Privacy Policy
Last updated: 31.07.2026
This Privacy Policy explains how Proveya (“Proveya”, “the app”, “we”, “us”) collects, uses, and shares information when you use the Proveya mobile application for Android and iOS. The app lets you create prediction events and tournaments, invite friends, and submit predictions (“picks”).
Proveya is operated by Proveya (“the data controller”). If you have any questions, contact us at proveya.info@gmail.com.
1. Information we collect
We only collect the information needed to run the app's features. We do not use advertising SDKs, third-party analytics, or crash-reporting/tracking SDKs, and we do not sell your data.
- Account & authentication: handled by Google Firebase Authentication - email/password, Google sign-in, or Sign in with Apple (on iOS), plus a Firebase user ID and auth token. We never store your password in plain text.
- Sign in with Apple: if you choose “Hide My Email”, Apple gives us a private relay address instead of your real one, and that is all we ever see. Apple shares your name with us only on your very first sign-in; we store it as your display name and Apple does not send it again. Deleting your account also revokes Proveya's access to your Apple ID.
- Profile: your username / display name, optional bio, account type, and friends list.
- Content you create: events and tournaments, predictions/picks, participation and results, invitations, and optional cover images. This content is visible to other participants of the same event or tournament.
- Device & technical: a push-notification token and platform (only if you allow notifications), plus network data such as your IP address used for security and abuse prevention.
- Sports/match data: public match information (scores, schedules) linked to some events - this is general event data, not personal information about you.
We do not collect precise location, contacts, your photo library (beyond images you add), microphone, or health data. Proveya does not process payments or collect financial information.
2. How we use your information
- Create and secure your account and keep you signed in.
- Provide core features: events, tournaments, predictions, results, points, invitations, and friends.
- Send push notifications you have enabled.
- Maintain security, prevent abuse, debug, and keep the service reliable.
- Comply with legal obligations.
For the EEA/UK, our GDPR legal bases are performance of a contract, consent (e.g. push notifications, withdrawable any time), and our legitimate interests in keeping the service secure and functional.
3. How your information is shared
- Other users: content you create is visible to participants of the relevant event or tournament.
- Google Firebase: we use Firebase Authentication and Cloud Messaging as our service provider.
- Apple: if you use Sign in with Apple, Apple handles the sign-in and (where you chose it) operates the private email relay.
- Hosting: our backend and database run on Hetzner infrastructure.
- Legal reasons: we may disclose information if required by law or to protect our users and the service.
We do not sell your personal data and we do not share it with advertisers.
4. Push notifications
If you grant permission, we register a device token with Firebase Cloud Messaging to send notifications. You can turn them off any time in your device settings; on logout we deactivate the device's push token.
5. Data retention
We keep your account and content while your account is active. If you delete your account, we delete or anonymize the associated personal data, except where we must retain it for legal obligations. Backups and logs are retained for a limited period on a rolling basis.
6. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing (GDPR for the EEA/UK; CCPA/CPRA for California). Contact us at proveya.info@gmail.com. You can also delete your account at any time from Settings → Account → Delete account in the app. We will not discriminate against you for exercising these rights.
7. Children's privacy
Proveya is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children under that age.
8. Security
We use industry-standard measures including encrypted connections (HTTPS/TLS), Firebase authentication, and backend access controls. No method of transmission or storage is 100% secure, but we work to protect your data.
9. International data transfers
Your information may be processed in countries other than where you live, including where our service providers (Google/Firebase, Hetzner) operate. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you in the app.
11. Contact us
Questions or requests regarding this policy or your data? Contact Proveya at proveya.info@gmail.com.