain links to third-party websites (bookmakers, social media, etc.). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on the Service
• Updated "Last Updated" date at the top of this page

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data, contact us: