Privacy Policy

ScoreZella ("we", "us", "our") is a free football-scores app. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

If you have questions, contact us at giorian@basecape.com.

1. Who we are

ScoreZella is operated by the developer of the ScoreZella mobile app, available on the Apple App Store and Google Play. The app displays football fixtures, results, standings, news and highlights, and sends optional goal alerts to your device. We are the data controller for the personal information described below.

2. What we collect

We try to collect as little as possible.

2.1 Account information (only if you choose to sign up)

• Phone number — used as your account identifier. We send a one-time verification code via SMS during sign-up so we can confirm you own the number.
• Password (hashed) — never stored in plain text; only a one-way hash is kept.
• Account creation date, last sign-in date — basic security and account-management metadata.

You can use the app without creating an account. Without sign-in, your favourites are stored only on your device.

2.2 Preferences (only if you sign in)

• Favourite teams, leagues, players and managers (numeric IDs only).
• Your preferred timezone for fixture kick-off times.
• Data-saver mode setting.

2.3 Device & technical data

• Push-notification token — an opaque identifier issued by Apple Push Notification Service (or Google Firebase Cloud Messaging on Android). Stored only if you have at least one favourite team.
• IP address — automatically logged by our auth provider (Supabase) on sign-in for abuse prevention. Not used for cross-app tracking.
• App version, OS version, device model — only at the level reported by Apple's standard crash and diagnostic services.
• Network type (Wi-Fi vs cellular) — read on-device, never sent to our servers. Used by the optional Auto data-usage mode to pick the Unlimited preset on Wi-Fi and the Saver preset on cellular so the app doesn't burn through metered data plans without your consent.

2.4 What we do NOT collect

We do not collect or use your contacts, photos, microphone, camera, location, calendar, health data, advertising identifiers (IDFA / AAID), cross-app browsing history, or any biometric data. The app shows no ads.

3. How we use it

• Provide the service — display fixtures, results, tables, news and highlights, and keep you signed in.
• Send goal alerts — only if you opt in to push notifications and pick a favourite team.
• Authenticate you — verify your phone number, sign you in on subsequent visits.
• Improve the app — diagnose crashes and performance issues via aggregate, anonymised data only.

We do not sell your data, share it for advertising, or use it for any purpose other than running ScoreZella.

4. Who we share it with

We rely on a small number of trusted service providers. They process your data on our behalf, only for the purposes listed:

We do not share your data with advertisers, brokers, or any party not listed above.

5. International data transfers

Supabase is operated by Supabase Inc. (United States) and processes data in US-based data centres. Twilio is also US-based. By using ScoreZella you consent to your data being transferred to and processed in the United States.

6. How long we keep it

• Account data — until you delete your account.
• Push tokens — until you remove all favourite teams or sign out.
• Authentication logs — retained by Supabase per their standard retention policy (typically 30 days).
• SMS codes — discarded immediately after the verification window closes (typically 60 seconds).

7. Your rights

• Access your data — most of it is visible inside the app. For a machine-readable export, email giorian@basecape.com.
• Correct your data — change favourites, timezone, or password inside the app at any time.
• Delete your account — open the app → Profile → Account → Delete account. Permanently removes your account row plus all favourites and preferences from our servers. The action is irreversible.
• Sign out — from Profile → Sign out. Local favourites stay on the device.
• Withdraw consent for push notifications — turn them off in iOS Settings → ScoreZella → Notifications (or your device's equivalent).
• Lodge a complaint with your local data-protection authority if you believe we have mishandled your data.

8. Children

ScoreZella is rated 4+ in the App Store but is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact giorian@basecape.com and we will delete it.

9. Security

• All network traffic is encrypted with HTTPS / TLS.
• Passwords are hashed using bcrypt by Supabase; we never see them in plain text.
• Row-Level Security policies on our database ensure each user can only access their own rows.
• Sensitive API keys (SportMonks, YouTube, Twilio) are kept server-side and never shipped with the mobile app.

No service is 100% secure. If we experience a breach affecting your personal data, we will notify you within 72 hours of becoming aware.

10. Changes to this policy

We may update this policy occasionally. If we make material changes, we will revise the "Last updated" date at the top and, where appropriate, notify you inside the app or by email. Continued use of the app after the update means you accept the updated policy.

11. Contact us

For any privacy-related question, request, or complaint:
Email: giorian@basecape.com
We aim to respond within 30 days.