Privacy Policy — Tournaly

Effective Date: 01-03-2026 Last Updated: 23-02-2026

This Privacy Policy explains how Tournaly ("we", "our", or "us") collects, uses, and protects information when you use the Tournaly mobile application and related services (collectively, the "Service").

By using Tournaly, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Display name — shown publicly on your profile and in tournaments
• Profile photo (avatar) — optional, uploaded voluntarily

1.2 Content You Create

We store content you submit through the app, including:

• Tournament names, descriptions, rules, and location coordinates
• Participant names you enter manually
• Posts, captions, and images you share on the social feed
• Challenge messages

1.3 Social and Interaction Data

We collect information about your activity within the Service:

• Follow and friendship relationships with other users
• Challenge history and outcomes
• Tournament participation and match results
• Post likes

1.4 Device and Technical Data

To deliver push notifications, we collect:

• Expo push notification token — a device identifier used to send you notifications
• Device model name — stored alongside your push token to help diagnose delivery issues

We do not collect your precise GPS location. Location data entered for tournaments (map coordinates) is stored only if you explicitly set it.

1.5 Crash and Error Data

We use Sentry (see Section 3) to automatically collect crash reports and error logs, which may include:

• App version and device operating system
• Stack traces at the time of the crash
• Your user ID (to correlate errors with accounts for debugging)

This data is used solely to improve app stability and fix bugs.

2. How We Use Your Information

We use the information collected to:

• Provide and operate the Service (tournaments, brackets, social features, leagues)
• Authenticate your account and maintain your session
• Send push notifications about tournament activity, social interactions, and invitations (you can opt out in device settings)
• Display personalised content such as your tournament history and social feed
• Process subscription payments via in-app purchases managed by Apple or Google
• Show advertising to free-tier users via Google AdMob
• Monitor and improve app performance and fix errors via Sentry
• Enforce our Terms of Service and prevent abuse, including content moderation

We do not sell your personal information to third parties.

3. Third-Party Services

Tournaly integrates with the following third-party services. Each is governed by its own privacy policy.

Google AdMob: Free-tier users may see personalised or contextual advertisements served by Google. Google may collect device identifiers and usage data to serve and measure ads. Pro subscribers do not see ads. You can opt out of personalised ads through your device's advertising settings (iOS: Settings > Privacy & Security > Apple Advertising; Android: Settings > Google > Ads).

RevenueCat: Payment processing is handled entirely by Apple App Store or Google Play. RevenueCat receives anonymised subscription status data (purchase identifiers, subscription state) to synchronise your subscription with our servers. We never see your full payment card details.

4. Data Storage and Security

Your data is stored on Supabase-managed infrastructure hosted on AWS (Frankfurt region by default). Supabase enforces row-level security (RLS) policies that restrict access to your data strictly to your own account or to users you have authorised (e.g., tournament participants can see participant lists).

We take reasonable technical measures to protect your data, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Supabase Auth with secure token-based authentication

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Your account data is retained for as long as your account is active.
• If you delete your account (via Settings → Delete Account), your profile, tournaments, posts, and all associated data are permanently deleted from our database. This action is irreversible.
• Push notification tokens are removed when you log out or delete your account.
• Crash logs in Sentry are retained according to Sentry's retention settings (typically 90 days).

6. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of the personal data we hold about you
• Correction — update your profile information at any time in the app
• Deletion — delete your account and all associated data via Settings → Delete Account
• Opt-out of notifications — disable push notifications in your device settings at any time
• Opt-out of personalised ads — configure your device's advertising settings

To exercise any right not available directly in the app, contact us at the address below.

California Residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR): Our legal basis for processing your personal data is contract performance (to provide the Service you signed up for) and legitimate interests (security, fraud prevention, service improvement). You may lodge a complaint with your local data protection authority.

7. Children's Privacy

Tournaly is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

9. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: firezenk@gmail.com Website: https://tourna.ly

Tournaly is operated by Jorge Garrido Oval.