🏏 RovaScore Privacy Policy

🎯 Introduction

Welcome to RovaScore ("Company," "we," "us," "our," or "Application"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform.

This Privacy Policy explains:

• What information we collect about you
• How we use and process that information
• How we protect your data
• Your rights and choices regarding your information
• How to contact us about privacy matters

RovaScore is a sports statistics and live match tracking application that provides AI ratings, live scores, player statistics, news, and personalized team/player following features for cricket and football enthusiasts.

📊 Data We Collect

1. Account & Registration Data

When you create an account with RovaScore, we collect:

• First Name & Last Name - Provided during registration
• Email Address - For account access and communication
• Password - Securely hashed and encrypted
• Phone Number - Optional, for contact purposes
• Profile Picture/Avatar - Optional, uploaded by you
• User ID - Unique identifier assigned by our system

2. Authentication Data

To keep your account secure, we collect and process:

• Access Tokens & Refresh Tokens - For session management
• Google OAuth Data - Email, name, and photo (when using Google Sign-In)
• Google ID Token & Access Token - Stored securely in local storage
• Password Reset Tokens - Temporary tokens for account recovery
• OTP Codes - One-time passwords for email verification
• Verification Status - Email and phone verification records

3. User Preferences & Behavior

We collect information about your sports interests:

• Favorite Teams - Cricket and football teams you follow
• Favorite Players - Cricket and football players you follow
• Favorite Fixtures - Matches you've bookmarked
• Teams Following - Teams you're subscribed to for updates
• Players Following - Players you're subscribed to for updates
• Notification Preferences - Your notification settings and preferences
• Comments & Posts - News comments and community posts you create
• Language Preference - Your selected app language
• Currency Preference - Your selected currency for pricing

4. Device & Technical Data

Information about your device and application usage:

• Firebase Cloud Messaging (FCM) Token - For push notifications
• Device Language - Your preferred language setting
• App Version - Currently installed RovaScore version
• Device Type - Android or iOS (provided by Firebase)

5. Content & Interaction Data

We collect information about how you interact with our application:

• Match Views - Which fixtures and scores you view
• Player Profiles Viewed - Players you research or follow
• News Articles Read - Sports news you engage with
• Comments Posted - Your interactions in community sections
• Search Queries - Teams, players, or matches you search for
• Time Spent - Duration of app usage and feature engagement

6. Log & Analytics Data

Automatically collected technical information:

• API Requests - Records of data you request from our servers
• Error Logs - Technical issues and crashes (via Firebase)
• Performance Metrics - App performance and response times
• User Agent Information - App and device identification

🎯 How We Use Your Data

Specific Use Cases

🏏 Personalization & Recommendations

We use your favorite teams, players, and viewing history to:

• Recommend relevant matches and player statistics
• Customize your news feed
• Prioritize notifications about your favorite teams
• Improve the overall user experience

🔔 Push Notifications

We send notifications for:

• Live match updates for your favorite teams
• Goals, wickets, and significant match events
• Breaking sports news and updates
• Player performance alerts
• New features and important account updates

📈 Analytics & Improvement

We analyze aggregated data to:

• Identify popular features and content
• Fix bugs and technical issues
• Develop new features based on user demand
• Improve app performance and speed

💰 Advertising

We display personalized advertisements based on:

• Your sports interests (cricket, football, teams)
• Device type
• App usage patterns
• Age group and demographics

🛡️ Security & Compliance

We use your data to:

• Detect and prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect user safety and security

📧 Customer Support

When you contact our support team, we use your information to:

• Respond to your inquiries
• Troubleshoot technical issues
• Improve support quality

🔗 Third-Party Services & Integrations

RovaScore integrates with several third-party services to provide enhanced functionality. These services may collect and process your data according to their own privacy policies.

1. Firebase (Google Cloud Services)

Purpose: Backend infrastructure, user authentication, database, cloud storage, and analytics

• Data Shared: User ID, authentication tokens, profile data, usage analytics, app crash reports
• Firebase Project: rovascore-f9b6a
• Data Processing: Firebase stores data on Google's secure servers
• Privacy Policy: Google Privacy Policy

2. Firebase Cloud Messaging (FCM)

Purpose: Sending push notifications to your device

• Data Shared: Device token, user ID, notification preferences
• Permission Required: "Post Notifications" permission on Android and iOS
• Can Be Disabled: You can disable push notifications in app settings
• Privacy Policy: Google Privacy Policy

3. Google Sign-In & OAuth 2.0

Purpose: Social authentication for easy login

• Data Shared: Email address, full name, profile photo, Google ID token, access token
• Permission Required: Google account access
• Your Control: You can revoke RovaScore's access at any time via your Google Account settings
• Privacy Policy: Google Privacy Policy

4. Google Mobile Ads (AdMob)

Purpose: Display personalized advertisements within the app

• Data Shared: Advertising ID, device type, app usage patterns
• Ad Personalization: Ads are personalized based on your interests and behavior
• Opt-Out: You can opt-out of personalized ads in your device settings
• Privacy Policy: Google Advertising Privacy

5. Backend API Server

Purpose: Storing and retrieving sports data, user accounts, and preferences

• Server Location: app.rovascore.com
• Data Shared: User profile, authentication tokens, preferences, comments
• Encryption: All data transmitted via HTTPS/TLS encryption
• Endpoints: User authentication, profile management, sports data retrieval

6. Image Hosting & Cloud Storage

Purpose: Store profile pictures, team logos, and player images

• Data Stored: Profile avatars, team and player images
• Security: Encrypted storage with access controls
• CDN Delivery: Images delivered via content delivery networks

7. Flutter Local Notifications

Purpose: Display local notifications on your device

• Data Used: Notification preferences and timing information
• Local Processing: All notifications are processed locally on your device

8. Apple Push Notification Service (APNS) - iOS Only

Purpose: Delivering push notifications on iOS devices

• Data Shared: Device token, notification payload
• Provider: Apple Inc.
• Privacy Policy: Apple Privacy Policy

👥 Data Sharing & Disclosure

When We Share Your Data

1. With Your Consent

We only share data with third parties when you explicitly consent or when necessary to provide services you've requested.

2. Service Providers

We share data with vendors and service providers who help us operate RovaScore:

• Cloud hosting providers (Firebase, Google Cloud)
• Analytics services
• Customer support platforms
• Advertising partners (Google AdMob)

3. Legal Requirements

We may disclose your data when required by law or to protect our rights:

• Response to legal process (subpoenas, court orders, warrants)
• Compliance with regulations and laws
• Enforcement of our Terms of Service
• Protection against fraud, security threats, or illegal activity
• Protection of user safety and rights

4. Business Transfers

If RovaScore is acquired, merged, or undergoes a business restructuring:

• Your data may be transferred as part of the transaction
• We will notify you of any material changes to this Privacy Policy
• You will have the right to opt-out if changes are significant

5. Aggregated & De-identified Data

We may share aggregated, anonymized data that cannot identify you:

• Popularity statistics (most-watched teams, matches)
• General usage trends and analytics
• Market research and trend analysis

What We Don't Share

We never sell your personal data to third parties for marketing purposes without your consent. We do not share:

• Your email address with unaffiliated marketing companies
• Your payment information
• Your passwords or authentication tokens

👨‍⚖️ Your Rights & Choices

Your Privacy Rights

1. Right to Access

You have the right to:

• Request a copy of your personal data that we hold
• View your profile information and settings at any time within the app
• Access your account data by logging in

2. Right to Correction

You can:

• Update your profile information (name, email, phone)
• Change your password at any time
• Correct inaccurate data through your account settings

3. Right to Deletion

You may request deletion of your account and data:

• Contact our support team to initiate account deletion
• We will remove your personal data within a reasonable timeframe
• Some data may be retained for legal or operational reasons
• Deletion is irreversible - your account cannot be recovered

4. Right to Data Portability

You have the right to:

• Request your data in a structured, machine-readable format
• Transfer your data to another service (where applicable)
• Contact us to export your account information

5. Right to Object

You can object to:

• Marketing communications - unsubscribe from emails or notifications
• Processing of data for analytics or profiling
• Personalized advertising - opt-out in ad settings

6. Right to Withdraw Consent

For data processing based on your consent:

• You can withdraw consent at any time
• Withdrawing consent does not affect the validity of past processing
• Some services may not be available if consent is withdrawn

Privacy Controls & Settings

📵 Notification Settings

Manage notifications within the app:

• Turn off push notifications for specific teams or players
• Disable all notifications (may affect app experience)
• Control notification frequency and timing

🎯 Advertising Preferences

Control personalized advertising:

• Opt-out of personalized ads in device settings
• Reset your advertising ID
• Use Ad Choices tools in your device settings

📸 Camera & Photo Library

Control media access:

• Grant permission to upload profile pictures
• Deny camera or photo library access at any time

Do Not Track (DNT)

Some browsers include a "Do Not Track" feature. RovaScore currently does not respond to DNT signals, but you can control data collection through app settings and device permissions.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

🔐 Data Security

Security Measures We Implement

🔒 Encryption

• In Transit: All data sent to/from our servers uses HTTPS/TLS encryption
• At Rest: Sensitive data is encrypted in our database
• Password Storage: Passwords are hashed using industry-standard algorithms (e.g., bcrypt)
• Tokens: Authentication tokens are encrypted and stored securely in local storage

🛡️ Access Controls

• Role-based access control (RBAC) for employee access
• Multi-factor authentication for administrative accounts
• Principle of least privilege - employees access only necessary data
• Regular access audits and reviews

🔍 Monitoring & Detection

• Real-time monitoring for suspicious activities
• Automated alerts for security anomalies
• Rate limiting to prevent brute-force attacks
• DDoS protection measures

🔄 Regular Updates

• Timely security patches for vulnerabilities
• Regular updates to dependencies and libraries
• Continuous security scanning and testing
• Penetration testing and security audits

🏗️ Infrastructure Security

• Secure hosting on Firebase/Google Cloud Platform
• Firewalls and network segmentation
• Redundant systems and backups
• Data center security and compliance certifications

Your Responsibility

To keep your account secure, please:

• Use a strong, unique password
• Change your password regularly
• Do not share your password with anyone
• Log out on shared devices
• Keep your device software updated
• Be cautious of phishing emails or links
• Verify you're using the official RovaScore app

🍪 Cookies & Local Storage

Types of Local Data Storage

1. GetStorage (Local App Storage)

What: A lightweight local storage system used by RovaScore

Data Stored:

• Your access tokens and refresh tokens
• User ID and basic profile information
• Your favorite teams and players list
• Notification preferences
• Language and currency settings
• First-time user indicators
• Google OAuth tokens (ID token and access token)

Duration: Until you log out or clear app cache

Security: Protected by your device's operating system encryption

2. Device Keystore (Secure Storage)

What: Encrypted storage for sensitive credentials

Data Stored:

• Authentication tokens (encrypted)
• Sensitive user credentials

Security: Hardware-backed encryption (Keystore on Android, Keychain on iOS)

3. Session Cookies

What: Temporary identifiers for your active session

Purpose: Keep you logged in while using the app

Duration: Until you log out or session expires (typically 24-30 days)

Deletion: Automatically deleted when you log out

Managing Local Storage

On Android

• Clear Cache: Settings → Apps → RovaScore → Storage → Clear Cache
• Clear All Data: Settings → Apps → RovaScore → Storage → Clear All Data (logs you out)

On iOS

• Clear App Cache: Settings → General → iPhone Storage → RovaScore → Offload App (keeps data), then Reinstall
• Delete App & Data: Settings → General → iPhone Storage → RovaScore → Delete App

Third-Party Cookies

Google Analytics (via Firebase)

Firebase may collect analytics data to:

• Track user engagement and interactions
• Measure app performance
• Understand user demographics
• Report on app usage patterns

Opt-Out: Disable Analytics in your device settings

Google Ads Cookies

Google AdMob uses cookies and advertising identifiers to:

• Serve personalized advertisements
• Track ad performance
• Prevent ad fraud

Opt-Out: Reset your advertising ID or opt-out of personalized ads

⏰ Data Retention

How Long We Keep Your Data

Data Deletion Process

When You Delete Your Account

1. We will delete your personal information from active systems
2. Backup data may be retained for 30-90 days for recovery purposes
3. Public content (comments, posts) may persist in cached versions
4. Aggregated, anonymized data may be retained indefinitely

Data We Must Retain

Even after account deletion, we may retain:

• Legal Requirements: Tax records, transaction logs as required by law
• Fraud Prevention: Records of violations or abuse
• Security: Security incident logs
• Backup Systems: Data in secure backups (retained for disaster recovery)

👶 Children's Privacy

Age Restrictions

RovaScore is not intended for children under 13 years of age.

In accordance with the Children's Online Privacy Protection Act (COPPA) and similar regulations worldwide, we do not knowingly collect personal information from children under 13 without parental consent.

If Your Child Uses RovaScore

If you believe your child under 13 has created an account with RovaScore:

1. Please contact us immediately at privacy@rovascore.com
2. We will take steps to delete the child's account and data
3. We will not collect further data from the child

Parental Controls

Parents and guardians can:

• Monitor their child's app usage through device parental control features
• Disable app installations for children on shared devices
• Set app restrictions in device settings
• Review app permissions and adjust as needed

Teen Users (13-18)

For users between 13-18 years of age:

• We provide limited data collection suitable for teenagers
• We do not sell data to third parties for marketing
• Teens can control their own privacy settings
• Parents may request account information

🌍 International Data Transfer

Where Your Data Is Stored

RovaScore operates globally and may transfer your data to countries other than where you reside, including:

• United States - Google Cloud Platform, Firebase infrastructure
• European Union - EU data centers (if available)
• Other Regions - Backend servers and CDN nodes worldwide

Legal Basis for International Transfer

We transfer data internationally based on:

• Contract Necessity: Performance of our services
• Your Consent: Explicit agreement to our Privacy Policy
• Legal Obligation: Compliance with laws and regulations
• Legitimate Interest: Business operations and service improvement

GDPR & Data Protection

For users in the European Economic Area (EEA):

• We comply with GDPR requirements
• We have appropriate safeguards for international transfers
• We use Standard Contractual Clauses (SCCs) with data processors
• You have rights to object, rectify, and erase data

CCPA Compliance

For California residents:

• We comply with the California Consumer Privacy Act (CCPA)
• You have rights to know, delete, and opt-out of data sales
• We do not sell data to unaffiliated third parties for marketing

Data Transfers to Third Countries

When we transfer data to countries without equivalent data protection laws:

• We ensure appropriate safeguards are in place
• We use encryption and secure protocols
• We limit data access to necessary personnel
• We maintain audit trails of all transfers

📞 Contact Us

Privacy Inquiries

If you have questions, concerns, or requests regarding your privacy and this Privacy Policy, please contact us:

Data Protection Officer (DPO)

If you have GDPR-related concerns, you can contact our Data Protection Officer:

dpo@rovascore.com

Regulatory Authorities

You also have the right to lodge a complaint with your local data protection authority:

• European Union: Your national data protection authority
• United Kingdom: Information Commissioner's Office (ICO)
• California, USA: California Attorney General

Response Time

We will respond to privacy-related inquiries within 30 days. For complex requests, we may need additional time, which we will communicate to you.

📝 Changes to This Privacy Policy

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to review this policy periodically.

How We Notify You

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the bottom of this page
• Post a notice on the RovaScore website
• Send an email notification to your registered email address
• Display a notification within the app requesting your review
• Ask for your consent to the updated policy if required by law

Significant Changes

For significant changes that affect your rights or data usage, we will:

1. Provide at least 30 days' notice before the change takes effect
2. Request your explicit consent (if required)
3. Allow you to opt-out or delete your account without penalty

Your Agreement to Changes

By continuing to use RovaScore after changes to this Privacy Policy, you agree to the updated terms. If you disagree with the changes, you may delete your account.