Privacy Policy
Last updated: October 20, 2026
Español: actualizaciones sobre datos y proveedores
Actualizado el 20 de octubre de 2026. Los datos de compras incluyen derechos de suscripción, saldo de mensajes, caducidad e identificadores de transacciones o recibos. Las solicitudes de red revelan información técnica, como la dirección IP, a la infraestructura que las procesa; puede derivarse un país aproximado sin pedir GPS. Los registros técnicos y de seguridad pueden contener información de las solicitudes.
Railway procesa solicitudes mediante nuestra API y tareas programadas. Google Generative AI (Gemini) procesa el texto enviado a ScoreBot para generar respuestas. API-Football (API-SPORTS) suministra calendario, resultados y estadísticas de fútbol. Estas consultas se refieren a datos deportivos, no al perfil de tu cuenta ni a tu conversación con ScoreBot.
Firebase Cloud Messaging en Android y el servicio de notificaciones de Apple en iOS gestionan avisos cuando están habilitados. Su disponibilidad depende de la versión, los permisos y los ajustes. Los avisos no se presentan como una función garantizada en todas las versiones.
1. Who we are
ScoreMind.AI ("ScoreMind", "we", "our", "us") is operated by Datanaat. This policy explains what personal data we collect when you use our mobile app (iOS, Android) or website at scoremind.ai, and what we do with it.
2. Data we collect
| Category | What it is | Why we need it |
|---|---|---|
| Account | Email, display name, optional avatar; auth provider (Google, Apple, email/password) | Sign in, attach your subscription, sync your favourite teams across devices |
| Profile preferences | Country, age range, favourite teams/leagues, theme, language | Personalize the home screen, surface local leagues first |
| Activity | Predictions you make, ScoreBot conversations, daily login streak, coin balance | Run the gamification + leaderboard features, evaluate your prediction accuracy |
| Subscription | Subscription entitlement, message-credit balance, expiry date and platform transaction or receipt identifiers | Verify your subscription is active, restore on a new device |
| Push tokens | Device push token (Firebase Cloud Messaging on Android or Apple Push Notification service on iOS, where enabled) | Send you match-start, goal, and result notifications you opted into |
| Diagnostic / usage | App version, OS, anonymous request rate counters, error logs | Detect bugs, prevent abuse, improve performance |
We do not collect: precise location (GPS), contacts, photos, or microphone audio.
Network requests expose technical information such as an IP address to the infrastructure that processes them. An approximate country may be derived to personalize coverage; this does not require GPS permission. Infrastructure and security logs may contain technical request information.
3. How we use the data
- Run the app. Show your predictions, your subscription tier, your daily reward, your followed teams.
- Personalize content. Lead the home feed with leagues from your country.
- Improve the model. Aggregate prediction accuracy across all users to retune the scientific model. Individual identities are not used in model training.
- Send notifications. Only those you opted into in Settings → Notifications.
- Prevent abuse. Rate-limit ScoreBot calls and detect script-driven access.
4. Third parties
To run the app we share specific data with the following processors:
- Supabase — hosts the database where your account, predictions, and preferences live.
- Railway — hosts our backend API and scheduled jobs, which process requests needed to provide the service.
- Google AdMob — serves rewarded video ads for ScoreBot ad-gated messages on free / quota-exhausted users. Ad personalization can be turned off in your device settings.
- Google Generative AI (Gemini) — powers ScoreBot replies. Your message text is sent for inference; responses are not used by Google to train its model on your data per the API ToS.
- API-Football (API-SPORTS) — supplies football fixtures, scores and statistics. These requests concern sports data rather than your account profile or ScoreBot conversation.
- Apple App Store / Google Play — handle subscription billing and receipt verification.
- Firebase Cloud Messaging / Apple Push Notification service — deliver notifications on the relevant platform where enabled. Notification availability depends on your app version, permissions and settings.
- Resend — sends contact/feedback emails when you reach us via the in-app form.
We do not sell your personal data to advertisers, brokers, or any third party.
5. Data retention
We keep your account-level data for as long as you have an active account. Activity data (predictions, ScoreBot messages older than 3 days, login streaks) is retained on a rolling basis to support feature timelines and accuracy backtests. When you delete your account, all of the above is removed within 30 days from our active systems. Some entries (purchase audit logs) are retained longer where required by tax, legal, or anti-fraud obligations.
6. Your rights
- Access / export. Email info@datanaat.com with the subject "Data export" and we'll send you a JSON of everything we hold about your account within 14 days.
- Correction. Most fields you can edit yourself in Settings.
- Deletion. Settings → Account → Delete Account. The deletion is propagated across all linked tables, push tokens are unregistered, and Apple Sign-in tokens (if applicable) are revoked through Apple's revoke endpoint per Guideline 5.1.1(v).
- Object / withdraw consent. You can disable notifications, opt out of analytics, or stop using the app at any time.
7. Children
ScoreMind.AI is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us so we can delete it.
8. Security
Passwords are hashed and never stored in plaintext. Database connections are encrypted in transit (TLS) and at rest. Backend API keys are stored in Railway's encrypted secret manager. We follow industry-standard practices, but no internet-connected service is 100% secure — please use a strong unique password.
9. International transfers
Our infrastructure (Supabase, Railway, Google) operates in the United States and the European Union. By using the app you consent to your data being processed in those regions.
10. Changes
We may update this policy from time to time. The "Last updated" date at the top indicates when. Material changes will be communicated in-app on next launch.
11. Contact
Questions or requests? Email info@datanaat.com. We reply within 5 business days.