Privacy Policy

VresParea is the data controller for personal data processed through the App.

• ● Notification permission: to send message, invitation, and announcement notifications
• ● Photo library/media permission: only if you choose to upload a profile image

The App does not require background GPS location permission for core functionality.

• ● Directly from you (account creation, profile setup, messaging, reports, game/tournament actions)
• ● From authentication providers when you choose social login (Google)
• ● Automatically from your use of the App and backend services

• ● Create and maintain your account
• ● Provide social features (profiles, athlete discovery, connections, messaging)
• ● Operate games, tournaments, invitations, and participation records
• ● Deliver push notifications you opt into
• ● Protect users, enforce terms, and handle moderation reports
• ● Provide support and troubleshoot issues
• ● Meet legal obligations and defend legal claims

We do not sell personal data. We do not use your data for third-party behavioral advertising.

• ● Contract necessity: to provide App features you request
• ● Legitimate interests: to secure the service, prevent abuse, and improve reliability
• ● Consent: where required (e.g., optional notification permission)
• ● Legal obligation: where processing is required by law

• ● Profile fields and sports details may be visible to other users
• ● Location and age visibility can be limited by your privacy settings
• ● Content you post to games/tournaments is visible to relevant users
• ● Messages are visible to participants in the conversation

• ● Service providers: Supabase (auth, database, storage), Expo (push notifications), Google (OAuth sign-in)
• ● Legal and safety disclosures: if required by law or to protect users
• ● Business transfer: if ownership changes, data may transfer subject to applicable law

• ● Account/profile data: retained while your account is active
• ● User content: retained until deletion, moderation action, or account deletion
• ● Push tokens: retained until replaced or account deletion
• ● Support communications: retained as needed

When you request account deletion, we delete or de-identify personal data within a reasonable period.

• ● Encrypted data in transit (HTTPS/TLS)
• ● Authentication and access controls
• ● Row-level security rules in the database
• ● Admin-restricted tools for moderation

No system is completely secure. If you believe your account is compromised, contact vresparea@gmail.com immediately.

Depending on your jurisdiction, you may have rights to:

• ● Access, correct, delete, or export personal data
• ● Restrict or object to certain processing
• ● Withdraw consent where processing is consent-based
• ● Appeal a privacy decision where local law provides that right

You can manage visibility in the App Privacy screen. To submit a privacy request, email: vresparea@gmail.com

• ● We do not sell personal information
• ● We do not share personal information for cross-context behavioral advertising
• ● You may request access, correction, deletion, and data portability by contacting us
• ● We will not discriminate against you for exercising privacy rights

Your data may be processed in countries other than your own through our service providers. Where required, we use appropriate safeguards for cross-border transfers.

The App is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us.

We may update this Privacy Policy from time to time. We will update the "Last updated" date and provide notice before material changes take effect.