Privacy Policy

1. Data controller

Data controller: Necati Noyan Pekel

Address: Mithatpaşa Mah., Selanik Blv. No: 117 D: 1, 34075 Eyüpsultan / İstanbul, Türkiye

Email: parkestats@gmail.com

2. What data we process

Account data: your email address; if you sign in with Google or Apple, the name and email these services share with us.

Player data (entered by you): name or nickname, optional birth year, jersey number, team.

Player photo (optional): only for your own players, a small profile photo (256×256) that you add. It is stored in a private area that only your account can access, with no sharing links. No face recognition or other analysis is done. You can remove it at any time from Edit player; removing it also deletes it from the cloud.

Game data (entered by you): team and opponent names, tournament/category, date, game clock, actions such as points, shots, rebounds, assists, and shot locations on the court.

Technical data: sign-in records needed to keep your session secure, app version and device language.

We do not collect: location (GPS), contacts, photos, microphone, advertising ID. A real name is not required; you may use a nickname.

3. Why we process it (purpose and legal basis)

To provide the service: calculate and show statistics, sync between your phones and back them up (performance of a contract).

To protect your account and the service: prevent unauthorised access, fix errors (legitimate interest).

Legal obligations: respond to lawful requests from authorities where required.

We do not use your data for advertising, profiling or sale.

4. Children's data

The app is intended for adults (parents, coaches). A child's statistics are entered by a parent/guardian or coach.

Anyone entering a child's data confirms they are authorised to do so (they are the parent or have the parent's permission).

A nickname can be used instead of the child's real name. Birth year is optional.

Children's data is shown only to the people the person entering it invites to share the team (section 5); it is never shown to other users, clubs or third parties.

5. Who can see your data and who we share it with

You see your data in your own account. No other user can access it unless you invite them.

Team sharing: you can share a team with an invite code as a Follower (view only; e.g. parents) or an Editor (can also record games; e.g. assistant coaches, statisticians). The person who created the team is its Admin. An invite takes effect once you approve the join request. Members see the team, the names, photos and statistics of the children on the roster, and the games that have been approved and published. You can remove a member at any time; the team's data is then removed from their phone.

Responsibility for sharing: the person sharing a team confirms they are entitled to share the children's data and photos and have obtained the necessary permissions from the parents; legal responsibility for this sharing lies with the coach or club entering and sharing the data.

The only things that leave the app are game cards or reports you choose to share yourself.

Service providers: data is stored on Supabase Inc. infrastructure in the European Union (Frankfurt, Germany). Google and Apple authenticate you when you use their sign-in. For paid plans, payment is handled by Apple App Store or Google Play; we never receive card details. Sign-in emails are delivered via an email delivery service. Push notifications (e.g. "new game published") are delivered to your phone via the Apple Push Notification service.

As the servers are outside Türkiye, this counts as an international transfer under KVKK Art. 9 (data is not given to anyone else; it is only stored on the EU server). By ticking the box when signing up, you give your explicit consent to this storage. You can withdraw consent at any time by deleting your account.

6. How long we keep data

Your data is kept as long as your account is open.

When you delete your account, all your data is deleted from the server immediately and permanently removed from security backups within 30 days.

Signing out removes the copy on that phone; it comes back from the server when you sign in again.

7. Security

Connections are encrypted (TLS). Every record on the server belongs to one account and database rules allow only that account to read it.

8. Your rights

You have the right to access, correct, delete and object to the processing of your data, to know who it is transferred to, and to seek compensation for damages.

You can delete your account and all your data yourself in the app under My account > Delete my account.

For other requests, write to parkestats@gmail.com. Requests are answered free of charge within 30 days.

9. Changes

We may update this policy and will notify you in the app about important changes. If we add a new use of data (e.g. anonymous age-group comparisons) we will ask for your permission separately.