{
  "enabled": true,
  "version": "5",
  "title": "Privacy Policy",
  "updated_at": "June 2026",
  "html": "<!DOCTYPE html>\n<html><head><meta charset=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/>\n<style>\n  body { font-family: -apple-system, sans-serif; background: #0C1018; color: #E8EAED; padding: 20px; line-height: 1.6; }\n  h1 { color: #E8FF47; font-size: 22px; }\n  h2 { color: #9CA3AF; font-size: 16px; margin-top: 24px; }\n  h3 { color: #B8BEC8; font-size: 14px; margin-top: 16px; }\n  p, li { color: #C5CAD3; font-size: 14px; }\n  a { color: #60A5FA; }\n  .meta { color: #9CA3AF; font-size: 13px; }\n</style></head><body>\n\n<h1>Privacy Policy - MatchGrid - Fixtures &amp; Scores</h1>\n<p class=\"meta\"><em>Last updated: June 2026</em></p>\n<p>Contact: <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a></p>\n<p>MatchGrid (&quot;we&quot;, &quot;our&quot;, or &quot;the app&quot;) is committed to protecting your privacy. This Privacy Policy explains exactly what data we collect, why we collect it, who we share it with, and what rights you have. It applies to the Android application MatchGrid - Fixtures &amp; Scores.</p>\n<p>By using the app, you acknowledge that you have read and understood this policy.</p>\n<h2>1. Who We Are</h2>\n<p>MatchGrid is a sports utility application that provides live football scores, fixtures, standings, and sports news. Remote configuration files may enable optional features; we do not host media on our own servers.</p>\n<p>For any privacy-related question or request, contact us at <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a>.</p>\n<h2>2. Information We Collect</h2>\n<h3>2.1 Guest Use (No Account Required)</h3>\n<p>The app is fully accessible without registration. If you use the app as a guest, we do not collect your name, email address, or any personally identifying information. In guest mode, only the data described in Sections 2.3 and 2.4 applies.</p>\n<h3>2.2 Information You Provide (Account Registration - Optional)</h3>\n<p>If you choose to create an optional account, we collect:</p>\n<ul>\n<li><strong>Display name</strong> — the name you choose to identify yourself in the app.</li>\n<li><strong>Email address</strong> — used for authentication, account recovery, and service communications.</li>\n<li><strong>Sign-in method</strong> — whether you registered via email/password or Google Sign-In.</li>\n<li>Account data is processed through Google Firebase Authentication and stored in Cloud Firestore. Creating an account is never mandatory to use core app features.</li>\n</ul>\n<p>If you contact us for support, we receive only the information you choose to include in your message.</p>\n<h3>2.3 Information Collected Automatically</h3>\n<p>The following data may be collected automatically during normal app operation:</p>\n<ul>\n<li><strong>Device and app information</strong> — device model, OS version, and app version, used for crash reporting, diagnostics, and compatibility.</li>\n<li><strong>Device identifier</strong> — used for security logging and fraud prevention when security features are enabled.</li>\n<li><strong>Advertising ID (Android)</strong> — the Google Advertising ID may be used by our ad partners (Google AdMob, IronSource/Unity LevelPlay) for ad delivery and measurement.</li>\n<li><strong>IP address and approximate location (country/city)</strong> — derived from your IP when optional security checks are enabled, used solely for fraud and abuse prevention. We do not collect GPS or precise location data.</li>\n<li><strong>Push notification tokens</strong> — if you enable notifications, Firebase Cloud Messaging (FCM) and/or OneSignal will generate a push token used exclusively to deliver alerts you have requested.</li>\n<li><strong>Anonymous usage preferences</strong> — notification toggles and favourite teams may be synced to push notification services as anonymous tags. These tags do not identify you personally.</li>\n</ul>\n<h3>2.4 Data Stored Locally on Your Device</h3>\n<p>The app stores the following data locally (MMKV). This data never leaves your device unless explicitly noted:</p>\n<ul>\n<li>Language, theme, and app preferences</li>\n<li>Favourite teams, players, and competitions</li>\n<li>Onboarding and first-launch selections</li>\n<li>Cached scores, news headlines, and remote configuration files</li>\n<li>Scheduled local match reminder IDs</li>\n<li>Whether optional promotional dialogs have been shown</li>\n<li><strong>You can delete all local data at any time: Android Settings</strong> — Apps - MatchGrid - Storage - Clear Data, or by uninstalling the app.</li>\n</ul>\n<h3>2.5 Remote configuration</h3>\n<p>The app may download JSON configuration files from servers we operate or configure (for example, scores, fixtures, favourites sync settings, notifications, ads configuration, and legal documents). These HTTPS requests use standard technical data your device sends on any web connection (such as IP address and app version). We use this only to deliver and improve the service.</p>\n<p>If you open an external link inside the app, your browser or in-app view connects to that third party under their own privacy policy. We do not control third-party websites.</p>\n<h2>3. How We Use Your Information</h2>\n<p>We use the data described above to:</p>\n<p>Display live scores, fixtures, standings, statistics, and match news</p>\n<p>Deliver optional in-app features enabled by your remote configuration</p>\n<p>Authenticate users who choose to register and maintain their account records</p>\n<p>Deliver push notifications and local match reminders you have enabled</p>\n<p>Serve advertisements through our ad partners (see Section 5)</p>\n<p>Enforce optional security rules, including blocking compromised devices or disallowed networks</p>\n<p>Detect and prevent fraud and abuse</p>\n<p>Diagnose crashes and improve app reliability via Firebase Crashlytics</p>\n<p>We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.</p>\n<h2>4. Third-Party Services</h2>\n<p>The app integrates the following third-party SDKs and services. Each processes data under its own privacy policy.</p>\n<ul>\n<li><strong>Firebase Authentication (Google LLC)</strong> — Optional account login and session management. policies.google.com/privacy</li>\n<li><strong>Cloud Firestore (Google LLC)</strong> — Storage of optional account profile data. policies.google.com/privacy</li>\n<li><strong>Firebase Cloud Messaging (Google LLC)</strong> — Push notification delivery. firebase.google.com/support/privacy</li>\n<li><strong>Firebase Crashlytics (Google LLC)</strong> — Crash reporting and stability diagnostics. firebase.google.com/support/privacy</li>\n<li><strong>Google Sign-In (Google LLC)</strong> — Optional one-tap account login via Google. policies.google.com/privacy</li>\n<li><strong>Google AdMob (Google LLC)</strong> — In-app advertising delivery and measurement. policies.google.com/privacy</li>\n<li><strong>IronSource / Unity LevelPlay (Unity Technologies)</strong> — Ad mediation, rewarded and interstitial ads. unity.com/legal/privacy-policy</li>\n<li><strong>OneSignal (OneSignal Inc.)</strong> — Push notification management and segmentation. onesignal.com/privacy_policy</li>\n<li><strong>Public sports data APIs (Various)</strong> — Live scores, fixtures, standings, news.</li>\n<li><strong>IP lookup / security service (Various)</strong> — Fraud detection and network security checks.</li>\n<li><strong>Operator configuration servers</strong> — Remote app settings and ad configuration.</li>\n</ul>\n<h2>5. Advertising</h2>\n<p>The app displays advertisements mediated through Unity LevelPlay (IronSource), with ad demand sourced from Google AdMob and other demand partners.</p>\n<p><strong>What ad partners may collect</strong></p>\n<p>Your Android Advertising ID (AAID) for ad targeting and measurement</p>\n<p>Device information (model, OS version, screen size) for ad rendering</p>\n<p>Ad interaction data (impressions, clicks) for performance measurement</p>\n<p><strong>Your choices</strong></p>\n<ul>\n<li><strong>Personalised ads opt-out: Android Settings</strong> — Google - Ads - Delete advertising ID</li>\n</ul>\n<p><strong>EEA, UK, and Switzerland users: A Google-certified consent form (UMP/Consent SDK) will be shown on first launch. You may accept or decline personalised advertising. If you decline, you will still see non-personalised (contextual) ads.</strong></p>\n<p>All users: You may withdraw ad consent at any time in the app under Settings - Privacy - Ad Preferences.</p>\n<p>We do not knowingly serve personalised ads to users we identify as being under the age of 13.</p>\n<h2>6. Legal Bases for Processing (EEA / UK / Switzerland)</h2>\n<p>Where the GDPR or UK GDPR applies, we process personal data under the following legal bases:</p>\n<ul>\n<li><strong>Account data (name, email)</strong> — Contract: necessary to provide the account service you requested.</li>\n<li><strong>Crash and device diagnostics</strong> — Legitimate interests: ensuring app stability and reliability.</li>\n<li><strong>Security and fraud prevention</strong> — Legitimate interests: protecting the service and its users.</li>\n<li><strong>Push notification tokens</strong> — Consent: you explicitly opt in to notifications.</li>\n<li><strong>Advertising ID for personalised ads</strong> — Consent: collected via UMP consent form.</li>\n<li><strong>IP-based security logging</strong> — Legitimate interests: fraud detection and abuse prevention.</li>\n</ul>\n<p>You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.</p>\n<h2>7. Data Retention</h2>\n<ul>\n<li><strong>Local device data</strong> — Until you clear app storage or uninstall.</li>\n<li><strong>Account data (Firebase)</strong> — While your account is active, or until deletion is requested.</li>\n<li><strong>Data after account deletion</strong> — Permanently deleted within 30 days of deletion request.</li>\n<li><strong>Security logs</strong> — Limited operational period per operator configuration.</li>\n<li><strong>Push tokens</strong> — Deleted when you disable notifications or delete your account.</li>\n<li><strong>Ad partner data</strong> — Governed by each ad partner's own retention schedule.</li>\n</ul>\n<p>Where law requires us to retain specific records, we retain only the minimum data required and only for the legally mandated period.</p>\n<h2>8. Account Deletion</h2>\n<p>You can request deletion of your account and all associated personal data at any time by sending an email to <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a> from your registered email address with the subject line &quot;Account Deletion Request&quot;.</p>\n<p>Upon receiving your request, we will:</p>\n<ul>\n<li>Verify your identity by confirming the request comes from your registered email address.</li>\n<li>Permanently delete your display name, email address, and all associated Firestore data within 30 days.</li>\n<li>Send you a confirmation email once deletion is complete.</li>\n</ul>\n<p>This deletion method works whether you still have the app installed or have already uninstalled it.</p>\n<h2>9. Your Rights and Choices</h2>\n<p><strong>All users</strong></p>\n<ul>\n<li><strong>Use the full core app as a guest</strong> — no registration required</li>\n<li><strong>Enable or disable push notifications in-app or in Android Settings</strong> — Apps - MatchGrid - Notifications</li>\n<li><strong>Opt out of personalised ads via Android Settings</strong> — Google - Ads</li>\n<li><strong>Clear all local data: Android Settings</strong> — Apps - MatchGrid - Storage - Clear Data</li>\n<li>Request account deletion by email (see Section 8)</li>\n</ul>\n<p><strong>EEA, UK, and Switzerland users - additional rights under GDPR/UK GDPR:</strong></p>\n<ul>\n<li><strong>Access</strong> — request a copy of the personal data we hold about you</li>\n<li><strong>Rectification</strong> — request correction of inaccurate or incomplete data</li>\n<li><strong>Erasure</strong> — request deletion of your personal data (&quot;right to be forgotten&quot;)</li>\n<li><strong>Restriction</strong> — request that we limit how we use your data</li>\n<li><strong>Portability</strong> — receive your data in a structured, machine-readable format</li>\n<li><strong>Object</strong> — object to processing based on legitimate interests</li>\n<li><strong>Withdraw consent</strong> — at any time, for processing based on consent</li>\n<li><strong>Complaint</strong> — lodge a complaint with your national supervisory authority (e.g. the ICO in the UK, CNIL in France, or your local EU DPA)</li>\n</ul>\n<p>To exercise any of these rights, contact us at <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a>. We will respond within 30 days.</p>\n<h2>10. Children's Privacy</h2>\n<p>MatchGrid is not directed at children under the age of 13 (or under 16 in certain EEA countries).</p>\n<p>We do not knowingly collect personal information from children under 13.</p>\n<p>We do not serve behavioural or personalised advertising to users we know to be under 13.</p>\n<p>If you are a parent or guardian and believe your child has provided us with personal data, please contact <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a> immediately. We will delete the information promptly upon verification.</p>\n<h2>11. Data Security</h2>\n<p>We apply the following measures to protect your data:</p>\n<ul>\n<li>HTTPS/TLS encryption for all network communication between the app and our servers and APIs</li>\n<li>Firebase security rules restricting read/write access to account data by authenticated users only</li>\n<li>No plaintext storage of passwords (all authentication handled by Firebase Authentication)</li>\n<li>Crash and security logs access restricted to authorised personnel only</li>\n</ul>\n<p>No electronic transmission or storage method is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.</p>\n<h2>12. International Data Transfers</h2>\n<p>Data processed by the third-party services listed in Section 4 may be transferred to and stored in countries outside your own, including the United States. Where such transfers occur, providers apply appropriate safeguards such as:</p>\n<ul>\n<li>EU Standard Contractual Clauses (SCCs)</li>\n<li>The EU-US Data Privacy Framework (where applicable)</li>\n<li>Other legally recognised transfer mechanisms under GDPR</li>\n</ul>\n<h2>13. Changes to This Policy</h2>\n<p>We may update this Privacy Policy periodically. When we do, the &quot;Last updated&quot; date at the top of this document will change. For material changes that significantly affect your rights or the data we collect, we will notify you via an in-app notice or push notification where possible.</p>\n<p>Continued use of the app after an updated policy is posted constitutes acceptance of the revised terms.</p>\n<h2>14. Contact Us</h2>\n<p>For any privacy question, data access request, or deletion request:</p>\n<p>Email: <a href=\"mailto:timothykidscompan@gmail.com\">timothykidscompan@gmail.com</a></p>\n<p>We aim to respond to all requests within 30 days.</p>\n<p>This policy applies to the MatchGrid Android application (com.matchgrid.football.livescores), documentation package version 1.0.64 and above.</p>\n</body></html>"
}
