Privacy Policy – SportsMate

SportsMate ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the SportsMate mobile application and related services.

1. Information We Collect

We collect the following types of information:

Account Information

Name and email address (when you register with email/password)
Google account ID (when you sign in with Google)
Apple account ID (when you sign in with Apple)
Profile details: bio, location, sports preferences, avatar colour

Activity Data

Groups you create or join
Games you schedule or enrol in
Messages you send in group chats
Payment and token transaction history
Support requests you submit (including optional screenshots)

Device & Technical Data

Push notification token (for sending you game reminders and alerts)
Device type and app version (collected in support requests only)

2. How We Use Your Information

To provide and operate the SportsMate service
To authenticate your identity and secure your account
To enable group management, game scheduling, and in-app messaging
To process token transactions and subscription payments
To send push notifications about games and group activity (you can disable these in your device settings)
To respond to support requests
To detect and prevent abuse or fraud

3. Sharing Your Information

We do not sell your personal information. We share your data only in the following circumstances:

With other group members: Your name and profile are visible to members of groups you join.
Service providers: We use trusted third-party services to operate the platform (see Section 4).
Legal obligations: If required by law, court order, or to protect the rights and safety of users.

4. Third-Party Services

SportsMate uses the following third-party services, each governed by their own privacy policies:

Google Sign-In — Authentication
Apple Sign-In — Authentication
RevenueCat — Subscription management
Neon (PostgreSQL) — Database hosting
Expo (Push Notifications) — Notification delivery
Amazon Web Services (AWS) — Cloud infrastructure

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal or audit purposes.

6. Data Security

We use industry-standard security measures including:

Passwords are stored as bcrypt hashes — we never store plain-text passwords
All API communication is encrypted using HTTPS/TLS
Authentication tokens are short-lived JWTs
Database access is restricted to authorised server processes only

7. Children's Privacy

SportsMate is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Withdraw consent for optional data processing

To exercise any of these rights, contact us at privacy@sportsmate.app.

9. Push Notifications

We use your device's push token to send you notifications about game updates, group activity, and payment confirmations. You can disable push notifications at any time in your device's Settings app. Disabling notifications does not affect your ability to use SportsMate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of SportsMate after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@sportsmate.app