Privacy Policy

Sporkei is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you are under 18, do not use this Service. If we learn that a user is under 18, we will immediately terminate their account and delete their data.

Parents or guardians who believe their minor child has registered should contact us immediately at privacy@sporkei.com. This Service is not directed to children and is not subject to COPPA.

Information you provide directly:

• •Phone number (required — for account verification via SMS)
• •First name and last name
• •Age (stored as a number, not full date of birth)
• •Gender (optional)
• •Profile photo (optional)
• •Sports preferences and skill level
• •ZIP code (optional — for local event discovery)
• •Bio / self-description (optional)
• •Messages sent through in-app chat
• •Support ticket and feedback content

Information collected automatically:

• •Device type, operating system version, app version
• •Usage data (screens visited, features used, session duration, timestamps)
• •Approximate location (only when you grant permission, for event discovery)
• •Crash reports and error logs (via Sentry)
• •Push notification tokens (Expo Push)
• •Device identifiers (for fraud prevention)

Information we do NOT collect:

• •Precise real-time or continuous GPS tracking
• •Biometric or health data
• •Payment card or financial data (processed by Apple/Google)
• •Data from other apps or websites (we do not engage in cross-app tracking)
• •Sensitive personal data (race, ethnicity, religion, political opinions)

We use your information solely to:

• •Create, authenticate, and manage your account
• •Match you with relevant sports events and other players
• •Display your profile to other authenticated users
• •Send SMS verification codes (via Firebase/Google)
• •Send push notifications about events and activity (with your consent)
• •Process subscription payments (via Apple/Google)
• •Monitor and enforce our Terms of Service
• •Detect and prevent fraud, abuse, and safety violations
• •Diagnose technical issues and improve the Service
• •Comply with applicable legal obligations

WE DO NOT:

• •Sell, rent, or trade your personal information to any third party
• •Use your data for third-party advertising or behavioral advertising
• •Use automated profiling to make decisions with legal or significant effects

If you are located in the EU or EEA, we process your personal data on the following legal bases under GDPR Article 6:

• •Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service — account creation, event matching, messaging.
• •Legitimate interests (Art. 6(1)(f)): Fraud prevention, platform security, crash monitoring, platform improvement, and enforcing our Terms.
• •Consent (Art. 6(1)(a)): Push notifications and location access, which you may withdraw at any time via device settings.
• •Legal obligation (Art. 6(1)(c)): Compliance with applicable laws and valid court orders.

You have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

We do not sell, rent, or trade your personal information.

We may share information only as follows:

Other users: Your display name, profile photo, sports preferences, age range, and participation history are visible to other authenticated Sporkei users for the purpose of event matching.

Service providers (data processors):

• •Firebase / Google — authentication, SMS, cloud infrastructure (privacy.google.com/policy)
• •Expo — push notification delivery (expo.dev/privacy)
• •Sentry — crash reporting and error monitoring (sentry.io/privacy)
• •Stripe — subscription payment processing (stripe.com/privacy)
• •Railway / Vercel — server and web hosting

These providers are contractually prohibited from using your data for their own purposes. They act as data processors under our instructions.

Legal compliance: We may disclose information when required by law, valid subpoena, court order, or to protect the safety and rights of Sporkei, our users, or the public.

Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified with 30 days' notice and may delete your account.

Sporkei does NOT track your activity across other companies' apps or websites for advertising purposes. We do not use data collected from the App for targeted advertising. We do not share your data with advertising networks or data brokers.

Any analytics data we collect is used solely to improve the Sporkei app and is not linked to your identity for advertising purposes.

We request approximate location access solely to show relevant sports events near you. We do not track your precise real-time location continuously or in the background. Location data is used only for event discovery and is never shared with advertisers.

You may deny or revoke location permission at any time in your device settings. Core app functionality will still be available without location access.

We may send push notifications about event activity, messages, team challenges, and platform updates. You control notification permissions through your device settings at any time. You may also manage notification preferences within the App (Settings → Notifications).

Disabling push notifications does not affect your account or data.

Washington State (MHMDA, RCW 19.86) & California (CCPA/CPRA):

• •Right to Know: Request disclosure of personal data we hold
• •Right to Access: Obtain a portable copy of your personal data
• •Right to Correct: Request correction of inaccurate data
• •Right to Delete: Request deletion of your personal data
• •Right to Opt Out: Opt out of sale of personal data (we do not sell data)
• •Right to Non-Discrimination: We will not discriminate for exercising any privacy right

To exercise these rights, contact privacy@sporkei.com. We will respond within 45 days as required by Washington and California law.

If you are in the EU, EEA, or UK, you have the following rights:

• •Right of Access (Art. 15): Obtain a copy of your personal data
• •Right to Rectification (Art. 16): Correct inaccurate data
• •Right to Erasure (Art. 17): Delete your data ("right to be forgotten")
• •Right to Restriction (Art. 18): Restrict processing of your data
• •Right to Data Portability (Art. 20): Receive your data in a portable format
• •Right to Object (Art. 21): Object to processing based on legitimate interests
• •Right to Withdraw Consent: Withdraw consent at any time
• •Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany)

To exercise these rights, contact privacy@sporkei.com. We will respond within 30 days (extendable by 2 months for complex requests) as required by GDPR.

Sporkei is operated in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States.

For EU/EEA/UK users: Such transfers are made in accordance with Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate GDPR-compliant safeguards. By using the Service, you acknowledge this transfer.

We implement industry-standard security measures including:

• •Encrypted data transmission (TLS 1.2+ / HTTPS)
• •Encrypted data storage at rest
• •Role-based access controls limiting employee data access
• •Regular security monitoring via Sentry
• •Secure credential storage (iOS Keychain / Android Keystore)

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to notifying affected users of any data breach as required by applicable law.

We retain your personal information for as long as your account is active.

Upon account deletion:

• •Profile information and personal data: deleted within 30 days
• •In-app chat messages: deleted within 30 days
• •Anonymized and aggregated activity data: may be retained indefinitely
• •Legal hold data: retained for the minimum period required by law
• •Backup copies: purged within 90 days

Inactive accounts (no login for 24 months) may be deleted with 30 days' notice.

The web version of Sporkei (sporkei.com) uses browser localStorage to store your authentication session and preferences. We do not use third-party cookies for advertising or tracking. We do not use cross-site tracking technologies.

You may clear localStorage data through your browser settings at any time.

• •Account deletion: Settings → Delete Account (permanent)
• •Location access: Revoke via device settings at any time
• •Push notifications: Toggle via device settings or Settings → Notifications
• •Data access/deletion/correction: Email privacy@sporkei.com
• •Subscription management: Manage via App Store or Google Play
• •Profile visibility: Manage from your Profile settings

The App integrates with third-party services. Your use of features powered by these services is subject to their respective privacy policies:

• •Google / Firebase: policies.google.com/privacy
• •Apple: apple.com/legal/privacy
• •Expo: expo.dev/privacy
• •Sentry: sentry.io/privacy
• •Stripe: stripe.com/privacy
• •OpenStreetMap / Nominatim: osmfoundation.org/wiki/Privacy_Policy

Sporkei is not responsible for the privacy practices of these third parties.

We may update this Privacy Policy periodically. For material changes, we will provide at least 30 days' notice by updating the "Last Updated" date and notifying you through the App. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

EU/EEA users: For changes requiring fresh consent, we will re-present this policy for your explicit agreement.

Data Controller: Sporkei (Washington State, USA)

Privacy inquiries & rights requests:

privacy@sporkei.com

General support:

support@sporkei.com

Legal / DMCA:

legal@sporkei.com

We aim to respond to all privacy inquiries within 10 business days and to rights requests within the timeframe required by applicable law (45 days for US residents; 30 days for GDPR requests).

EU Representative: For GDPR purposes, EU/EEA users may contact us at privacy@sporkei.com. We are working to appoint an EU representative pursuant to GDPR Art. 27.