Privacy Policy
Last updated: March 18, 2026
1. Who we are
Smoosh: Group Scorekeeper ("Smoosh", "we", "us") is a mobile and web application that helps small groups track racket-sport matches, leaderboards, and stats. Smoosh is operated as an independent app by its developer. If you have questions about this policy, email us at smoosh.corp@gmail.com.
2. What information we collect
Account information
When you sign in with Google or Apple, we receive your email address and display name from that provider. We store these to identify your account and display your name inside the app. We do not receive or store your password — authentication is handled entirely by Google or Apple.
Match and group data
We store the data you create inside the app: groups you belong to, leagues, player profiles, match scores, and results. This is the core content of the service and is required for the app to function.
Push notification tokens
If you enable push notifications, we store a device token issued by Apple (APNs). This token is used solely to deliver notifications about your matches (e.g. "Match started", "You won!"). We do not use it for marketing.
Usage and audit logs
We maintain internal audit logs of significant actions (e.g. match created, score edited, member removed) for security monitoring. These logs contain user IDs and timestamps — no message content or sensitive personal data.
Billing information
If you subscribe to Smoosh Pro, payment is processed by Apple (App Store) or Google (Play Store). We never see or store your payment card details. We use RevenueCat to manage subscription status across platforms.
3. How we use your information
- To provide the core functionality of Smoosh — groups, leagues, scoring, and leaderboards.
- To authenticate you and maintain your session.
- To send push notifications about matches you are part of (only if you have enabled them).
- To manage your subscription and enforce plan limits.
- To detect abuse and protect the security of the platform.
We do not use your data for advertising, sell it to third parties, or share it with anyone outside the services listed below.
4. Third-party services
Smoosh uses the following third-party services to operate:
| Service | Purpose | Privacy policy |
|---|---|---|
| Supabase | Database, authentication, real-time | supabase.com/privacy |
| Google OAuth | Sign-in with Google | policies.google.com/privacy |
| Apple Sign In | Sign in with Apple | apple.com/legal/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Vercel | App hosting and delivery | vercel.com/legal/privacy-policy |
5. Data storage and security
Your data is stored in Supabase's hosted PostgreSQL database. Data at rest is encrypted by Supabase. Data in transit is encrypted using TLS. We use row-level security policies so that users can only access data from groups they belong to.
No system is 100% secure. If you discover a security issue, please contact us at smoosh.corp@gmail.com.
6. Data retention
We retain your account data for as long as your account is active. Match history, league data, and player profiles associated with your group are retained even if you leave a group — this preserves the group's history for other members.
If you delete your account, your authentication record and personal profile are permanently deleted. Match history you participated in is anonymised (player records are preserved but unlinked from your account).
7. Your rights
You have the right to:
- Access your data — contact us and we will provide a copy of the personal data we hold about you.
- Delete your account — available directly in the app under Settings → Delete Account. This permanently removes your account.
- Correct your information — update your display name in Settings → Edit Profile.
- Withdraw push notification consent — disable notifications in Settings → Notifications at any time.
If you are located in the EU/EEA or UK, you may also have rights under GDPR / UK GDPR (access, portability, restriction, objection). Contact us at smoosh.corp@gmail.com to exercise any of these rights.
8. Children
Smoosh is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
10. Contact
Questions or requests regarding this privacy policy? Email us at smoosh.corp@gmail.com.