Privacy Policy

1. Overview

Skoor is an AI-powered football match analysis platform, available as a website at getskoor.com and as the Skoor mobile app. This policy explains what personal data is collected, what it is used for, and who it is shared with. It covers both web and mobile; clauses that apply to only one of them are marked accordingly.

2. Data Collected

Skoor collects the following data in order to provide the service:

• Account information: email address and, if provided, full name. When you sign in with Google, your name and email come from Google.
• Subscription and purchase history: plan, billing period and subscription status, used to verify Pro access. Card details never reach Skoor; payments are processed by Stripe on the web and by Google Play in the mobile app.
• Usage data: matches viewed, preferred leagues, favourite teams and frequency of use, for personalisation and improvement.
• Skoor AI chat messages: messages sent to the AI chat are processed in order to generate a reply.
• Push notification token: mobile app only, and only if notifications are enabled.
• Technical data and crash reports: IP address, browser and device information, app version and error logs, for security, abuse prevention and stability.
• Measurement and advertising data: events such as page views, sign-ups and purchases on the website, collected with cookies and similar technologies to understand site usage and measure advertising campaigns (see 5. Cookies).

Location, contacts, photos, microphone and camera data are not collected.

3. How Data Is Used

Data is used only for the following purposes:

• Creating accounts, signing in and account management
• Processing subscriptions and payments, verifying Pro access
• Producing analysis, signals and Skoor AI replies
• Sending notifications — only where permission was given
• Improving the product experience and measuring advertising campaigns
• Detecting technical issues, security and abuse prevention
• Meeting legal obligations

4. Data Sharing

Personal data is never sold or rented. To run the service, and only to the extent required, the following service providers process data on Skoor's behalf:

• Supabase: authentication and database
• Vercel: web hosting
• Railway: running the analysis API
• Stripe: payments made on the web
• Google Play Billing and RevenueCat: payments and subscription verification in the mobile app
• Expo: notification delivery in the mobile app
• Google Gemini: Skoor AI chat replies — messages are forwarded in order to generate a reply
• Sentry: error and crash reports
• Google Analytics: website usage measurement — only where analytics cookie consent was given
• Meta Pixel: advertising campaign measurement on the web — only where advertising cookie consent was given
• Resend: transactional and informational email delivery

These providers may not use the data for their own purposes. Data may be shared with competent authorities where a lawful request is made.

5. Cookies and similar technologies

The Platform uses three groups of cookies and similar storage:

• Strictly necessary (no consent required): sign-in and security (Supabase Auth), and remembering your theme and language. The Platform does not work without them.
• Analytics (consent-based): Google Analytics 4 — _ga, _ga_*. Measures which pages are used and where a visit came from. Campaign source data (UTM / referring site) is likewise stored on your device only with this consent, and is recorded as your account source when you sign up.
• Advertising (consent-based): Meta Pixel — _fbp, _fbc. Measures whether Skoor's ads produce results and may be used for retargeting on Meta platforms.

Analytics and advertising cookies are not loadedunless you give explicit consent in the cookie banner shown on arrival: the scripts are never downloaded to your browser, so those cookies are never created. Google Consent Mode v2 signals default to "denied".

Your choice is stored in your browser under skoor_consent, with its version and date. You can withdraw or change consent at any time — just open Cookie preferences. When you withdraw it, the relevant cookies are deleted and the page reloads. You can also clear all cookies from your browser settings.

6. Security

Data is transmitted with SSL/TLS encryption and stored encrypted. Passwords are hashed (Supabase Auth). In the mobile app, session details are kept in the device's secure storage (SecureStore). Payment data is processed on the PCI DSS-compliant infrastructure of Stripe and Google Play; card data never reaches Skoor servers.

7. Your Rights (GDPR / KVKK)

Under GDPR and KVKK, you have the right to:

• Request access to your data
• Request correction of your data
• Request erasure of your data
• Object to processing
• Request data portability

You can delete your account and all of your data at any time at getskoor.com/hesap-sil or, in the mobile app, from Profile → Delete Account. For any other request, email destek@getskoor.com. Notifications can be turned off at any time from device settings or inside the app.

8. Data Retention

Account data is retained while the account is active. When an account is deleted, personal data is permanently erased within 30 days; records subject to a statutory retention obligation (for example payment records) are kept only for the duration of that obligation.

9. Children's Privacy

Skoor is not directed at users under 13 and does not knowingly collect data from anyone under 13. If such data is found to have been collected, it is deleted.

10. Changes

This policy may be updated from time to time. Material changes are announced by email and the “Last updated” date on this page is revised.

11. Contact

For privacy-related questions: destek@getskoor.com