Privacy Policy
This Privacy Policy explains what information the ScoreMate mobile application (the "App") collects, how the ScoreMate Team ("we", "us") uses it, and the choices you have. ScoreMate does not ask for your name, email address, or a password.
1. Information we collect
Information you enter. Player names, team names, scores, notes, saved groups, bill amounts and item names, and a device name you may choose. This is stored on your device and, when you create or join a shared room, on our servers so the other participants can see it.
Anonymous identifier. When the App first starts, it signs in anonymously with our backend provider and receives a random user ID. This ID links your device to the rooms you create or join. It is not tied to your identity unless you include identifying information in the content you enter.
Device identifier. The App reads an identifier provided by your device (the Android ID on Android, a value kept in the iOS keychain on iPhone and iPad). We send it with AI receipt scans and with problem reports so we can apply a daily scan limit per device and prevent abuse. It is not used for advertising and is not shared with advertisers.
Receipt photos and AI scanning. When you ask the App to read a receipt for you, that one photo is sent over an encrypted connection to our server and passed to our AI provider, DeepSeek, which returns the merchant name, the line items and the totals. We do not keep the photo after the scan, and it is not attached to your rooms. If you instead attach a receipt photo to a bill without scanning it, the photo stays on your device only and is never uploaded. Do not scan a document containing information you do not want processed by a third party.
Camera. Scanning a room QR code to join a scoreboard uses the camera on your device. QR frames are processed on the device and are never stored or uploaded.
Usage and diagnostics. We collect app events (such as the App being opened), crash reports, device model, operating system version, app version, language, and approximate country derived from your IP address. This data does not include the content of your rooms.
Problem reports. If you send a report from Settings, we receive your message, the category you picked, the app version, the platform, your app language, your device identifier, and an email address only if you choose to add one.
Advertising. The App shows ads served by Google AdMob, which is how it stays free. To choose, show and measure ads and to prevent ad fraud, the Google Mobile Ads SDK collects the device's advertising identifier (the Advertising ID on Android; on iPhone and iPad the IDFA, only if you allow tracking when asked), IP address, device and app information, and your interactions with ads such as views and taps. Ads are personalised only where you have agreed: in the European Economic Area, the United Kingdom and Switzerland through the consent form shown when you first open the App, and on iPhone and iPad through Apple's tracking prompt. Otherwise the ads you see are not based on your activity in other apps. The content of your rooms, scores and saved groups is never given to advertisers.
App configuration. The App downloads settings from Google Firebase Remote Config (for example how often a full-screen ad may appear). This uses a Firebase installation identifier and does not include the content of your rooms.
Purchases. The App has no paid features. It collects no payment or purchase information of any kind.
2. How we use information
- To run the App: keep score, sync rooms in real time, and restore your saved groups and history.
- To find and fix crashes and to understand which features are used.
- To protect the service from abuse.
- To show ads that keep the App free, as described under Advertising above.
We do not sell the content you enter. Advertising data is collected and used by Google AdMob as described above; where the law treats this as "selling" or "sharing" personal data for advertising, you can opt out using the choices in section 9.
3. Service providers
We rely on the following providers, each processing data on our behalf under its own privacy terms:
- Supabase: anonymous sign-in, room storage, and real-time sync.
- DeepSeek: reads the receipt photos you choose to scan. The photo is processed on DeepSeek's servers, which are outside the European Economic Area and outside Vietnam.
- Google Firebase (Analytics, Crashlytics and Remote Config): usage events, crash reports and app configuration.
- Google AdMob: serves and measures the ads shown in the App. Learn how Google uses this data at policies.google.com/technologies/partner-sites.
4. Sharing
Content you put in a shared room is visible to everyone who has that room's PIN or QR code. Apart from the providers above, we share information only when required by law or to protect the rights and safety of users and the service.
5. Retention and deletion
Data kept only on your device is removed when you delete the App. Rooms and related content stored on our servers are kept while the room exists and may be deleted when inactive. Receipt photos sent for an AI scan are not retained after the scan returns. To have server-side data linked to your device deleted, follow the steps on our data deletion page or email us from the address below; we will respond within 30 days. Diagnostic data is retained by our providers for a limited period under their standard policies.
6. Security
Data is transmitted over encrypted connections and stored with access controls that limit each anonymous user to the rooms they belong to. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Children
The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information through the App, contact us and we will delete it.
8. International transfers
Our providers store and process data in countries other than your own: room data is hosted in the Asia Pacific (Seoul) region, diagnostics and advertising data are processed by Google, and receipt photos you choose to scan are processed by DeepSeek. Where a transfer leaves your region, our providers rely on standard contractual safeguards. If you would rather no data left your region, do not use the AI receipt scan and do not create or join shared rooms — scoring on a single device works without either.
9. Your rights
Depending on where you live, you may have the right to access, correct, or delete your personal data, or to object to certain processing. Because we hold no account details, we may ask for the room PIN or device name to locate your data. Contact us at the address below to exercise these rights.
Ad choices. Where the law requires it, Settings in the App has an Ad privacy entry that reopens the consent form so you can change your choice at any time. You can also stop tracking on iPhone and iPad in Settings > Privacy & Security > Tracking, and on Android reset or delete your Advertising ID in Settings > Privacy > Ads (the path can differ by device).
10. Changes
We may update this Policy. The current version is always published at this address with its effective date. Material changes will be highlighted in the App.
11. Contact
ScoreMate Team · luongminh2410dev@gmail.com