Privacy Policy

1. Information We Collect

We collect personal information you provide directly and information collected automatically when you use ZilScore.

Information You Provide

• Account information: Name (display name), email address, and authentication data when you create an account. Sign-in and any password are handled securely by Firebase Authentication — we never store or see your plaintext password.
• Profile information: Display name, profile photo, language preference, and notification preferences.
• Followed teams and players: The teams, players, and competitions you choose to follow.
• Community content: Poll votes, comments and replies, likes, reports you submit about content, the users you block, and any other content you submit.
• Purchases: If you subscribe to Go ad-free, Apple or Google processes your payment. We receive your subscription status and purchase details (such as the plan, purchase date, and renewal status), never your card or bank details. See Section 3.
• Feedback and support: Messages you send to support@zilscore.com or through the in-app feedback form.

Information Collected Automatically

• Device information: Device model, operating system, OS version, unique device identifiers, language settings, and time zone.
• Usage data: Screens viewed, features used, session duration, interaction events, and crash reports.
• Approximate location: Country and region derived from your IP address (we do not collect precise GPS location).
• Log data: IP address, access timestamps, and error logs for security and diagnostic purposes.
• Push notification tokens: Firebase Cloud Messaging (FCM) tokens used to deliver notifications.
• Advertising identifier (when ads are shown): Google AdMob may use your device's advertising identifier — the Google Advertising ID on Android, or the IDFA on iPhone only if you allow tracking — to show, limit, and measure ads and to prevent fraud. See Section 3.

Information from Third-Party Sign-In

If you sign in using Google or Apple, we receive the following from those providers:

• Your name (with Apple, only if you choose to share it)
• Your email address (with Apple, you can choose to share a private relay address instead of your real email)
• Your profile picture URL (Google only)
• A unique account identifier from that provider

We do not receive your password or other account credentials. Use of your information by Google or Apple is governed by their own privacy policies.

2. How We Use Your Information

We use your personal information to:

• Create and manage your ZilScore account
• Authenticate you when you sign in
• Deliver personalized football news, scores, and notifications based on the teams and players you follow
• Send push notifications when you have opted in
• Enable community features such as polls, comments, replies, and likes, and let you report content and block other users
• Show advertising (when enabled) and provide the optional Go ad-free subscription, including restoring your purchases on a new device
• Respond to your questions, feedback, and support requests
• Improve our Services through analytics and crash reporting
• Detect, prevent, and address security issues, fraud, abuse, and violations of our Terms and Conditions
• Send administrative messages such as password resets, security alerts, and updates to our policies
• Comply with legal obligations

We process your information based on one or more of the following legal bases under the GDPR: your consent, performance of our contract with you, our legitimate interests, and compliance with legal obligations.

3. Third-Party Services We Use

Third-Party Service Providers

We may work with third-party service providers and data providers to operate, maintain, and improve ZilScore and to provide football-related information and other services. These providers may process or provide information in accordance with their own terms, policies, and applicable legal requirements.

Google Firebase (Google LLC / Alphabet Inc.)

We use the following Firebase services, which are provided by Google:

• Firebase Authentication: Manages user sign-in, account creation, and password reset.
• Cloud Firestore: Stores your account data, followed teams, preferences, and community content.
• Firebase Cloud Messaging (FCM): Delivers push notifications to your device.
• Firebase Hosting: Hosts our website and legal pages at zilscore.com.
• Firebase Cloud Functions: Runs backend logic such as content imports, notifications, and cost-protection safeguards.
• Firebase Analytics (Google Analytics for Firebase): Tracks aggregated app usage to help us improve features. You can limit analytics collection by adjusting your device's privacy and advertising settings (for example, by resetting or limiting your advertising identifier).
• Firebase Crashlytics: Collects crash reports so we can identify and fix issues.
• Google Sign-In: Provides an optional way to sign in using your Google account, subject to Google API Services User Data Policy (including Limited Use requirements).

Learn more at Firebase Privacy and Google Privacy Policy.

Cloudinary

We use Cloudinary to host and deliver images displayed in ZilScore, including news photos, team logos, and sponsored advertisement images. When the app loads these images, Cloudinary's servers receive standard technical information, such as your IP address and device type, as any image server does; we do not send Cloudinary your account information. See Cloudinary Privacy Policy.

API-Football (API-Sports)

We use API-Football to obtain match scores, fixtures, standings, team and player statistics, and related football data. We do not share your personal information with API-Football. See API-Football Privacy Policy.

Other Content Sources

Some images (such as flags, logos, and photos) load directly from other image servers, and match weather comes from Open-Meteo using the stadium's location, not yours. Like any website, these servers receive standard technical information (such as your IP address) when your device loads content from them. We do not send them your account information.

Sign in with Apple (Apple Inc.)

Provides an optional way to sign in with your Apple Account. Apple shares your name only if you choose to, and lets you hide your real email address by sharing a private relay address instead. See Apple's Privacy Policy.

Advertising (Google AdMob)

ZilScore may show ads provided by Google AdMob (Google LLC), such as banner ads, full-screen ads between screens, and optional video ads you can choose to watch for a period without ads. When ads are shown, Google may collect and use information such as your device's advertising identifier, IP address, device and app information, and your interactions with ads, in order to show ads, limit how often you see them, measure their performance, and prevent fraud.

• Your choice: Where required by law (for example, in the EEA, UK, and Switzerland), we ask for your consent through Google's consent message before ads are personalized. Ads may also be shown in non-personalized form, which relies on contextual information instead of your personal data.
• On Android: You can reset or delete your advertising ID at any time in your phone's settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your device).
• On iPhone: Your advertising identifier (IDFA) is used only if you tap "Allow" when the app asks to track your activity. You can change this at any time in Settings → Privacy & Security → Tracking.

Learn more about how Google uses information from apps that use its services.

ZilScore also shows sponsored adverts from our direct partners (marked "Sponsored"). These are managed by us and are not personalized using your personal data.

Purchases (Apple App Store, Google Play, and RevenueCat)

If you subscribe to the optional Go ad-free subscription, your payment is processed by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your card or bank details. We use RevenueCat (RevenueCat, Inc.) to manage subscriptions: it receives your purchase details from the store (such as the plan, transaction identifiers, purchase and renewal dates, and subscription status) together with a random app user ID, so we can unlock Go ad-free and restore it on your other devices. See RevenueCat's Privacy Policy.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following situations:

• Service providers: With the third-party service providers listed in Section 3, who process data on our behalf under contractual obligations.
• Legal compliance: When required to comply with a valid court order, subpoena, government request, or applicable law.
• Protection of rights: To enforce our Terms and Conditions, prevent fraud or abuse, or protect the safety of our users or the public.
• Business transfers: If ZilScore is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: When you explicitly authorize us to share specific information.
• Public community content: Information you post in public areas of ZilScore (such as comments and replies, shown with your display name and profile photo; poll votes are shown only as totals) may be visible to other users (see Section 10).
• Advertising: When ads are shown, Google AdMob receives the information described in Section 3 (Advertising) to show and measure ads.

5. Push Notifications

If you grant permission, ZilScore sends push notifications about:

• Live match events for teams and players you follow (goals, kick-offs, full-time)
• Breaking football news
• Match reminders for upcoming fixtures
• Important account or service updates

You can disable push notifications at any time through your device settings or in the ZilScore app under Settings → Notifications.

6. Analytics and Performance

We use Firebase Analytics and Firebase Crashlytics to understand how users interact with ZilScore and to detect crashes. Analytics data is aggregated and helps us:

• Identify which features are popular and which need improvement
• Detect and fix crashes and bugs
• Understand usage patterns by country and region
• Measure performance and loading times

We do not use analytics for advertising, remarketing, or demographic profiling. We do not enable Google Analytics Demographics and Interest Reporting, Display Network Impression Reporting, or Remarketing features.

7. International Data Transfers

ZilScore is operated from the Republic of Seychelles. Your data is primarily processed on Google's cloud infrastructure located in the United States and may also be processed in other countries where our service providers maintain facilities.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, your personal information may be transferred to and processed in countries that may not provide the same level of data protection as your home country. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for these transfers. Our third-party providers (including Google and Cloudinary) maintain SCCs in their data processing agreements.

Copies of the SCCs can be requested by emailing support@zilscore.com.

8. Data Retention

We keep your personal information only for as long as needed to provide the Services or to comply with legal obligations.

• Account data — kept for as long as your account is active.
• Comments and replies — kept until you delete them or your account.
• Backups — automatic backups may persist for up to 30 days after account deletion before being permanently removed.
• Crash reports and analytics — retained for up to 14 months in aggregated form.
• Support emails — retained for up to 24 months.
• Subscription records — kept by Apple, Google, and RevenueCat for as long as needed to provide your subscription and to meet billing, tax, and legal requirements.
• Legal records — retained as required by applicable law.

When information is no longer needed, we delete or anonymize it.

9. Account Deletion

You can delete your ZilScore account at any time directly from within the app. To delete your account:

1. Open the ZilScore app
2. Go to Menu → Settings → Account → Delete Account
3. Type DELETE to confirm
4. Tap Delete Forever

When you delete your account:

• Your account and sign-in are permanently deleted
• Your profile, display name, profile photo, followed teams, preferences, and push notification tokens are removed from our active systems
• Your comments and replies are deleted; your likes and poll votes remain only as anonymous totals
• Backups containing your data are purged within 30 days
• Information required to be retained for legal, fraud-prevention, or security purposes may be kept in isolated form until permitted to be deleted

Subscriptions: Deleting your account does not cancel a Go ad-free subscription. Cancel it in your App Store or Google Play account settings to stop future charges.

If you are unable to access the in-app deletion option, you may also request account deletion by emailing support@zilscore.com from the email address associated with your account. Full steps are on our account deletion page.

10. Community Content and Visibility

ZilScore includes community features. When you participate in these features, please note:

• Poll votes contribute to aggregate results visible to all users. Individual votes are not personally identified.
• Comments and replies display your display name and profile photo alongside your content, visible to all other users.
• Reporting and blocking: You can report comments that break our rules and block other users in the app. We review reports and remove content or suspend accounts that violate our Terms and Conditions.
• Public content cannot be guaranteed to be removed from third-party copies, screenshots, or caches once shared.
• You are responsible for the content you post. Do not share personal, confidential, or sensitive information in public areas.

By posting community content, you grant ZilScore a non-exclusive, worldwide, royalty-free license to display, distribute, and moderate that content within the Services. See our Terms and Conditions for the full content license terms.

11. Children's Privacy

ZilScore is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it as soon as possible.

Users between 13 and 17 should use ZilScore only with the consent and involvement of a parent or legal guardian.

If you believe a child under 13 has provided personal information to ZilScore, please contact us at support@zilscore.com.

12. Your Privacy Rights

Depending on your country or region, you may have the following rights regarding your personal information:

• Right of access — request a copy of the personal information we hold about you
• Right of rectification — correct inaccurate or incomplete information
• Right to erasure ("right to be forgotten") — request deletion of your information
• Right to restrict processing — limit how we use your information in certain situations
• Right to data portability — receive your information in a structured, commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent
• Right to lodge a complaint with your local data protection authority

European Economic Area (EEA), United Kingdom (UK), and Switzerland

You may contact your national data protection authority. EEA residents can find their authority at edpb.europa.eu. UK residents can complain to the Information Commissioner's Office (ICO).

United States (all states)

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or any other US state with a privacy law, you may exercise the rights granted to you under your state's privacy law, including the right to know, access, correct, delete, and opt out of the sale or sharing of personal information.

We do not sell your personal information. If personalized ads are shown (see Section 3, Advertising), some US state laws may treat this as "sharing" for targeted advertising. You can opt out at any time by turning off ad personalization on your device (delete or reset your advertising ID on Android, or don't allow tracking on iPhone) or by contacting us.

Canada

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct personal information.

Australia and New Zealand

Residents of Australia and New Zealand have rights under the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020 respectively, including the right to request access and correction of personal information.

South Africa

South African residents have rights under the Protection of Personal Information Act (POPIA), including the right to access, correct, and request deletion of personal information.

How to Exercise Your Rights

To exercise any of these rights, contact us at support@zilscore.com from the email address associated with your account. We will respond within the timeframes required by applicable law (typically 30 days). We may request information to verify your identity before processing your request.

You will not be discriminated against for exercising your privacy rights.

13. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest on Google Cloud infrastructure
• Secure password hashing (handled by Firebase Authentication)
• Role-based access controls on our administrative systems
• Firestore Security Rules restricting access to authorized users
• Regular security reviews and updates
• Limited employee access to personal data on a need-to-know basis

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for keeping your account password confidential and notifying us immediately at support@zilscore.com if you suspect unauthorized access to your account.

In the event of a data breach affecting your personal information, we will notify you and the relevant data protection authorities within the timeframes required by applicable law (within 72 hours for EU/UK users under the GDPR).

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this Policy
• Notify you through the app (in-app banner or notification)
• Send an email if you have provided one (for significant changes)

Your continued use of ZilScore after changes take effect constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: