KooraCall Privacy Policy
> DRAFT for the lawyer (counsel must review before publishing). Items marked [counsel] need a legal answer. > Publish the final text on a public web page (for example Google Sites) and give the link to Google Play and Apple. > Keep the in-app Privacy Notice (the legal_documents table) the same as the published text.
Version 1 — last updated: [date of publishing]
1. Who we are
KooraCall is a free football score-prediction game for friends. There is no money involved: no betting, no stakes and no prizes.
KooraCall is made and run by Gaafar Mohammed Gaafar Eisa, an individual developer living in the United Arab Emirates (the "operator", "we"). Contact: gaafarmohd16@gmail.com. [counsel] The operator is a private individual with no company or trade licence. Confirm this is allowed for a free app with no payments, no ads and no prizes, and what licence would be needed before the paid Gold plan (weekly, monthly or yearly) is switched on (Q-31).
2. What we collect
| What | Where it comes from | Why |
|---|---|---|
| Your Google account's name, email address and account ID | Google, when you sign in with Google | To create and protect your account, and to suggest a username |
| Your KooraCall username | You | Shown to other players on leagues and the leaderboard |
| Your confirmation that you are 18 or older, and which version of the Terms and this Policy you accepted, when, and on which app version and platform (Android/iPhone) | You | To prove the age check and your consent |
| Your predictions, points, exact scores and rankings | You and the match results | To run the game |
| Leagues you create or join, and the league names | You | To run friends' leagues |
| Fan Store: the cosmetic items you own (free, earned by playing or bought) and the ones you use, and your wishlist (only you see it) | You | To run the store. The items you wear (avatar, name frame, scarf, stadium banner) are shown to other players next to your username on leaderboards and league tables |
| Friends: the players you add, friend requests you send and receive, and players you block | You | To run friends and chat. Only you see your friends list and blocks |
| Chat messages you send and receive (text only), when they were sent and read | You and your friends | To deliver your messages. Only you and the friend you write to can read a chat. If someone reports a message, the operator reads that message (and keeps a copy) to decide whether it breaks the rules |
| Profile photo (optional): one picture you choose, made into a small square JPEG on your phone (the phone removes location and other hidden data) | You, our team, then other players | To show next to your username. Every photo is checked by our team before anyone else sees it. Other players can report a photo; it is hidden until checked again |
| Clubs, leagues and footballers you follow (optional), and the leagues you pin to the top | You | To show your matches first. No other player can see what you follow |
| Favourite player (optional) and your first-scorer guesses (just for fun) | You | Your favourite player is shown to other players next to your username, like your scarf; you can remove it at any time. First-scorer guesses are private, give no points, and are kept with your predictions |
| Public website leaderboard: your rank and points, and your username only if you switch on "Show my name on the website" (Settings, off by default) | Your predictions | To show the top players on kooracall's website. Without the switch you appear as "A KooraCall player". Guests are never shown |
| Paid plans (once paying opens): which plan you have (Bronze, Gold, Platinum or VIP), monthly or yearly, when it ends, and the store's reference for your subscription. We never see your card details | Apple App Store or Google Play | To give you your plan's extras. Plans never change points or rankings |
| Store purchases (once paying opens): which item or bundle you bought, when, whether it was refunded, and the store's reference for the purchase. We never see your card details | Apple App Store or Google Play | To give you what you bought, and to take it back if the store refunds you. Items never change points or rankings |
| Settings: who can see your picks, who can message you and send you friend requests, which match alerts you want, and your quiet hours | You | To respect your choices; the privacy ones are enforced by our server |
Guest play: a random account ID and a guest_… username | Created when you tap "Play as a guest" | To let you play without Google |
| Technical logs kept by our hosting provider, such as your IP address and the time of a request | Your phone's connection | Security and fixing problems |
We do not collect: your location, contacts, photos, files, phone number, payment card details, advertising IDs or health data. The app has no ads and no advertising or analytics trackers. Match reminders are set on your phone only; nothing about them is sent to us. Your other settings (start screen, time format, spoiler-free mode, vibration, animations and reminder timing) also stay on your phone.
3. Why we may use your data (legal basis)
- To provide the game you asked for (your account, predictions, leagues, leaderboard, store).
- Your consent, which you give when you accept the Terms and this Policy. You can withdraw it by deleting your account.
- Legal obligations, such as keeping a minimal record that an account was deleted. [counsel] Confirm the legal bases under UAE Federal Decree-Law No. 45/2021 and the Saudi PDPL.
4. What other players see
Other players see your username, points, exact scores, rank and the leagues you share with them. In future, they may also see the cosmetic items you choose to use (for example a name frame). They never see your email address or your Google name. Players you are friends with can send you chat messages; players who are not your friends cannot. In Settings you can stop all messages, and choose who can send you friend requests (everyone, people in your leagues, or nobody). Read ticks (✓✓) show a friend when you have opened their messages.
Your picks: by default nobody else sees your predictions. In Settings → Who sees my picks you can let players in your leagues (or also your friends) see them, but only for matches that have already started: nobody ever sees a pick before kick-off.
Crowd totals: once a match has at least 5 predictions, players who have made their own pick (or after the match locks) see how everyone predicted it: home win / draw / away win percentages and the most popular scores. Your prediction is counted in these totals without your name; nobody can see who picked what.
5. Who we share data with
We do not sell your data and do not share it for advertising. We use these service providers, who process data only on our instructions:
- Supabase (database and sign-in). Your data is stored in Frankfurt, Germany (EU).
- Google (Sign in with Google).
- Apple and Google (App Store and Google Play), once paying opens: they take the payment for plans and store items and tell us what you bought (and, for plans, until when).
Our football data provider sends us match fixtures, results, goals and squads, and Wikidata gives us footballers' public X and Instagram accounts. Neither receives any personal data about you. When you tap Follow on X or Follow on Instagram, that app or website opens: what happens there is covered by its own privacy policy. [counsel] Confirm the cross-border transfer safeguards for storing Saudi and UAE users' data in the EU, and the data processing agreements with each provider.
6. How long we keep data
- Your account: until you delete it. Deletion happens straight away (section 8).
- Chat messages: deleted automatically after 12 months, or straight away when you delete them (the text is wiped) or delete your account. Reported messages: a copy is kept for up to 2 years as evidence. [counsel, Q-26]
- Profile photo: kept until you remove or change it, or delete your account (then deleted straight away). A photo our team turns down is deleted at once; only a note that it was turned down stays, for 30 days.
- Guest accounts: deleted when you leave guest mode, or automatically after 30 days without playing. A guest sign-in that never finished is deleted after 1 day.
- After deletion, we keep only a record that "an account was deleted" (with the account's internal ID and the date), for security and legal reasons. It contains no username, email, predictions or other content.
- Backups made by our hosting provider are overwritten in their normal cycle. [counsel/confirm with Supabase: number of days]
7. Your rights
Depending on where you live, you may ask to see, correct or delete your data, to object to some uses, or to withdraw consent. Write to gaafarmohd16@gmail.com, from the email address of your account, and we will answer within 30 days. You can also get a copy of your data yourself at any time: Settings → Download my data saves everything your account holds as a file. You may also complain to the data-protection authority: in the UAE, the UAE Data Office; in Saudi Arabia, the Saudi Data & AI Authority (SDAIA). [counsel]
8. Deleting your account
In the app: Profile → Delete my account → Delete permanently. Guests: Profile → Leave guest mode. This deletes your account, username, predictions, points, store items and purchase records, consents, league memberships, friends, blocks, followed clubs and leagues, profile photo and chat messages (for both sides of each chat) straight away. Leagues you own pass to another member. If you can no longer open the app, email us (section 7).
9. Age
KooraCall is only for people aged 18 or older. If we learn that someone under 18 has an account, we delete it.
10. Security
All connections use encryption (HTTPS), and data is stored encrypted by our hosting provider. Access to the database is limited by strict rules, and players can only change their own data through checked server functions. Chat messages are not end-to-end encrypted: we need to be able to check reported messages within 24 hours, as app-store rules require. The operator does not read chats unless a message is reported, and never uses message text for advertising or analytics.
11. Changes to this Policy
If we change this Policy, the app shows you the new version and asks you to accept it before you continue.