Privacy Policy

This Privacy Policy explains how KadroKur("we", "us", or "our"), operated by Dasyatis Studio, collects, uses, and safeguards information when you use the KadroKur mobile application and related services (the "Service").

By creating an account or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect the information required to authenticate you. Depending on the sign-in method you choose:

• Guest: a randomly generated device identifier and a username you pick.
• Apple Sign In: the user identifier returned by Apple, plus your name and email if you choose to share them. We do not receive your Apple ID password.
• Google Sign In: the user identifier returned by Google, plus your name, email, and profile photo URL. We do not receive your Google password.

Gameplay Data

We store data you generate while playing, such as your team selections, lineup predictions, formations, scoring history, badges, room memberships, chat messages, and leaderboard rankings. This data is required to run the game.

Device and Technical Information

• Device model, operating system version, app version, and language preference.
• Firebase Cloud Messaging (FCM) token, used to send you push notifications.
• IP address and request metadata, used for rate limiting, security, and abuse prevention.

Purchase Information

If you buy a Season Ticket or other in-app item, the transaction is processed by Apple. We receive a receipt identifier from RevenueCat in order to grant you the entitlement. We do not receive or store your payment card details.

Information We Do Not Collect

KadroKur does nottrack you across other companies' apps or websites, and we do not sell your personal data. We do not use advertising SDKs.

2. How We Use Your Information

• Operate, maintain, and improve the Service.
• Authenticate you and keep your account secure.
• Score predictions, compute leaderboards, and deliver in-game features (rooms, chat, challenges, badges).
• Send push notifications you have not opted out of (match reminders, lineup lock warnings, room activity, challenge results).
• Respond to support requests and enforce our Terms of Use.
• Detect, prevent, and respond to fraud, abuse, and security incidents.

3. Third-Party Services

We rely on a small number of processors to run the Service:

• Apple — Sign In with Apple and App Store purchases.
• Google — Sign In with Google.
• Firebase (Google) — push notifications via FCM.
• RevenueCat — purchase receipt validation.
• API-Football (API-Sports) — football data. We send team, player, and fixture identifiers; we do not send your personal information.
• Amazon Web Services (AWS Lightsail, eu-central-1) — server and database hosting. Your data is stored in Frankfurt, Germany.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except for anonymized gameplay logs we keep for analytics and leaderboard integrity, and any records we must keep to comply with legal obligations.

5. Your Rights

You may, at any time:

• Access, correct, or update your profile information inside the app.
• Delete your account from Settings → Account → Delete Account. Deletion is permanent.
• Turn off push notifications in your device settings or inside the app.
• Request a copy of your data, or request deletion, by emailing support@kadrokur.com.

If you are in the European Economic Area, the United Kingdom, or another region with equivalent laws, you also have the right to object to or restrict processing, and the right to lodge a complaint with your local data protection authority.

6. Children

KadroKur is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

We use industry-standard measures to protect your data in transit (TLS) and at rest. Access to production systems is restricted, rate-limited, and audited. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

Our servers are located in the European Union. If you access the Service from outside the EU, your information will be transferred to and processed on servers in the EU.

9. Changes to This Policy

We may update this Policy from time to time. If the changes are material, we will notify you in the app or by email before they take effect. The "Last updated" date at the top of this page always reflects the latest revision.

10. Contact

Questions about this Privacy Policy or your data? Email us at support@kadrokur.com. The data controller is Dasyatis Studio.