PRIVACY POLICY

Who we are and what this policy covers

This Privacy Policy applies to the Matchday Call mobile application, the website at matchdaycall.club, and related services (together, the “Service”).

CALARYS LTD, trading as Matchday Call, is the developer and controller responsible for the personal information described in this policy. References to “Matchday Call”, “we”, “us”, or “our” mean CALARYS LTD.

Information we collect

Account and contact information

When you create or use an account, we process an internal user identifier and authentication information. If you sign in by email, we process your email address and short-lived verification information. If you use Sign in with Apple, Apple provides an account identifier and may provide your name and email address, depending on the choices you make with Apple. Apple may provide a private relay address when you choose Hide My Email.

Profile and user content

We process information you choose to add to your profile, such as a display name, biography, supported club, home competition, season preferences, and profile image. We also process content and choices you submit through app features, including lineups, formations, substitutions, tactical calls, structured press-room responses, match reviews, Round XI selections, follows, timestamps, and related records.

Matchday activity and product interaction

We process how you use relevant app features—such as screens viewed, onboarding progress, feature selections, saved lineups, submitted calls, reviews, rankings, and performance milestones—to provide the requested experience, calculate results, maintain competition integrity, troubleshoot failures, and understand how the product is used.

Device, notification, and Live Activity information

We process device and app identifiers needed to maintain a session, prevent duplicate or abusive activity, associate actions with your account, and deliver notifications. If you enable notifications or Live Activities, this includes Apple Push Notification service (APNs) device tokens, push-to-start tokens, Live Activity channel information, delivery environment, app version, and notification preferences. These tokens are technical delivery identifiers; they are not used for advertising.

Analytics, crash, performance, and diagnostic data

The iOS app uses Google Firebase Analytics, Crashlytics, and Performance Monitoring. These services may process an app-instance or device identifier, an opaque Matchday Call user identifier, product-interaction events, screen context, app and device information, crash reports, performance measurements, and other technical diagnostics.

We do not send your email address, display name, biography, profile image, verification code, authentication token, complete request body, or raw error text to Firebase Analytics. Crashlytics does not receive your Matchday Call user identifier. You can disable analytics collection in the app’s privacy settings; essential account, security, notification, and service operations are separate from optional analytics.

Website, support, and security information

If you contact us, we receive your email address, message, and anything you choose to include. Our website, API, hosting, and security providers may process IP address, browser or device type, request time, route, response status, and security logs to deliver, monitor, and protect the Service.

Information we do not request

How and why we use information

We use information only where it is necessary to provide the Service, pursue a legitimate interest that does not override your rights, comply with law, or act with your consent where consent is required. In particular, we use it to:

• create and secure guest or registered accounts, authenticate users, and maintain sessions;
• provide profiles, matchday calls, lineups, reviews, rankings, badges, Round XI, notifications, Live Activities, and sharing features;
• save and synchronise your choices across supported sessions and calculate results;
• measure product interaction, diagnose crashes and performance problems, and improve reliability and usability;
• prevent fraud, abuse, automated manipulation, and threats to users or the Service;
• respond to support, privacy, security, and legal requests.

We do not use your information for behavioural advertising or to build a profile for tracking you across unrelated services.

When information is shared

We do not sell personal information and do not share it with advertising networks or data brokers. We disclose or make information available only as needed in these circumstances:

• Service providers: Apple supports authentication, push notifications, Live Activities, and system sharing; Google Firebase supports analytics, crash reporting, and performance monitoring; our email, hosting, storage, security, and infrastructure providers process the minimum information needed to provide their services;
• Other users and the public: profile details, rankings, matchday records, or User Content may be visible when a feature is designed to publish or compare them. The app indicates when information will be shared;
• At your direction: when you choose an iOS share-sheet destination, the destination receives the content under its own privacy policy;
• Legal and safety: where reasonably necessary to comply with law or legal process, protect rights and safety, investigate fraud or abuse, or secure the Service;
• Business changes: in a financing, merger, reorganisation, acquisition, or transfer of assets, subject to appropriate notice and continued protection.

Providers may process information in countries other than your own. Where required, we use contractual or other recognised safeguards for international transfers.

Retention and deletion

We retain account, profile, matchday, and user-content information while your account is active and for only as long afterward as reasonably necessary for the purposes described above. Verification codes are short-lived. Operational request logs are normally retained for up to 30 days. Firebase Analytics event and user data are configured for retention of up to 14 months. Provider backups and security records may remain for a limited additional period until safely overwritten or no longer needed.

Delete your account

The in-app deletion control marks the account deleted, revokes active sessions, removes authentication identities, anonymises profile and public-profile information, removes profile-image references, disables preferences, and detaches notification tokens, follows, and related delivery records. We also queue deletion of the associated Firebase Analytics identifiers.

Some match records may be retained in de-identified form where needed to preserve completed rankings and competition integrity. We may also retain limited records where required by law, to resolve disputes, prevent fraud, enforce our agreements, or demonstrate that a privacy request was completed. Access is restricted and the information is deleted or anonymised when the applicable need ends.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent. You may also have the right to complain to your local data-protection authority.

You can:

• edit profile and preference information from the app;
• disable analytics collection in the app’s privacy settings;
• manage notification and Live Activity permissions in the app and iOS Settings;
• manage Sign in with Apple from your Apple Account settings;
• delete your account through the in-app path shown above;
• contact privacy@matchdaycall.club to exercise a privacy right.

We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

Children’s privacy

The Service is not directed to children under 13, or below the minimum age at which they may consent to an online service in their country. We do not knowingly collect personal information from a child who cannot lawfully provide consent. A parent or guardian who believes a child provided information should contact us so we can investigate and delete it where appropriate.

Security

We use technical and organisational safeguards designed for the nature of the information we process, including encrypted transport, access controls, separated production credentials, restricted administrative access, and controls around account deletion. No device, transmission, or storage system is completely secure. Keep your device and Apple Account secure and contact us if you suspect misuse.

Changes to this policy

We may update this policy when the Service, technology, law, or our data practices change. We will post the updated policy, revise the “Last updated” date, and provide additional notice when a material change requires it. We will also keep our App Store privacy disclosures aligned with the released app and its integrated third-party code.

Contact and privacy requests

Include enough information for us to understand and verify your request, but do not send passwords, verification codes, or authentication credentials by email.