Privacy Policy

1. Information We Collect

We collect personal information you provide directly and information collected automatically when you use ZilScore.

Information You Provide

• Account information: Name (display name), email address, password (encrypted), and authentication data when you create an account.
• Profile information: Display name, profile photo, language preference, and notification preferences.
• Followed teams and players: The teams, players, and competitions you choose to follow.
• Community content: Poll votes, comments (when available), and any other content you submit.
• Feedback and support: Messages you send to support@zilscore.com or through the in-app feedback form.

Information Collected Automatically

• Device information: Device model, operating system, OS version, unique device identifiers, language settings, and time zone.
• Usage data: Screens viewed, features used, session duration, interaction events, and crash reports.
• Approximate location: Country and region derived from your IP address (we do not collect precise GPS location).
• Log data: IP address, access timestamps, and error logs for security and diagnostic purposes.
• Push notification tokens: Firebase Cloud Messaging (FCM) tokens used to deliver notifications.

Information from Third-Party Sign-In

If you sign in using Google or Facebook, we receive the following from those providers:

• Your name
• Your email address
• Your profile picture URL
• A unique account identifier from that provider

We do not receive your password or other account credentials. Use of your information by Google or Facebook is governed by their own privacy policies.

2. How We Use Your Information

We use your personal information to:

• Create and manage your ZilScore account
• Authenticate you when you sign in
• Deliver personalized football news, scores, and notifications based on the teams and players you follow
• Send push notifications when you have opted in
• Enable community features such as polls and (when launched) comments
• Respond to your questions, feedback, and support requests
• Improve our Services through analytics and crash reporting
• Detect, prevent, and address security issues, fraud, abuse, and violations of our Terms and Conditions
• Send administrative messages such as password resets, security alerts, and updates to our policies
• Comply with legal obligations

We process your information based on one or more of the following legal bases under the GDPR: your consent, performance of our contract with you, our legitimate interests, and compliance with legal obligations.

3. Third-Party Services We Use

ZilScore relies on the following third-party service providers to operate. Each provider processes data under their own privacy policy, and we have data processing agreements with them where required by law.

Google Firebase (Google LLC / Alphabet Inc.)

We use the following Firebase services, which are provided by Google:

• Firebase Authentication: Manages user sign-in, account creation, and password reset.
• Cloud Firestore: Stores your account data, followed teams, preferences, and community content.
• Firebase Cloud Messaging (FCM): Delivers push notifications to your device.
• Firebase Hosting: Hosts our website and legal pages at zilscore.com.
• Firebase Cloud Functions: Runs backend logic such as content imports, notifications, and cost-protection safeguards.
• Firebase Analytics (Google Analytics for Firebase): Tracks aggregated app usage to help us improve features. You can opt out by adjusting your device settings or by visiting Google Analytics Opt-out.
• Firebase Crashlytics: Collects crash reports so we can identify and fix issues.
• Google Sign-In: Provides an optional way to sign in using your Google account, subject to Google API Services User Data Policy (including Limited Use requirements).

Learn more at Firebase Privacy and Google Privacy Policy.

Cloudinary

We use Cloudinary to host and deliver images displayed in ZilScore, including news photos, team logos, and sponsored advertisement images. Cloudinary does not receive your personal information; it only processes the images we upload. See Cloudinary Privacy Policy.

Anthropic

We use Anthropic's Claude API to help generate draft news articles based on publicly available football events (such as scores and transfer announcements). Anthropic processes only the public football data and prompts we send; we do not send your personal information to Anthropic. See Anthropic Privacy Policy.

API-Football (API-Sports)

We use API-Football to obtain match scores, fixtures, standings, team and player statistics, and related football data. We do not share your personal information with API-Football. See API-Football Privacy Policy.

Facebook Login (Meta Platforms, Inc.)

If you choose to sign in using Facebook, Meta processes your login under its Meta Privacy Policy. We only receive the basic profile information described in Section 1.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following situations:

• Service providers: With the third-party service providers listed in Section 3, who process data on our behalf under contractual obligations.
• Legal compliance: When required to comply with a valid court order, subpoena, government request, or applicable law.
• Protection of rights: To enforce our Terms and Conditions, prevent fraud or abuse, or protect the safety of our users or the public.
• Business transfers: If ZilScore is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: When you explicitly authorize us to share specific information.
• Public community content: Information you post in public areas of ZilScore (such as poll votes shown in aggregate, or comments when launched) may be visible to other users (see Section 10).

5. Push Notifications

If you grant permission, ZilScore sends push notifications about:

• Live match events for teams and players you follow (goals, kick-offs, full-time)
• Breaking football news
• Match reminders for upcoming fixtures
• Important account or service updates

You can disable push notifications at any time through your device settings or in the ZilScore app under Settings → Notifications.

6. Analytics and Performance

We use Firebase Analytics and Firebase Crashlytics to understand how users interact with ZilScore and to detect crashes. Analytics data is aggregated and helps us:

• Identify which features are popular and which need improvement
• Detect and fix crashes and bugs
• Understand usage patterns by country and region
• Measure performance and loading times

We do not use analytics for advertising, remarketing, or demographic profiling. We do not enable Google Analytics Demographics and Interest Reporting, Display Network Impression Reporting, or Remarketing features.

7. International Data Transfers

ZilScore is operated from the Republic of Seychelles. Your data is primarily processed on Google's cloud infrastructure located in the United States and may also be processed in other countries where our service providers maintain facilities.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, your personal information may be transferred to and processed in countries that may not provide the same level of data protection as your home country. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for these transfers. Our third-party providers (including Google, Cloudinary, and Anthropic) maintain SCCs in their data processing agreements.

Copies of the SCCs can be requested by emailing support@zilscore.com.

8. Data Retention

We keep your personal information only for as long as needed to provide the Services or to comply with legal obligations.

• Account data — kept for as long as your account is active.
• Backups — automatic backups may persist for up to 30 days after account deletion before being permanently removed.
• Crash reports and analytics — retained for up to 14 months in aggregated form.
• Support emails — retained for up to 24 months.
• Legal records — retained as required by applicable law.

When information is no longer needed, we delete or anonymize it.

9. Account Deletion

You can delete your ZilScore account at any time directly from within the app. To delete your account:

1. Open the ZilScore app
2. Go to Settings → Account → Delete Account
3. Confirm your password
4. Confirm the deletion

When you delete your account:

• Your account is immediately deactivated
• Your profile, display name, profile photo, followed teams, preferences, and push notification tokens are removed from our active systems
• Your poll votes and comments may be removed or anonymized
• Backups containing your data are purged within 30 days
• Information required to be retained for legal, fraud-prevention, or security purposes may be kept in isolated form until permitted to be deleted

If you are unable to access the in-app deletion option, you may also request account deletion by emailing support@zilscore.com from the email address associated with your account.

10. Community Content and Visibility

ZilScore includes community features. When you participate in these features, please note:

• Poll votes contribute to aggregate results visible to all users. Individual votes are not personally identified.
• Comments and replies (when launched) will display your display name and profile photo alongside your content, visible to all other users.
• Public content cannot be guaranteed to be removed from third-party copies, screenshots, or caches once shared.
• You are responsible for the content you post. Do not share personal, confidential, or sensitive information in public areas.

By posting community content, you grant ZilScore a non-exclusive, worldwide, royalty-free license to display, distribute, and moderate that content within the Services. See our Terms and Conditions for the full content license terms.

11. Children's Privacy

ZilScore is not directed at children under the age of 14. We do not knowingly collect personal information from children under 14. If we learn that we have collected personal information from a child under 14 without verifiable parental consent, we will delete it as soon as possible.

Users between 14 and 17 should use ZilScore only with the consent and involvement of a parent or legal guardian.

If you believe a child under 14 has provided personal information to ZilScore, please contact us at support@zilscore.com.

12. Your Privacy Rights

Depending on your country or region, you may have the following rights regarding your personal information:

• Right of access — request a copy of the personal information we hold about you
• Right of rectification — correct inaccurate or incomplete information
• Right to erasure ("right to be forgotten") — request deletion of your information
• Right to restrict processing — limit how we use your information in certain situations
• Right to data portability — receive your information in a structured, commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent
• Right to lodge a complaint with your local data protection authority

European Economic Area (EEA), United Kingdom (UK), and Switzerland

You may contact your national data protection authority. EEA residents can find their authority at edpb.europa.eu. UK residents can complain to the Information Commissioner's Office (ICO).

United States (all states)

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or any other US state with a privacy law, you may exercise the rights granted to you under your state's privacy law, including the right to know, access, correct, delete, and opt out of the sale or sharing of personal information.

We do not sell or share personal information for cross-context behavioral advertising.

Canada

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct personal information.

Australia and New Zealand

Residents of Australia and New Zealand have rights under the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020 respectively, including the right to request access and correction of personal information.

South Africa

South African residents have rights under the Protection of Personal Information Act (POPIA), including the right to access, correct, and request deletion of personal information.

How to Exercise Your Rights

To exercise any of these rights, contact us at support@zilscore.com from the email address associated with your account. We will respond within the timeframes required by applicable law (typically 30 days). We may request information to verify your identity before processing your request.

You will not be discriminated against for exercising your privacy rights.

13. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest on Google Cloud infrastructure
• Secure password hashing (handled by Firebase Authentication)
• Role-based access controls on our administrative systems
• Firestore Security Rules restricting access to authorized users
• Regular security reviews and updates
• Limited employee access to personal data on a need-to-know basis

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for keeping your account password confidential and notifying us immediately at support@zilscore.com if you suspect unauthorized access to your account.

In the event of a data breach affecting your personal information, we will notify you and the relevant data protection authorities within the timeframes required by applicable law (within 72 hours for EU/UK users under the GDPR).

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this Policy
• Notify you through the app (in-app banner or notification)
• Send an email if you have provided one (for significant changes)

Your continued use of ZilScore after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: