VibeScore

Privacy Policy Last updated: June 2025 APP DEV MASTERS LTD (“we”, “us”, “our”) operates the VibeScore mobile application. This Privacy Policy explains what data we collect, why we collect it, how it is stored and shared, and your rights over it. By using VibeScore you agree to this policy. 1. Who We Are APP DEV MASTERS LTD Company number: 14989815 Email: info@appdevmasters.com We are registered in England and Wales and are the data controller for personal data processed through VibeScore. 2. Data We Collect Account data — when you create an account we collect your display name, a unique username (handle), and, where provided, your email address. Sign in with Apple may share a relay email address rather than your real one; we store whatever Apple provides. Match data — every match you score is saved locally on your device using SwiftData and, when you are signed in, synced to our Firebase Firestore database. This includes player names, scores, game sequences, match duration, and the date and time of play. Team data — team names, the list of member user IDs, and the join code for each team you create or belong to. Notification token — your Firebase Cloud Messaging (FCM) device token, used to deliver push notifications to your device. Notification preferences — the specific notification types you have enabled or disabled (match scheduled, match result, teammate match start, teammate match result). Live match data — when you score a match, real-time scores (current point and game totals, server index) are written to Firebase Realtime Database so teammates can follow along. This data is automatically deleted from our servers within 60 seconds of the match ending. Scheduled match data — if you schedule a match with a teammate, we store the scheduled date and time, an optional location label, and the user IDs of both players so we can send a reminder notification. Device and usage data — operating system version and device type, collected automatically by Firebase to help us diagnose crashes and performance issues. 3. How We Use Your Data • To provide and personalise the VibeScore service, including syncing your match history across devices and after reinstallation. • To display your profile (name, handle, win/loss statistics) to teammates, subject to your privacy setting. • To allow you to join and collaborate with teams. • To send push notifications about scheduled matches, results, and teammates’ matches — only for the notification types you have turned on. • To broadcast live match scores to teammates who are watching. • To verify and manage your auto-renewable subscription via Apple’s in-app purchase system. • To restore your match history if you reinstall the app or switch devices. 4. Legal Bases for Processing (UK GDPR) Performance of a contract — processing your account data, match data, and team data is necessary to provide the service you signed up for. Legitimate interests — we have a legitimate interest in keeping the service running reliably and securely, including using device and usage data for diagnostics. Consent — push notifications are only sent where you have explicitly granted permission through your device’s notification settings. 5. Third-Party Services Firebase (Google LLC) — we use Firebase Authentication for sign-in, Firebase Firestore for cloud storage of profiles, matches, teams, and handles, Firebase Realtime Database for live match broadcasting, and Firebase Cloud Messaging for push notifications. Firebase processes data on our behalf under Google’s Data Processing Addendum. Data may be stored on servers in the United States and European Economic Area. Google’s privacy policy is available at policies.google.com/privacy. Apple Inc. — subscriptions are purchased and managed entirely through Apple’s App Store. We receive only a subscription status indicator from StoreKit; we never see your payment card details. Apple’s privacy policy is available at apple.com/legal/privacy. 6. Data Sharing We do not sell your personal data to third parties. Your profile (display name and handle) and match results may be visible to other VibeScore users who are members of the same team, depending on your profile privacy setting (Public or Private). We may disclose data if required by law or to protect our legal rights. 7. Profile Privacy Settings You can set your profile to Public or Private at any time in the app. When set to Private, your profile is not discoverable by other users. Match results you are tagged in may still be visible to the teammate who scored that match. 8. Data Retention Your account data, match history, and team data are retained for as long as your account exists. Live match broadcast data is automatically deleted within 60 seconds of a match ending. Scheduled match data is retained for 30 days after the scheduled date. If you delete your account (Settings → Delete Account), your user profile, match history, handle reservation, and team membership records are permanently and irreversibly deleted from our servers within 30 days. Local SwiftData records on your device are not automatically removed; you can clear these by deleting the app. 9. Your Rights Under UK GDPR and applicable data protection law, you have the right to: Access — request a copy of the personal data we hold about you. Rectification — ask us to correct inaccurate data. Most profile data can be corrected directly in the app. Erasure — request deletion of your data. You can delete your account at any time in Settings. Restriction — ask us to restrict processing in certain circumstances. Portability — request a machine-readable copy of data you have provided. Object — object to processing based on legitimate interests. To exercise any right other than account deletion, contact us at info@appdevmasters.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk). 10. Children’s Privacy VibeScore is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has created an account, please contact us at info@appdevmasters.com and we will delete the account promptly. 11. Data Security All data in transit is encrypted using TLS. Firebase Firestore and Realtime Database enforce authentication-based access rules so that users can only read and write their own data or data they are authorised to access. We regularly review our security measures. 12. International Transfers Firebase may store and process data outside the UK or EEA. Google participates in the UK International Data Transfer Agreement and the EU Standard Contractual Clauses framework, providing appropriate safeguards for international transfers. 13. Changes to This Policy We may update this Privacy Policy to reflect changes to the app or applicable law. When we make material changes, we will notify you via an in-app notice or, where appropriate, by email. The “last updated” date at the top of this page will always reflect the most recent version. Continued use of VibeScore after changes take effect constitutes acceptance of the revised policy. 14. Contact APP DEV MASTERS LTD Company number: 14989815 Email: info@appdevmasters.com