Privacy Policy

Introduction

This Privacy Policy explains how KickCall ("KickCall," "we," "us," or "our") collects, uses, and protects information when you use the KickCall mobile application (the "App"). KickCall is a football score-prediction game — no wagering, no odds, no cash prizes. This policy is meant to give you an accurate picture of what actually happens with your data. It is not a substitute for legal advice and is not a representation that KickCall complies with any specific law or regulation.

KickCall is operated by Hamad BinQarban, an individual developer/operator — not a registered company or other legal entity. Naming him here identifies who runs the App; it does not create a company or limited-liability entity.

Information We Collect

Account information. When you sign in with email (one-time passcode) or with your Google account, we receive your email address and, if you use Google Sign-In, basic profile information Google shares with us. Authentication is handled by our backend provider, Supabase.

Profile information you provide. Your display name, country of residence, preferred language (English or Arabic), and favorite football club, entered during onboarding.

Gameplay data. The match predictions you submit, your resulting scores, points, prediction accuracy, streaks and achievements, your leaderboard rank, and the private leagues ("groups") you create or join, including group names and membership.

Subscription status. Whether your account is on the Free or Pro plan and, once Pro purchases go live, when that status expires. If you purchase Pro, RevenueCat (our subscription-management provider) and the store you purchased through (Apple or Google) process your purchase/transaction identifiers and subscription status on our behalf and report your entitlement to our backend — see "RevenueCat" below. We do not receive or store your payment card details; those are handled entirely by Apple or Google.

Technical data. Standard data generated by network requests to our backend (such as IP address and request timestamps), processed by our infrastructure provider as part of normal operation. We do not use this to build advertising profiles.

Data stored only on your device. Your authentication session is stored in your device’s encrypted secure storage (iOS Keychain / Android Keystore) and is used to authenticate requests to our backend. Your language preference is stored in local app storage on your device.

Advertising-related data. If you are shown ads (see "Advertising" below), Google AdMob and its advertising partners may collect and process identifiers and other information under their own privacy policies, based on your consent choices.

We do not collect your precise device location, camera or photo data, or contacts, and the App does not currently integrate any analytics or crash-reporting SDK.

How We Use Information

We use the information above to: create and secure your account and verify it's you signing in; operate the core game — recording and grading your predictions, calculating points and accuracy, running leaderboards and achievements, and managing the private leagues you create or join; apply your language preference and localize the App; determine and enforce your Free or Pro plan entitlements (for example, whether ads are shown); maintain the security and reliability of the App and our backend; and, where you are shown ads, support the display and consent process for advertising.

Advertising

KickCall is free to use, and Free-tier accounts may see advertisements served through Google AdMob (for example, a banner ad within the Matches feed). KickCall Pro subscribers do not see this in-app ad placement.

Advertisements are provided by Google AdMob and its advertising partners, who may collect and process information — such as device or advertising identifiers — to select and measure ads, in accordance with their own privacy policies and applicable consent choices. KickCall does not control, and cannot fully describe, everything Google or its partners do with that information; you can review Google's practices at policies.google.com/technologies/ads.

Depending on your location and applicable law, you may be presented with advertising consent or privacy choices — see “Google User Messaging Platform (UMP)” below.

Google AdMob

KickCall uses Google AdMob (via the Google Mobile Ads SDK) to serve ads to Free-tier users. AdMob may use identifiers and other data to select ads and measure ad performance. Ads are configured with a conservative (PG) content rating and are not directed at children (see “Children’s Privacy”). For more information about how Google's advertising products work and how Google processes data, see Google's Privacy & Terms at policies.google.com/privacy and policies.google.com/technologies/ads.

RevenueCat

Once Pro purchases go live, KickCall will use RevenueCat to manage Pro subscriptions. When you start a purchase, RevenueCat receives your purchase and subscription events from Apple or Google (including which product you bought and your subscription's status), associates them with your KickCall account (identified by your KickCall account id, not your email address), and reports your resulting entitlement status to our backend — which is what actually grants Pro access; the app itself never decides you're Pro on its own (see "Data Storage and Security"). RevenueCat does not receive your payment card details. For more information, see RevenueCat's privacy policy at www.revenuecat.com/privacy.

Google User Messaging Platform (UMP)

Before requesting or showing any ads, KickCall asks Google's User Messaging Platform (UMP) to determine whether — and what kind of — consent or disclosure is required for your location, and gathers that consent if applicable. Ads are only requested once this process indicates it's allowed to proceed. Depending on where you are, this may show you a consent or privacy-choices prompt the first time you use features of the App that involve advertising.

This mechanism is provided by Google to help apps meet certain regional advertising-consent requirements (for example, in the EEA and UK). Using it does not, by itself, make KickCall fully compliant with the GDPR, UK GDPR, or any other specific privacy law — see “Your Privacy Choices and Rights” below for what KickCall itself provides.

Email Privacy

Your email address is central to how KickCall works: it's how you sign in (by one-time passcode) or how we identify your account if you use Google Sign-In, and it's how Supabase Authentication verifies it's really you on each session. The one-time passcode email you receive when signing in is sent by Supabase Authentication's own email delivery, as configured on our Supabase project — not by KickCall directly, and not used to send you marketing or promotional email.

Separately, on our backend, we use Resend, an email-delivery provider, to send internal system-health alerts to our own team when something needs attention (for example, a data-sync job failing). Those alerts are sent to an address we control, not to you, and do not contain your personal data.

Third-Party Services

KickCall relies on the following third-party services to operate:

Supabase — provides our backend: authentication, database, and serverless functions. Supabase processes the account, profile and gameplay data described above on our behalf. See supabase.com/privacy.

Google AdMob / Google Mobile Ads SDK — serves advertisements to Free-tier users, as described above.

Google User Messaging Platform (UMP) — manages advertising consent prompts, as described above.

Google Sign-In — an optional way to sign in to KickCall with your Google account, provided through Supabase Authentication.

RevenueCat — once Pro purchases go live, manages Pro subscriptions and reports entitlement status to our backend, as described in "RevenueCat" above. See www.revenuecat.com/privacy.

Apple App Store / Google Play — once Pro purchases go live, processes your Pro purchase and payment; KickCall never receives your payment card details.

Resend — delivers internal system-health alerts to our own team, as described in "Email Privacy" above; it does not send you anything and does not process your personal data. See resend.com/legal/privacy-policy.

Google Workspace — hosts the professional inboxes we use to receive and respond to messages you send us, such as privacy@kick-call.com and support@kick-call.com.

We do not sell your personal information to third parties.

Account Information

Your account is tied to the email address (or Google account) you sign in with. Your profile — display name, country, favorite club, and language — is created during onboarding. You can change your language preference at any time from Settings. KickCall does not currently offer in-app editing of your other profile fields.

You can permanently delete your account from Settings → Account → Delete account. This immediately and permanently deletes your account, your predictions, and your league memberships. If you created a private league, deleting your account also permanently deletes that league for every member, not just you. This action cannot be undone.

Data Storage and Security

Your data is stored in our Supabase-hosted database, protected by row-level security policies that restrict every account to its own data. Our app uses only Supabase’s public "publishable" API key (the direct successor to what Supabase previously called the "anon" key), which can only do what those policies allow — the privileged secret key capable of bypassing them is kept server-side, never on your device. Your authentication session is stored in your device’s encrypted secure storage rather than in plain, unencrypted storage.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your account and gameplay data for as long as your account remains active, so predictions, scores, leaderboards and achievements continue to work correctly. If you delete your account, your account, predictions, and league memberships are permanently deleted as described above. Some information may persist briefly in backups or logs maintained by our infrastructure providers before it is fully purged.

Your Privacy Choices and Rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal information. In KickCall, you can exercise the equivalent of these choices as follows: delete your account and its data at any time from Settings → Account → Delete account; change your language preference at any time from Settings; log out of your account at any time from Settings; and manage ad personalization at the device/OS level through your Google Account’s Ads Settings (adssettings.google.com) or your device’s ad controls, in addition to any consent prompt shown in the App.

For any other privacy request — including questions about what data we hold about you — contact us at privacy@kick-call.com. For general app support unrelated to privacy, contact support@kick-call.com. We have not confirmed which specific regional privacy laws (such as GDPR or CCPA) formally apply to KickCall, so we do not represent compliance with any particular framework at this time; we will still do our best to respond to legitimate requests.

Children's Privacy

KickCall is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@kick-call.com so we can address it.

International Data Transfers

KickCall's backend infrastructure (Supabase) and advertising partners (Google) may process and store data in countries other than your own. By using the App, you understand your information may be transferred to, and processed in, other countries, which may have different data protection laws than your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as the App changes. We will update the "Last updated" date at the top of this page when we do. If changes are significant, we will make reasonable efforts to bring them to your attention within the App.

Contact Us

If you have questions about this Privacy Policy or how KickCall handles your information, contact us at privacy@kick-call.com. For general app support, contact support@kick-call.com.

KickCall is operated by Hamad BinQarban, an individual developer/operator — there is no separate registered company or legal entity.