Scorepact Privacy Policy

This Privacy Policy describes how Viberostech ("we", "us") handles information when you use Scorepact ("the app"), a live scorekeeper for racket sports on Apple Watch and iPhone.

Personal scoring works on your devices without an account. Online features send the information needed for the feature you choose, including account details, shared scores, organization roles and private coaching records. Player names and account-linked records can identify people. Clips you send for video analysis are deleted once analysed, and Health measurements are not sent to Scorepact's servers. The app asks once whether AppsFlyer may learn which link brought you to it; nothing goes to AppsFlyer unless you allow it (section 6).

1. What stays on your device

Scorepact works without an account. You can optionally sign in with Apple, Google or Facebook, which gives you a career record and lets other players invite you. Signed-in accounts also support organization roles and coaching; see section 3. Personal match records are stored on your devices:

Your matches: every point as it happened, with timestamps, plus the sport, format and result.
Player names: whatever you type. We suggest nothing and look up nothing.
Your settings: preferred format, spoken-score preference, and the names you have used recently.

Your watch and your iPhone exchange this over Apple's own Watch Connectivity, device to device. It is included in your encrypted iPhone backup if you make one. Deleting the app deletes it.

2. Health data

Workout recording is off until you enable it. With your Health permissions, Scorepact records your own play on Apple Watch as a workout in Apple Health and Fitness. Your iPhone can read the workout's duration, heart rate and active energy alongside the match. Officiating or viewing someone else's score does not start a workout.

Scorepact does not send Health measurements or workout identifiers to its servers. Apple controls Health synchronization between your devices. Health data is excluded from shared score cards by default; you can explicitly choose to include it and send that card through the system share sheet. Live score pages never receive Health data. We do not sell it or use it for advertising, marketing or remote analysis. You can change permissions in the Health app and continue scoring without them. Turning recording off ends and saves an active Scorepact workout when your watch receives the change; it does not delete workouts already saved in Health.

3. Online features and server records

These features send data to us:

Accounts. Signing in with Apple sends an identity token for verification. We store the Apple account identifier, your display name, any club name you add, and account-linked records such as claimed results, invitations and organization roles.
Google or Facebook sign-in. If you choose to sign in with Google or Facebook, that provider's own page opens in a browser sheet and confirms who you are to our server; we never see your password. We store that account's identifier, the name it shares and its email address, if it shares one, and attach them to your Scorepact account. You can see linked sign-in methods in your profile.
Web sign-in. The Scorepact website signs you in with your email address. We store the address and, for ten minutes, a hashed one-time code that our email provider delivers to you. If you link the website to the iPhone app with a one-time code, your email address is attached to the account you use in the app, and organization roles, training records and analyses created on the website move to that account.
Training records. Logging a training session stores its sport, date, length, the focus you choose, an optional intensity and your notes. Only you can see them.
Video analysis. When you analyse a clip of yourself, it is uploaded to our server, where a pose model reads your body position. As soon as the analysis finishes, fails or is cancelled, the clip is deleted. We keep only the measurements taken from it: joint angles and stance width at the moments you swung, how much you moved, how much of the time your body was visible, and which hand you hit with. Clips are not shown to anyone, not used to train any model and not shared. Only you can see the measurements, and you can delete an analysis at any time.
Key-moment stills (Scorepact Pro). If you subscribe to Scorepact Pro, we also keep one small still image from each swing in a clip, with the detected body outline drawn on it, so you can review that moment later. The rest of the clip is still deleted. Stills are visible only to you and are deleted with their analysis or your account.
Monthly report (Scorepact Pro). When you ask for a monthly report, a summary of that month's match results, training records and analysis measurements is sent to Google's Gemini API, which writes the report. Your name, email address and any images are not sent. The report is stored until you delete your account.
Subscriptions. Scorepact Pro is billed by Apple. RevenueCat processes the purchase receipt so we know your subscription is active; it receives your Scorepact player identifier and the purchase details from Apple, not your name or payment card. We store only whether Pro is active and until when.
Coaching notes on an analysis. If you ask for a written note on an analysis, its measurements, sport and practice focus are sent to Google's Gemini API, which writes the note. Your name, account, email address and the video are not sent. The note is stored with the analysis.
Sharing a match. Tapping Share uploads that match — the score, the point-by-point log, and the player names you typed — so the link can show it live in a browser.
Organizations and competitions. Creating or joining a league or tournament stores its name, participant entries, fixtures and results. Organization features store profiles, role invitations, approvals, official assignments and access history. Authorized competition scoring sends live updates and results to the server. Published organization and tournament pages expose their public information.
Coaching. Requesting a connection shares your display name and goal with the chosen coach. We store the connection, lesson requests and proposed or accepted times. Choosing a match for review uploads a private copy of its player names, score and point sequence, together with notes subsequently added by the authorized coach. This does not create a public match link and excludes Health measurements and workout identifiers.

A coaching review is accessible to its sharing player and the selected coach while both the coaching connection and that review's access are active. Institution administrators do not gain access to private coaching reviews. You can revoke one review or end the connection; ending it also cancels future coaching lessons. Your review and notes remain available to you, but copies already viewed or saved by another person cannot be recalled. Coach profiles become public only when the coach chooses to publish, their institution profile is published, and their institutional coach affiliation is active. This affiliation does not verify a professional qualification.

Once you start an online scoring feature, updates can continue as you score without pressing Share again. Personal matches that you neither publish nor submit for coaching remain in local match storage and the device synchronization described above.

A shared match is readable by anyone holding the link. The link is unguessable, but it is not a password: treat it as public, and only put names in a match you are willing to have read. Some messaging apps generate a preview when the link is pasted, which fetches the page before anyone opens it. There is currently no way to unshare a match from inside the app — email us and we will delete it.

4. Finding players near you

This is off until you switch it on, and switching it off deletes what it stored. While it is on:

Your location is read once, at reduced accuracy, at the moment you turn the setting on — not in the background, and not while you play.
We do not store your coordinates. They are rounded to a cell of roughly five kilometres and only the cell is kept. It is enough to say which part of town you are in and not enough to say where you live.
Other players in and around that cell see your display name, your club if you set one, the note you wrote, and a rough standard worked out from your results. Nobody is ever shown a distance, because a distance can be triangulated into a position.
Seeing other players requires being visible yourself. There is no way to browse the neighbourhood unseen.
You can hide any player. Hiding works both ways — they disappear from your list and you from theirs, and neither of you can invite the other.

Invitations carry your name and an optional message to the person you invite. Turning the setting off removes you from every list immediately; invitations you already sent remain with the people you sent them to.

5. What we do not do

No background location. The only reading is the one described above, and only when you ask for it.
No messaging between players beyond a single line attached to an invitation.
No advertising, no advertising identifier, no App Tracking Transparency prompt.
No product-analytics SDK and no crash-reporting SDK. Two third-party libraries run in the app: RevenueCat's purchase library, which tells RevenueCat whether you have a Scorepact Pro purchase (it uses a random identifier until you sign in and reports no usage), and AppsFlyer's attribution library, which stays stopped unless you allow it (section 6).
No video archive. A clip you send for analysis exists on our server only until it has been analysed; with Scorepact Pro, only the key-moment stills described above are kept.
No tracking for advertising, and no profile built from how you play. The one link-to-install match Scorepact uses is the AppsFlyer one in section 6, and only if you allow it.
We do not sell your data. The features described here make selected information available to their intended recipients or public viewers and use hosting providers to deliver it.

6. Which link brought you here (AppsFlyer)

A Scorepact link to a league or match can open that page even when you install the app from it. Doing that needs AppsFlyer, which matches the link you tapped to your install. The first time you use the app, after the opening screens, Scorepact asks whether AppsFlyer may do this. If you choose Don't allow, AppsFlyer's library stays stopped and sends nothing. You can change your answer at any time in Settings › Install source.

If you allow it, AppsFlyer receives, when you install and each time you open the app:

the link or campaign you came from;
your IP address, from which AppsFlyer estimates your country and city;
technical details of your device and the app, such as model, operating system, language, app version, how often and how recently you opened it, and signals such as free storage and screen brightness that AppsFlyer uses to detect fraud;
Apple's vendor identifier for Scorepact (IDFV) and an identifier AppsFlyer stores on your device, which can remain after you delete and reinstall the app;
a token from Apple's AdServices framework that says whether an Apple Ads ad led to the install, and Apple's SKAdNetwork reports, which Apple aggregates so they do not identify you;
the fact that you started a trial of or subscribed to Scorepact Pro, with the product, but without your name, email address or payment details.

The version of AppsFlyer's library in Scorepact cannot read your device's advertising identifier (IDFA), and Scorepact never shows Apple's tracking prompt. AppsFlyer does not receive your name, email address, matches, Health data, videos, coaching records, precise location or messages.

When you tap a link on scorepact.onelink.me, AppsFlyer records that click (its time, your IP address and browser) to send you to the App Store or into the app. That happens on AppsFlyer's servers before the app is involved, so it does not depend on your answer in the app. AppsFlyer processes this data for us under its privacy policy.

7. League join codes

A club league uses a join code. The code authorises you to report your own results — it is not an identity, it is not tied to your Apple ID or your device, and we do not build a profile from it. Anyone with the code can report as that player, so a club should share codes the way it would share a door key.

8. Server logs and processors

Our server runs on Railway. Like any web server it records ordinary request logs, which include IP addresses, for security and debugging. These are kept for 30 days and are not joined to your matches. Railway hosts all server records and the clips waiting to be analysed. Three other processors receive data for one purpose each: Resend delivers sign-in codes to your email address, Google's Gemini API receives the measurements of an analysis when you ask for a coaching note (and the monthly summary when you ask for a Pro report), and RevenueCat verifies Scorepact Pro purchases. If you sign in with Google or Facebook, Google or Meta confirms your identity. AppsFlyer receives only what section 6 lists, and only if you allow it. There is no product-analytics provider, no ad network and no crash service in the chain.

9. Retention and deletion

On your device: matches stay until you delete them or delete the app.
Shared matches: kept until you ask us to remove them.
Leagues: kept for the life of the league; a club organiser can ask us to delete the whole league and its results.
Accounts and organization access: account profiles, roles and access history remain until you delete your account or the relevant records are deleted. Signing out does not delete server records.
Coaching: ending a connection or revoking a review stops further authorized coach access but preserves the player's review and notes. Deleting the source account or institution removes its dependent coaching records.
Training records and analyses: until you delete them in the app or on the website.
Clips sent for video analysis: until the analysis finishes, fails or is cancelled, which is usually under a minute.
Key-moment stills and monthly reports (Pro): until you delete the analysis or your account.
Subscription status: whether Pro is active and its end date, until you delete your account. Apple and RevenueCat keep their own purchase records under their policies.
Sign-in codes: ten minutes, or until used.
Server logs: 30 days.
Install source (AppsFlyer): kept by AppsFlyer for the period its own policy sets. Choosing Don't allow, or turning off Install source, stops new data; to have your existing record erased, email us and we will send AppsFlyer the request.
Your discovery cell: until you switch finding players off, which deletes it.

Deleting your account. In the iPhone app open Profile → Delete account, or on the website open Profile → Delete account. This removes your account, your web sign-in, your training records and analyses, your coaching connections and roles, your invitations and discovery settings, and matches you shared that are not part of a league or tournament. Results in leagues and tournaments stay with the name the organizer entered, without a link to you. If you own an organization, transfer its ownership first. Matches kept only on your devices stay there until you delete the app.

To delete anything else on our side, email support@viberostech.com with the relevant link or enough information to identify your account. We may need to verify that you are entitled to request access or deletion. Do not send account tokens, passwords, invitation codes or recovery codes.

10. Children

Names, participant lists and coaching records can contain children's personal information. Publishing a school profile does not create a private student workspace or verified guardian permissions. Those workflows are not yet available. A parent or guardian concerned about information shared by a child can contact us at the address below.

11. International transfers

Shared matches and leagues may be processed outside your country by our hosting provider, and install-source data by AppsFlyer if you allow it. We rely on standard contractual clauses where required. Scorepact does not transfer Health data to its servers. Apple's Health synchronization and any score card you explicitly share are handled by Apple and the destination you choose.

12. Your rights

Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to processing. For anything on our server, email us with the link and we will act on it. For anything on your device, the app itself is the access and erasure mechanism — we cannot reach it.

13. Changes

We may update this policy. If a change means we start collecting something we did not collect before, we will say so in the app rather than only here.

14. Contact

Viberostech
support@viberostech.com