Privacy Policy

We operate a website and a mobile application that provide live scores, statistics, odds and other information about sport (together, the "platform"). We act as the data controller for the personal data described in this policy. This means we decide why and how your data is processed, and we are responsible for it.

2.1 Information you give us

• Account data. Your e-mail address and password (stored only as a cryptographic hash — we never see your password), plus the display name and country you choose.
• Preferences. Favourite teams, leagues and matches, saved filters, pinned competitions, alert settings and other choices you make in the app.
• Messages you send us. The content of e-mails or support requests, including anything you choose to include in them.
• Payment data. If you buy a subscription, our payment providers collect your payment details directly. We receive only confirmation of the transaction, the plan purchased and its status — never your full card number.

2.2 Information we collect automatically

• Technical data. IP address, approximate location derived from it (city or region level, never precise GPS), device type, operating system, browser type and version, language, and app version.
• Usage data. Which screens you open, which matches you view, and how you navigate the platform, collected through Google Analytics.
• Push token. If you allow notifications, Firebase Cloud Messaging assigns your device a token so we can deliver alerts. The token identifies the device, not you by name.
• Local storage. Your browser or device stores your settings (favourites, filters, session token) locally so the app works between visits. See our Cookie Policy.
• Install attribution. If you install our app after clicking one of our download links, our attribution partner records which campaign brought you, without identifying you personally.

2.3 What we do not collect

Under the GDPR we must have a legal basis for each purpose. Here is ours:

Purpose	Data used	Legal basis
Run the platform, keep you logged in, remember your settings	Account data, preferences, technical data	Performance of a contract
Create and manage your account	Account data	Performance of a contract
Process subscription payments	Account data, transaction data	Performance of a contract
Send match alerts and notifications you asked for	Push token, preferences	Consent (device permission)
Send newsletters and product news	E-mail address	Consent, withdrawable at any time
Understand how the platform is used and improve it	Usage and technical data	Legitimate interest in improving our service
Keep the platform secure, prevent abuse and fraud	Technical data, logs	Legitimate interest in protecting the service
Answer your messages and support requests	Communication data	Legitimate interest in assisting users
Comply with tax, accounting and legal obligations	Transaction data	Legal obligation
Establish or defend legal claims	Relevant data for the claim	Legitimate interest in protecting our rights

Where we rely on legitimate interest, you have the right to object — see Section 11.

We share personal data only with service providers who process it on our instructions, and only as far as needed. We do not sell personal data and we do not share it with data brokers.

Provider	What they do for us	Their privacy policy
Google Analytics	Usage statistics	policies.google.com/privacy
Firebase Cloud Messaging (Google)	Delivery of push notifications	firebase.google.com/support/privacy
AppsFlyer	App install attribution	appsflyer.com/legal/privacy-policy
Stripe	Card payments	stripe.com/privacy
PayPal	Payments	paypal.com/privacy
Pay4Fun	Payments	pay4fun.com
Hetzner Online GmbH	Server hosting (Germany and Finland)	hetzner.com/legal/privacy-policy
Cloudflare	Content delivery and protection against attacks	cloudflare.com/privacypolicy
Google Play / Apple App Store	App distribution and in-app subscriptions	See each store's policy

We may also disclose data when the law requires it — for example in response to a valid order from a public authority — or to protect our rights, safety, or those of our users.

If this changes, we will update this policy before advertising starts, describe the partners involved, and provide the opt-out choices required by law.

We use cookies and equivalent storage on your device for two purposes: to keep the platform working (your session, your settings) and to measure usage through Google Analytics. Details of each cookie are in our Cookie Policy.

You can clear or block cookies in your browser settings, and you can opt out of Google Analytics on every website using Google's opt-out browser add-on. Blocking essential storage will log you out and reset your preferences.

We send notifications about matches, goals and features you have chosen to follow. You can stop them at any time:

• Android: Settings › Apps › SokkerPRO › Notifications.
• iPhone / iPad: Settings › Notifications › SokkerPRO.
• Browser: the site permissions menu of your browser.
• In the app: the alerts screen, where you can disable individual alert types.

Turning notifications off stops delivery immediately. The push token becomes invalid and is discarded.

We send service e-mails (for example password resets or subscription receipts) because they are necessary to provide the service. You cannot opt out of these while you have an account.

Marketing e-mails and newsletters are separate, and you can leave at any time by clicking Unsubscribe at the bottom of any such e-mail, or by writing to [email protected]. When you unsubscribe we keep your address on a suppression list, for the sole purpose of making sure we do not contact you again.

Data	Retention
Account and preferences	While your account exists; deleted within 30 days of a deletion request
Push token	Until you disable notifications or the token expires
Newsletter suppression list	Kept indefinitely, so that your unsubscribe is permanently honoured
Analytics data	Up to 14 months, per Google Analytics retention settings
Server and security logs	Up to 12 months
Invoices and transaction records	As required by Portuguese tax law (currently 10 years)

Our servers are located in the European Union. Data is transmitted over encrypted connections (HTTPS), passwords are stored only as hashes, and access to production systems is restricted to a small number of authorised people.

Some of our providers — such as Google, Stripe, PayPal and AppsFlyer — may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard under Chapter V of the GDPR.

No system is perfectly secure. If a data breach occurs that is likely to result in a high risk to your rights, we will notify you and the competent authority as required by law.

Depending on where you live, you have some or all of the following rights:

• Access — a copy of the personal data we hold about you.
• Rectification — correction of data that is wrong or incomplete.
• Erasure — deletion of your data, where we have no overriding reason to keep it.
• Restriction — pausing our use of your data while a dispute is resolved.
• Portability — your data in a structured, machine-readable format.
• Objection — to processing based on legitimate interest, and to direct marketing at any time.
• Withdrawal of consent — at any time, without affecting what was done before.
• Complaint — to your data protection authority (see Section 16).

You can delete your account and the personal data attached to it in either of these ways:

• In the app or website, open your profile, choose Delete account and type REMOVE to confirm. The deletion is immediate and cannot be undone.
• Or write to [email protected] from your registered e-mail address.

We complete the deletion within 30 days. Your account, preferences and push tokens are removed. We keep only what the law requires us to keep — mainly invoices and transaction records for tax purposes — and your e-mail address on the newsletter suppression list if you had unsubscribed, so that we do not e-mail you again.

Deleting your account does not automatically cancel a subscription bought through Google Play or the App Store. Cancel it in the store as well, otherwise billing continues.

We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, write to [email protected] and we will delete it.

The platform contains links to third-party sites, including bookmakers and news sources. We do not control them, and this policy does not apply to them. Read their privacy policies before providing them with personal data.

We update this policy when our practices change. The date at the top always shows the current version. If a change materially affects your rights — for example a new purpose or a new category of recipient — we will tell you in the app or by e-mail before it takes effect, and where the law requires it, we will ask for your consent.

If you are not satisfied with our response, you may complain to a supervisory authority:

• Portugal (our lead authority): Comissão Nacional de Proteção de Dados (CNPD) — cnpd.pt
• Brazil: Autoridade Nacional de Proteção de Dados (ANPD) — gov.br/anpd
• Elsewhere in the EEA or the UK: the authority in your country of residence.

If you are in the EEA or the UK, the GDPR (or UK GDPR) applies to you and the rights in Section 11 are legal entitlements, not courtesies. The controller is REALIZEGREEN - UNIPESSOAL LDA, at the address in Section 16. We have not appointed a Data Protection Officer, as we are not required to.

Automated decision-making: we do not make decisions producing legal or similarly significant effects about you by automated means, and we do not carry out profiling for such purposes.

If you are in Brazil, Lei nº 13.709/2018 (LGPD) applies. You have the rights of confirmation of processing, access, correction, anonymisation or deletion of unnecessary data, portability, information about with whom we share data, information about the consequences of refusing consent, withdrawal of consent, and review of automated decisions.

Our legal bases under the LGPD correspond to those in Section 3: execution of a contract (art. 7, V), consent (art. 7, I), legitimate interest (art. 7, IX) and compliance with a legal obligation (art. 7, II). Requests go to [email protected] and are answered within the legal deadlines. Complaints may be filed with the ANPD.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and why, to request deletion or correction, and not to be discriminated against for exercising these rights. The categories we collect are listed in Section 2, the purposes in Section 3, and the recipients in Section 4. To make a request, write to [email protected]. You may use an authorised agent, in which case we will ask for proof of authorisation.