Privacy Policy

1. Introduction

This Privacy Policy explains how Tobistech Ltd ("we", "us", or "our") collects, uses and protects your personal data when you use the Scorevance mobile application, website and related services (collectively, the "App" or "Scorevance").

We are committed to protecting your privacy and handling your information in a transparent and secure way. Please read this Policy carefully. If you do not agree with it, you should not use Scorevance.

2. Data Controller

For the purposes of applicable data protection laws (including the UK General Data Protection Regulation ("UK GDPR")), the data controller responsible for your personal data is:

Tobistech Ltd

82 King Street, Manchester. M2 4WQ

support@tobistech.co.uk

Tobistech Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. You can verify our registration at ico.org.uk.

3. Personal Data We Collect

The types of personal data we collect depend on how you use Scorevance. We may collect and process the following categories of information:

3.1 Account Information

Name or display name
Email address
Password (stored in hashed form only)
Subscription plan and billing status (where applicable)

3.2 Usage and Predictions Data

Your recorded predictions and related metadata
Accuracy metrics and historical prediction performance
Watchlists, favourite leagues or teams and preferences

3.3 Device and Technical Data

Device identifiers (model, operating system version)
App version, language and time zone settings
IP address and approximate location (city/country only)
Log data (crashes, error reports, performance metrics)

3.4 Support and Communication Data

Support tickets and messages you submit
Contact details used to reach our support team
Feedback, bug reports or survey responses

3.5 Payment and Subscription Information

Payments are processed by third-party providers. We do not store your full payment card details. We may receive:

Confirmation that a payment has been made
Subscription type, start and renewal dates
Country or currency details

3.6 Advertising Identifiers and Push Tokens

Advertising Identifiers - on iOS, we or our ad partner (Google AdMob) may access your Apple Identifier for Advertisers (IDFA) to serve and measure ads, subject to your App Tracking Transparency (ATT) consent choice. On Android, the Google Advertising ID (GAID) may be used for similar purposes, subject to your privacy settings.
Expo Push Tokens - when you enable push notifications, a device-specific push token is stored against your account on our servers. This token is used solely to deliver notifications to your device and is deleted when you disable notifications or delete your account.
Ad consent data - your consent or opt-out choices regarding personalised advertising are recorded locally and/or shared with Google's User Messaging Platform (UMP) as required by applicable law.

4. How We Collect Personal Data

We collect personal data in the following ways:

Directly from you - when you create an account, save a prediction, contact support or join a waitlist
Automatically - via your use of the App, through cookies, SDKs or similar technologies
From third parties - such as analytics providers, app stores, crash-reporting tools and sports data APIs

5. Cookies and Similar Technologies

When you visit our website or use the App, we may use cookies, SDKs and similar technologies to:

Remember your preferences and login state
Measure usage and performance of the App
Diagnose technical issues
Understand how features are being used to improve the product

Where required by law, we will ask for your consent before placing non-essential cookies. You can manage preferences via device settings or in-app options.

6. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and operate Scorevance - account management, authentication, predictions tracking, watchlists and personal stats
To personalise your experience - showing stats relevant to your favourite leagues or past predictions
To communicate with you - account issues, security alerts, support responses and important updates
To improve and develop the App - analysing usage trends, troubleshooting and building new features
To manage subscriptions and billing - verifying payments and handling renewal information
To maintain security and prevent abuse - detecting suspicious activity or misuse
To comply with legal obligations - keeping records, responding to lawful requests

6a. Push Notifications and Direct Marketing

Scorevance sends push notifications to your device. Some of these are transactional (for example, security alerts or account confirmations) and some are direct marketing communications (for example, daily prediction summaries, weekly digests, streak reminders and re-engagement nudges).

Under the Privacy and Electronic Communications Regulations 2003 (PECR), we require your prior consent before sending direct marketing push notifications. We obtain this consent when you first grant notification permission in the app (via your device's system prompt). You can withdraw consent at any time:

Within the app: Profile → Settings → Notification Preferences (toggle off any notification types you do not want)
Via your device's OS notification settings (iOS: Settings → Scorevance → Notifications; Android: Settings → Apps → Scorevance → Notifications)

Withdrawing consent for marketing notifications will not affect transactional notifications (such as security and account alerts), which we may continue to send as necessary to operate the service. Withdrawal does not affect the lawfulness of any notifications sent before you withdrew consent.

Advertising (free tier): On the free tier, we serve ads through Google AdMob. Google may use your advertising identifier (IDFA/GAID, subject to your consent) to serve personalised ads and measure their performance. For details of Google's data practices, see Google's Privacy Policy. You can manage ad personalisation in your device's privacy settings or via the in-app "Privacy Options" setting (where displayed).

7. Legal Bases for Processing

If you are located in the UK or EEA, we process your personal data under:

Contract

Processing necessary to provide the App and fulfill our contract with you

Legitimate Interests

To maintain and improve the App, prevent abuse, understand usage

Consent

For certain analytics, marketing communications or cookies

Legal Obligation

To comply with legal or regulatory requirements

8. How We Share Your Personal Data

🔒 We do not sell your personal data.

We may share your data with the following categories of recipients (including, but not limited to, the named processors below):

Infrastructure & hosting - cloud hosting and database providers (e.g. server infrastructure on which the Scorevance API runs)
Subscription management - RevenueCat, Inc. processes in-app purchase and subscription data on our behalf; their privacy policy is available at revenuecat.com/privacy
Push notifications - Expo (Expo.io) routes push tokens and notification payloads to Apple APNs and Google FCM; no notification content contains sensitive personal data
Advertising - Google AdMob / Google LLC (free-tier users only, subject to ATT/UMP consent); see Google's Privacy Policy at policies.google.com/privacy
Sports data - third-party football data APIs supply fixture, score and team data; we do not share your personal data with sports data providers
Email communications - transactional email providers (e.g. for verification and password reset emails)
Payment and app store providers - Apple App Store and Google Play Store manage subscription billing; we do not receive your full card details
Professional advisers - lawyers, accountants or auditors where reasonably necessary
Authorities and legal parties - where required by law or to protect our rights
Business transfers - in connection with any merger, acquisition or sale of assets; you will be notified in advance where required by law

Where possible, we share data in an aggregated or anonymised form that does not directly identify you. We require all processors to process your data only on our instructions and in accordance with applicable data protection law.

9. International Data Transfers

We may process and store your personal data in countries outside the UK or your country of residence. When transferring personal data outside the UK or EEA, we take steps to ensure an adequate level of protection, such as:

Transferring to countries recognised as providing adequate protection
Using standard contractual clauses approved by relevant authorities
Implementing additional technical and organisational safeguards

10. Data Retention

We keep your personal data only for as long as reasonably necessary. Our standard retention periods are:

Data category	Retention period
Account profile (name, email)	Until account deletion + 30 days
Prediction history & watchlists	Until account deletion
Push notification tokens	Until notifications disabled or account deleted
Support tickets & communications	2 years from resolution
Payment confirmation records	7 years (Companies Act / HMRC requirement)
Server log & crash data	90 days
Aggregated, anonymised analytics	Indefinitely (no longer personal data)

Longer retention may apply where required by law, to resolve disputes or to prevent fraud. When we no longer need your data, we will either delete it or anonymise it so that it can no longer be linked to you.

11. Security

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include encryption, access controls, secure development practices and regular monitoring.

However, no system can be completely secure. You are responsible for keeping your login details confidential and for notifying us promptly if you suspect unauthorised access.

Data Breach Notification: In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay - and in any event within 72 hours of becoming aware - in accordance with our obligations under UK GDPR Article 34. We will inform you of the nature of the breach, the likely consequences, and the steps we are taking to address it.

12. Children's Privacy

Scorevance is not intended for use by children under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children.

If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete the information as required by law.

UK Age Appropriate Design Code (Children's Code): We have assessed Scorevance against the UK Children's Code. Scorevance is a football predictions platform with a strict 18+ eligibility requirement (see our Terms of Use). The service is not directed at children, does not contain features designed to appeal to children, and does not knowingly process children's personal data. We do not use profiling, nudge techniques, or design patterns that could exploit children. If our user demographic or features change in a way that could make the service likely to be accessed by under-18s, we will conduct a full Children's Code assessment at that time.

13. Your Rights

Depending on your location, you may have the following rights:

Access

Obtain a copy of your personal data

Rectification

Correct inaccurate or incomplete data

Erasure

Request deletion ("right to be forgotten")

Restriction

Limit how we process your data

Portability

Receive data in a structured format

Objection

Object to certain processing

You also have the right to withdraw consent at any time where we rely on your consent as the legal basis for processing (for example, for push notifications or certain analytics). Withdrawal will not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for push notifications, use the in-app toggle or your device's OS notification settings.

To exercise any of your data rights, please contact us at support@tobistech.co.uk. We will respond within 30 days. If you are unhappy with how we handle your data or your rights request, you can lodge a complaint with the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

14. Automated Decision-Making and Profiling

Scorevance uses models and algorithms to generate probabilities, suggestions and insights about football matches. This may be considered "profiling" because it involves analysing your usage and preferences to personalise content.

However, we do not use automated decision-making that produces legal or similarly significant effects on you without human involvement. Any decisions you make (for example, whether to place a bet) are entirely your own responsibility.

15. Third-Party Links and Services

The App may contain links to third-party websites, apps or services (for example, bookmakers, news sites or social platforms). We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, where appropriate, notify you through the App or by email.

For non-material changes (such as clarifications, typographical corrections or minor operational updates), your continued use of Scorevance after the effective date will constitute acceptance. For material changes - such as changes to the categories of data collected, new sharing with third parties, or new processing purposes - we will seek fresh consent where required by UK GDPR, or provide you with a meaningful opportunity to object before the changes take effect.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data:

Email