Revision of 28 October 2026
In short: we keep only what it takes to put games together, and we sell your data to nobody.
Your name, email, city and sports — whatever you entered yourself. Bookings, attendance marks, reviews and the accounts organisers keep for you appear as you play.
We ask for a phone number but do not require it: the field is optional at sign-up and exists so that you can log in by number. Leave it empty and we do not have it.
The app never asks for location access and never receives your device coordinates. «Nearby» for us means the country and city you named yourself: the country is guessed once from your phone language region, and from then on the list of countries is yours to edit.
Your password is stored as an irreversible hash — neither we nor anyone else can read it. An account created by signing in with Google or Apple has no password at all: the provider identifies you, and what reaches us is your identifier with them and what they tell us about your profile. Telegram creates no account — it signs you into one you already have, and that account keeps its password if you set one.
Your profile photo — if you uploaded one. We keep your language and theme so the app opens the way you left it. Allow notifications and the app hands us a device key — that is how a notification reaches your phone.
Of everything Google sends when you sign in, we take and keep six fields: your identifier with Google, your email address, whether Google has confirmed it, your first and last name, and a link to your profile photo. The app requests no extended permissions: it cannot read your mail, calendar, contacts or Drive files. The address is there to link the sign-in to an account you already had and to let our letters reach you; the identifier is how we recognise you next time. Your name and photo fill in the profile once, and only if this sign-in is what creates the account: to an account you already had they are never applied, and from then on they are yours to change. We do not copy the photo to ourselves — we keep only the link, and the file stays with Google. What of this others can see, and what leaves the app, is written in «Who sees what». You can revoke access in your Google account settings; nothing changes on our side — we keep no Google tokens, and your account stays until you delete it.
So the organiser knows who is coming and you know where and when the game is. Your email or phone is how you log in.
Reviews and scores — so players and organisers know who they play with. Accounts — so the organiser remembers who has settled up.
Notifications about bookings, cancellations and invitations show up inside the app; emails and Telegram messages are switched on and off by you in notification settings.
There is no advertising and no tracking in the app: not a single advertising or analytics service is built into it. What we count, we count ourselves, at home, and those marks never leave us. We do not sell your data.
To know whether the app is being used, we note four actions on our side: you opened a game card, you booked a game or joined the reserve, you picked your sports, and which day you came in.
A mark holds no text, no coordinates and nothing about your device: only what happened, when, whose it was, which sport and which city the venue is in. No names, no game titles, none of your money.
These marks go nowhere and feed no advertising profile: they sit in our own database, and only the app's owner reads them. Delete your account and you are no longer in them: the numbers stay, the person in them does not.
Your name, photo and sports are visible to anyone you share a game with — booked or already played — and to anyone who plays in the same country. The people in your line-up always see who is in it with them.
Rating, scores, reviews and positions are open to friends — and to nobody else. Your consent is what opens them: an accepted friend request, or your permission for the organiser to look at your profile when you ask to join their game.
The three switches under «Privacy» are yours to set: whether to show your rating (on by default, and the rule is mutual — hide yours and you stop seeing others), whether to show your friend list (off by default) and whether to be asked before being put into a line-up (by default the organiser adds you straight away).
Data leaves us only to make the app work: Google and Apple when you sign in through them, Google Firebase when it delivers a notification to your phone, Telegram if you linked it.
Your profile photo sits behind a random link and is served without a login: whoever knows the link sees the photo. The app itself shows that link only to those your profile is open to.
As long as you have an account, we keep what the games rest on: bookings, attendance marks, reviews, accounts and notifications. None of that is deleted by the clock.
There are two exceptions. Files attached to a support request: screenshots are wiped after 90 days, the text of the request stays. And the marks from «What we count» — those are wiped after 18 months.
A deleted account stays on as an anonymised row — what is left in it, and why, is written below.
Write to support — the address is on the «About» screen — and we will delete the account. There is no grace period and no way back afterwards.
What happens: email and phone are wiped, Telegram is unlinked, the name is replaced with a stand-in for a deleted user, photo files are removed from storage. Logging in is no longer possible, and you are gone from search and from other people's profiles.
What stays: bookings, attendance marks, reviews and the accounts organisers keep. That data is not only yours — other people's game history and the organiser's books rest on it. In old line-ups that stand-in appears where your name used to be.
You can sign up again with the same email after deletion.
Write to support: support@kvoria.com