Collected
- An anonymous install identifier
- Your country, at country level only
- Teams and competitions you follow, picks you track
- How you use the app (screens and actions)
- Whether a subscription is active
- If you sign in: a display name and public handle
- If you post: your shared picks and comments
- If you turn on alerts: a push notification token
Not collected
- Email address or phone number
- Precise location — the app never asks for the permission
- Contacts, photos, files or private messages
- Payment card, bank or billing details
- Advertising identifiers — the app shows no ads and does not track you
- Health data
What we collect
An anonymous install identifier. A random string generated on first launch and stored on your device. It links your settings, followed teams, unlocks, coins and tracked picks to your install, and it is the identifier our subscription provider uses to know whether you are subscribed.
Your country, at country level only. Derived from the network request that reaches our server. It sets local pricing, puts your country's matches first and picks a language when your device's is not one we support. We do not collect your precise location.
What you do in the app. Followed teams and competitions, unlocked matches, tracked picks and the price you recorded, coins and quests, and in-app events such as opening a match or the subscription screen. We use these to run the product and to understand, in aggregate, how it is used.
Account (optional). Signing in is only needed to post in Community. With Sign in with Apple (iPhone) or Google (Android) we receive a verified identifier from Apple or Google and, if you share it, your name, from which we create a public display name and handle. We do not store your email address. When you delete your account we also revoke the Sign in with Apple authorisation with Apple.
Community content. Picks you share, comments, likes, follows, and reports or blocks you make. Shared picks, comments, your handle and display name are visible to other users.
Questions to the AI analyst. If you use "Ask the analyst", your question and the match data are sent to an AI model provider to generate the answer. Do not include personal information in questions. You can report any answer in the app.
Push notifications. Only if you turn on match alerts: a device token and the teams and matches you follow, so we can send goals, cards and results.
Purchases. If you subscribe, the App Store or Google Play processes the payment and RevenueCat tells us whether your subscription is active. We never see your payment card, bank details or billing address.
Invites. If you join through a friend's invite link, we record that the invite was used so both of you receive your unlocks.
Why we process it
To show you predictions, scores and alerts; to remember your teams, unlocks and picks; to provide subscriptions, invites, coins and Community; to price the subscription for your country; to keep the service secure and working; and to improve it using aggregate usage.
Under GDPR our basis is performance of our contract with you for providing the service, and legitimate interest for security and aggregate analytics. Push notifications are sent only with your permission, which you can withdraw in Settings at any time.
Who processes it
Only service providers acting on our instructions, each bound to protect the data at least as well as this policy:
- Fly.io — hosting of our servers and database.
- RevenueCat — subscription status (with Apple App Store and Google Play, which process payments).
- Apple and Google — optional sign-in, and push delivery via Apple Push Notification service and Google Firebase Cloud Messaging.
- AI model providers (OpenAI, Anthropic and Google) — questions sent to the AI analyst together with match data; no account details are sent.
We do not sell your data, we do not share it with data brokers or advertisers, and we do not track you across other companies' apps or websites. Football data comes to us from licensed sports data providers; nothing about you is sent to them.
How long we keep it
Your install record, account and content are kept until you delete them. Push tokens are removed when you turn alerts off. Aggregate, non-identifying statistics — the Accuracy Ledger's hit rates, for instance — are kept indefinitely.
Deleting your data
In the app: More → Settings → Delete my data.
This permanently removes from our servers your install record, unlocks, coins, tracked picks, alerts and, if you signed in, your profile, posts, comments, likes, follows and blocks, and revokes Sign in with Apple. It cannot be undone and does not require you to contact us. Deleting your data does not cancel a store subscription — manage that in your App Store or Google Play account. You can also email privacy@vectascore.com or admin@boumzoud.com.
Children
Vecta Score is not directed at children and is for adults (18+). We do not knowingly collect data from anyone under 18. If you believe a child has used the app, contact us and we will delete the record.
What Vecta Score is not
Vecta Score is an analysis tool. It does not take stakes, hold funds, accept or place bets, or link to bookmakers, and no wagering happens inside the app. Predictions are statistical estimates and outcomes are uncertain.
Contact and changes
Vecta Score is published by BOUMZOUD LLC. For any privacy question, or to ask us to access or delete your data, contact privacy@vectascore.com or admin@boumzoud.com.
If this policy changes materially we will say so in the app before the change takes effect.