SCORE BUDDY PRIVACY POLICY

Original Effective Date: April 18, 2026
Effective Date of This Version: August 20, 2026
Last Updated: August 20, 2026
Service: Score Buddy (also stylized as "ScoreBuddy") mobile applications and scorebuddy.pro website (the "Service", "App", or "Website", as applicable)
Operator / Privacy Contact: Fikret Anıl Haksever, a sole proprietorship trading as Forge Zero ("Company", "we", "us", or "our")
Registered Address: Sahil Mah. Kaptan D. 4/5, Beylikdüzü, İstanbul, Türkiye
Privacy Contact: [email protected]

This Privacy Policy explains how Score Buddy processes information when you use the iOS or Android App or visit scorebuddy.pro. Score Buddy does not require a traditional user account and does not ask you to create a profile with a name, email address, phone number, or password. The Service primarily processes limited technical and pseudonymous information needed for operation, security, diagnostics, notifications, analytics, and subscription entitlement as described below.

Score Buddy's mobile applications are not available for distribution in Türkiye through the Apple App Store or Google Play. Türkiye is disabled as a mobile-app distribution territory.

Terms of Use: The contractual terms governing the App are available at the Score Buddy Terms of Use.

1. Responsible Operator

The operator responsible for the data practices described in this Policy is:

• Fikret Anıl Haksever, trading as Forge Zero
• Address: Sahil Mah. Kaptan D. 4/5, Beylikdüzü, İstanbul, Türkiye
• Email: [email protected]

2. Information We Process

2.1 Information we do not ask you to provide

Score Buddy currently has no conventional account-registration system. We do not ask you to submit a name, email address, phone number, postal address, social profile, password, payment-card number, or bank-account information to use the App or browse the Website.

Payment-card and bank details for in-app purchases are handled by Apple or Google, not by Score Buddy.

2.2 Technical, installation, and security data

Score Buddy does not retain full or raw end-user IP addresses in its application database or application security/ticket logs. A raw IP address is processed transiently by our application and network infrastructure where technically necessary to establish and secure a connection, apply short-lived rate limiting, detect abuse, and create the privacy-minimized security records described below. Network and infrastructure providers such as Cloudflare and Hetzner may also process IP addresses and related connection/security data under their respective services and terms.

For security and abuse-prevention purposes, limited application records may contain:

• a keyed cryptographic identifier derived from an IP address, such as an HMAC value, which allows repeated security events involving the same network address to be correlated without storing the raw address;
• a truncated or masked network prefix, such as 203.0.*.*, for human-readable security review;
• a keyed cryptographic identifier and/or masked form of an installation identifier;
• security/session tokens and App Check information;
• platform, app version, language, timestamps, request or service status, user-agent, and technical error information; and
• other limited technical or pseudonymous information needed to operate and protect the Service.

These technical records do not contain a Score Buddy account name, email address, phone number, postal address, or other directly identifying account profile because Score Buddy does not operate such an account system. Technical or pseudonymous identifiers can distinguish an app installation, network, browser, or service session, but Score Buddy does not use them for the purpose of identifying a user by civil identity.

We use this information to operate the App, Website, and API, authenticate legitimate App traffic, prevent abuse, troubleshoot failures, investigate security events, maintain longitudinal security and service statistics, protect service integrity, and comply with applicable legal obligations.

Our API and Website are protected by Cloudflare and our application/API infrastructure is hosted in Germany using Hetzner Online GmbH infrastructure. Our application infrastructure does not persist full or raw end-user IP addresses as application records. Cloudflare, Hetzner, and other network providers may still process connection information as technically necessary to provide their network, hosting, security, and availability services.

2.3 App analytics and product-usage data

Score Buddy uses Google Firebase Analytics to understand whether the App works as intended and how features are used. Analytics may include technical or pseudonymous app identifiers, screen and feature interactions, app settings or state, and identifiers associated with content or product interactions such as leagues, teams, matches, campaigns, paywall events, purchase outcomes, or entitlement state.

We do not use Score Buddy analytics to sell personal information or to build third-party advertising profiles. Score Buddy does not currently include third-party advertising.

2.4 Crash and performance diagnostics

Score Buddy uses Firebase Crashlytics and Firebase Performance Monitoring to diagnose crashes, errors, slow operations, and technical reliability problems. These services may process technical or pseudonymous identifiers, device/app technical information, crash traces, performance measurements, and information associated with a fault or performance event.

2.5 Notifications

If you enable notifications, Score Buddy uses Firebase Cloud Messaging and topic subscriptions to deliver notifications relevant to language, selected teams/favourites, subscription segment, and notification preferences.

Notification systems may process limited technical or pseudonymous information such as an installation or messaging identifier, platform, language, app version, notification setting, subscription segment, subscribed topics, status, and last-seen timestamps. Disabling notification permission at operating-system level stops notification presentation according to the controls provided by iOS or Android.

2.6 Subscriptions and in-app purchases

Score Buddy uses Apple In-App Purchase on iOS and Google Play Billing on Android. We also use RevenueCat to manage subscription entitlement state across the App.

RevenueCat may process a technical or pseudonymous app-user identifier together with platform/store information, product identifiers, purchase and renewal events, entitlement status, subscription-management information, and related technical data. Full payment-card and bank details are handled by Apple or Google and are not provided to Score Buddy for subscription entitlement management.

The localized price, billing period, trial or introductory offer (if any), renewal terms, and transaction are controlled and presented through the relevant app-store billing system.

2.7 Website analytics, cookies, and local storage

The Website uses Google Analytics to measure aggregate Website use and understand which pages and features are useful. Google Analytics is treated as non-essential analytics on scorebuddy.pro.

We do not load the Google Analytics tag or intentionally send Website analytics data to Google Analytics until you explicitly select Accept analytics in the Website privacy control. If you reject non-essential analytics, the Google Analytics tag is not loaded by our Website. You can change your choice later through Cookie settings in the Website footer.

If you accept Website analytics, Google Analytics may process information such as page or route visits, browser and device characteristics, referrer information, approximate geographic information derived from network data, and analytics identifiers or cookies used by Google Analytics. Google receives network information, including an IP address, transiently when your browser connects to Google's Analytics infrastructure. We use Website analytics for audience measurement, reliability, and product/Website improvement, not for third-party behavioural advertising.

We store your analytics-consent choice in your browser's localStorage so that the Website can remember and respect the choice on later visits. This preference storage is used to implement your privacy choice and is not used for advertising. If you withdraw analytics consent, the Website disables further Google Analytics measurement in the current session and attempts to remove Google Analytics cookies accessible to scorebuddy.pro. Browser, provider, or technical limitations may affect deletion of data already transmitted before withdrawal.

3. Why We Process Information and Legal Bases

We process information for the following purposes:

• Providing the Service and performing the user relationship: delivering requested App and Website features, API responses, notifications, premium access, purchase restoration, and subscription entitlement handling.
• Security and abuse prevention: authenticating App requests, using App Check and installation-level controls, detecting misuse, rate abuse, automated scraping, fraud, or attacks, and protecting the Service.
• Reliability, statistics, and product improvement: measuring App and Website feature/service usage, maintaining longitudinal operational and security statistics, diagnosing crashes and performance problems, and understanding whether changes work as intended.
• Compliance and legal claims: retaining or producing records where required by law, responding to lawful requests, and establishing, exercising, or defending legal rights.
• Consent-based processing where used: for Website Google Analytics and for other processing where we request consent.

For processing that requires a stated legal basis, the basis depends on the activity and includes performance of our contract with you or taking steps you request, legitimate interests in operating, securing, preventing abuse of, and improving the Service where such a basis is recognized, compliance with legal obligations, and consent where we request it. Website Google Analytics is activated only after the Website records your affirmative analytics choice. Acceptance of the Terms of Use is not treated as blanket consent for processing that requires separate consent.

4. Service Providers and Recipients

We use service providers where reasonably necessary to operate Score Buddy. Relevant recipients may include:

• Cloudflare: reverse proxy, network security, abuse prevention, performance, and availability for the App/API and Website;
• Hetzner Online GmbH: application/API hosting infrastructure in Germany;
• Google / Firebase: Firebase Installations, App Check, Analytics, Crashlytics, Performance Monitoring, Remote Config, Cloud Messaging, and related mobile infrastructure;
• Google Analytics: consent-based Website audience and usage measurement;
• RevenueCat: subscription and entitlement infrastructure;
• Apple: App Store distribution and iOS in-app purchase processing; and
• Google: Google Play distribution and Android in-app purchase processing.

Some providers process information for us under their service, contractual, or platform terms. Others process information independently for their own platform functions. Their own terms and privacy documentation apply to processing they perform in their own capacity.

We may also disclose information where required by applicable law, a valid legal process, or where reasonably necessary to protect the rights, security, and integrity of users, the Service, or the Company.

We do not sell personal information. We do not share personal information for cross-context behavioural advertising.

5. International Processing

Important parts of the Service are provided through infrastructure and service providers operating in more than one country. Our application/API infrastructure is hosted in Germany by Hetzner Online GmbH. Cloudflare operates a global network, and Google/Firebase, Google Analytics, RevenueCat, Apple, and Google Play may process limited technical, pseudonymous, network, diagnostic, messaging, analytics, subscription, or store-related data in locations described in their respective service terms and privacy documentation.

Where GDPR applies to a transfer of personal data outside the European Economic Area (EEA) for which we are responsible, we use an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, as applicable. You may contact us at [email protected] for information about safeguards relevant to a particular transfer.

The contractual, platform, and legal arrangements relevant to international processing depend on the provider, service, and location involved. Provider terms and privacy documentation describe their own international processing arrangements. Questions about the providers used by Score Buddy may be sent to [email protected].

6. Retention

Score Buddy applies different retention criteria according to the purpose and sensitivity of the information. The Service does not maintain a conventional identity profile containing a user's name, email address, phone number, or postal address. Most Score Buddy-controlled application records are technical, security, operational, or pseudonymous records.

• Application security and ticket/log records: full or raw end-user IP addresses are not persisted. Security/event records may contain keyed cryptographic identifiers derived from IP addresses or installation identifiers, masked network prefixes, user-agent information, timestamps, statuses, and related technical fields. These records may be retained for extended periods, including for the life of the Service where reasonably necessary, to preserve abuse and security history, support blocking and incident investigation, maintain longitudinal operational/statistical integrity, detect recurring misuse, and establish, exercise, or defend legal claims.
• Statistical retention and data minimization: where identifier-level detail is no longer needed for an operational, security, fraud-prevention, legal, or statistical-integrity purpose, records may be aggregated, de-identified, or reduced. Aggregated or otherwise non-identifying statistical information may be retained indefinitely for historical analysis, service measurement, and product development.
• Operational installation/notification records: retained while reasonably necessary for the associated installation, notification delivery, security, synchronization, troubleshooting, and longitudinal service measurement, subject to legal or security requirements.
• Firebase analytics, diagnostics, and performance data: retained according to our Firebase configuration and the retention capabilities applicable to the relevant Firebase service.
• Website analytics and consent preference: Website Google Analytics data is retained according to our Google Analytics configuration and Google's applicable retention capabilities. The local analytics-consent preference remains in the browser until it is changed, cleared, or otherwise removed by the browser/user.
• RevenueCat subscription records: retained as necessary to operate and restore subscription entitlements, maintain transaction history, prevent fraud, and meet applicable financial/legal obligations, subject to RevenueCat's platform capabilities and our configuration.
• App-store transaction records: Apple and Google retain store/payment records under their own terms and legal obligations.

Retention may change as the Service, security systems, provider capabilities, and operational needs evolve. Where identifier-level detail is no longer reasonably needed for an operational, security, fraud-prevention, legal, or statistical-integrity purpose, records may be deleted, reduced, de-identified, aggregated, or allowed to expire. Records may be retained longer where reasonably needed for security history, disputes, legal claims, fraud prevention, or legal obligations.

7. Security

We use reasonable technical and organisational measures designed to protect the information processed through Score Buddy. These include encrypted network transport, Cloudflare security controls, application-level request validation, Firebase App Check, installation/session controls, access restrictions, and other measures appropriate to the Service.

No internet or software system can be guaranteed to be completely secure. Any breach notification required by applicable law will be handled in accordance with that law.

8. Your Privacy Rights

Depending on the law applicable to your request, you may have rights to request information about processing, access personal data, correct inaccurate data, request deletion or restriction, object to certain processing, request portability, withdraw consent where processing is based on consent, and complain to a competent data-protection authority.

Because Score Buddy does not use a conventional account, we may need limited information from you to locate a device- or installation-level record without exposing another user's data. In some cases we may be unable to reliably link a pseudonymous provider record to you without an identifier available from your device or purchase receipt.

For Website Google Analytics, you can withdraw future analytics consent at any time through Cookie settings in the Website footer.

To exercise a privacy right, contact [email protected]. We may ask for information reasonably necessary to verify the request. We will respond as required by the law applicable to the request.

9. Children

Score Buddy is not directed to children. The App is intended for users who have reached the minimum age required to use the Service and enter into the relevant app-store transaction in their jurisdiction. We do not knowingly design the Service to collect personal information from children for advertising or profiling.

If you believe a child has provided or generated personal information through the Service contrary to applicable law, contact [email protected].

10. Apple and Google Platform Data

Apple and Google process information in connection with App Store / Google Play accounts, downloads, purchases, fraud prevention, device services, and other platform functions. Some of that platform data may be made available to us or to service providers such as RevenueCat in the form of transaction, entitlement, device, diagnostics, or usage information; other platform information remains controlled by Apple or Google.

Their independent processing is governed by their own privacy notices and platform terms. This Privacy Policy describes the data Score Buddy and its integrated service providers process in connection with our App; it does not replace Apple or Google's own notices for their independent platform processing.

11. Changes to This Privacy Policy

We may update this Privacy Policy when the App, Website, service providers, data practices, laws, or platform requirements change. The top of this page shows the effective date of this version and the date it was last updated.

For material changes, additional notice will be provided where required by applicable law or platform policy.

12. Contact

For privacy or data-protection inquiries:

• Operator: Fikret Anıl Haksever, trading as Forge Zero
• Address: Sahil Mah. Kaptan D. 4/5, Beylikdüzü, İstanbul, Türkiye
• Email: [email protected]

For the rules governing use of the App, subscriptions, billing, disclaimers, and platform-specific license terms, see the Score Buddy Terms of Use.