Privacy Policy

1. Introduction

ScoreBeeper GmbH ("ScoreBeeper", "we", "us", or "our") operates the ScoreBeeper mobile applications and website (scorebeeper.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect and process the following categories of personal data:

Account Information

• Email address (required for account creation)
• Nickname (optional display name)

Device & Technical Data

• Push notification tokens (Firebase Cloud Messaging, Apple Push Notification service)
• Device identifiers
• IP addresses (stored in security logs)
• Browser/app user agent strings
• Platform type (iOS, Android, Web)

User Preferences & Activity

• Favorite teams, players, fixtures, and competitions
• Notification preferences
• Group memberships (Fan Groups)
• Match predictions

Analytics Data

• App install events
• Daily active usage metrics
• Authentication audit logs (for security purposes)

3. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with our services, including account management, favorites, and notifications.
• Legitimate Interest: Processing for security purposes, fraud prevention, and service improvement, where our interests do not override your rights.
• Consent: Where required, we obtain your explicit consent for specific processing activities, such as marketing communications.

4. How We Use Your Data

We use the information we collect to:

• Provide and maintain our score tracking service
• Send push notifications for live scores, match updates, and alerts
• Personalize your experience with favorites and preferences
• Enable community features (Fan Groups, predictions)
• Authenticate your account and maintain security
• Analyze usage patterns to improve our services
• Respond to your inquiries and support requests

5. Data Sharing & Third Parties

We work with the following categories of service providers:

Infrastructure & Hosting

• Fly.io (application hosting, EU and US regions)

Push Notifications

• Firebase Cloud Messaging (Google) for Android notifications
• Apple Push Notification service for iOS notifications

Advertising (Mobile Apps)

• Google AdMob for displaying advertisements
• Google User Messaging Platform (UMP) for GDPR consent management

In our mobile apps, we display advertisements through Google AdMob. In regions where GDPR applies, we use Google's User Messaging Platform to collect your consent preferences before serving personalized ads. You can manage your ad preferences through the consent dialog or in your device settings.

We do not sell your personal data. We only share data with third parties as necessary to provide our services or as required by law.

6. Data Retention

We retain your personal data only for as long as necessary:

• Account data: Retained until you request deletion
• Security/audit logs: 90 days
• Analytics data: 12 months (aggregated)
• Push tokens: Until unregistered or account deletion

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (where applicable)

You also have the right to lodge a complaint with a supervisory authority, such as the German Federal Commissioner for Data Protection (BfDI).

8. Data Deletion

To request deletion of your personal data, please email us at contact@scorebeeper.com. We will process your request within 30 days and confirm once your data has been deleted.

Please note that we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention records).

9. Cookies & Tracking

Our website and apps use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication and basic functionality
• Session Tokens: Maintain your logged-in state

We do not use third-party advertising cookies or sell data to advertisers.

10. Children's Privacy

ScoreBeeper is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

11. International Data Transfers

Your data may be processed in servers located in the European Union and the United States (via Fly.io hosting). Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure authentication mechanisms (magic link/passwordless), and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or in-app notification.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: