Join the waitlist
Legal

Privacy Policy

Back to home

This Privacy Policy explains how ProveYa (“ProveYa”, “the app”, “we”, “us”) collects, uses, and shares information when you use the ProveYa mobile application for Android and iOS, and when you visit our website proveya.com. The app lets you create prediction challenges and tournaments, invite friends, and submit predictions (“picks”). Section 10 covers the website.

ProveYa is operated by ProveYa (“the data controller”). If you have any questions, contact us at info@proveya.com.

1. Information we collect

We only collect the information needed to run the app's features. We do not use advertising SDKs, third-party analytics, or crash-reporting/tracking SDKs, and we do not sell your data.

  • Account & authentication: handled by Google Firebase Authentication - email/password, Google sign-in, or Sign in with Apple (on iOS), plus a Firebase user ID and auth token. We never store your password in plain text.
  • Sign in with Apple: if you choose “Hide My Email”, Apple gives us a private relay address instead of your real one, and that is all we ever see. Apple shares your name with us only on your very first sign-in; we store it as your display name and Apple does not send it again. Deleting your account also revokes ProveYa's access to your Apple ID.
  • Profile: your username / display name, optional bio, account type, and friends list.
  • Content you create: challenges and tournaments, predictions/picks, participation and results, invitations, and optional cover images. This content is visible to other participants of the same challenge or tournament.
  • Device & technical: a push-notification token and platform (only if you allow notifications), plus network data such as your IP address used for security and abuse prevention.
  • Sports/match data: public match information (scores, schedules) linked to some challenges - this is general sports data, not personal information about you.
  • Reports and blocks: if you report a user or a challenge, we store the reason you picked, any details you add, and who and what you reported, so we can review it. The person you report is not told who reported them. Your list of blocked users is stored only on your device.

We do not collect precise location, contacts, your photo library (beyond images you add), microphone, or health data. ProveYa does not process payments or collect financial information.

2. How we use your information

  • Create and secure your account and keep you signed in.
  • Provide core features: challenges, tournaments, predictions, results, points, invitations, and friends.
  • Send push notifications you have enabled.
  • Maintain security, prevent abuse, debug, and keep the service reliable.
  • Comply with legal obligations.

For the EEA/UK, our GDPR legal bases are performance of a contract, consent (e.g. push notifications, withdrawable any time), and our legitimate interests in keeping the service secure and functional.

3. How your information is shared

  • Other users: content you create is visible to participants of the relevant challenge or tournament.
  • Google Firebase: we use Firebase Authentication and Cloud Messaging as our service provider.
  • Apple: if you use Sign in with Apple, Apple handles the sign-in and (where you chose it) operates the private email relay.
  • Hosting: our backend and database run on Hetzner infrastructure.
  • Legal reasons: we may disclose information if required by law or to protect our users and the service.

We do not sell your personal data and we do not share it with advertisers.

4. Push notifications

If you grant permission, we register a device token with Firebase Cloud Messaging to send notifications. You can turn them off any time in your device settings; on logout we deactivate the device's push token.

5. Data retention

We keep your account and content while your account is active. If you delete your account, we delete or anonymize the associated personal data, except where we must retain it for legal obligations. Backups and logs are retained for a limited period on a rolling basis.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing (GDPR for the EEA/UK; CCPA/CPRA for California). Contact us at info@proveya.com. You can also delete your account at any time from Menu → Account & Security → Delete account in the app. We will not discriminate against you for exercising these rights.

7. Children's privacy

ProveYa is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children under that age.

8. Security

We use industry-standard measures including encrypted connections (HTTPS/TLS), Firebase authentication, and backend access controls. No method of transmission or storage is 100% secure, but we work to protect your data.

9. International data transfers

Your information may be processed in countries other than where you live, including where our service providers (Google/Firebase, Hetzner) operate. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Our website

The website is a set of static pages. It has no user accounts, and it works without collecting anything about you beyond what any web server needs to deliver a page.

  • Hosting and server logs: the site is hosted on GitLab Pages (GitLab Inc.). When you load a page, the hosting servers process technical data such as your IP address, browser and device type, the page requested and the time of the request. This is needed to deliver the page and to keep the service secure; it is our legitimate interest, and the logs are kept only for a short period by the hosting provider.
  • No cookies, no tracking: the website sets no cookies and stores nothing in your browser. It uses no analytics, advertising, or social-media tracking, and it embeds no third-party content. Fonts and images are served from our own site, so no third party is contacted when you browse it. That is why there is no cookie banner.
  • Waitlist: the “Join the waitlist” form does not store your email address yet. Before we start collecting sign-ups, we will update this section to say who processes the list, how long it is kept, and how to unsubscribe; the only purpose will be to tell you when ProveYa launches, and you will be asked to confirm your address first.
  • Emailing us: if you write to us using a link on the site, we use your message and email address only to reply, and keep them as long as needed to handle your request.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you in the app.

12. Contact us

Questions or requests regarding this policy or your data? Contact ProveYa at info@proveya.com.