Privacy Policy

Last Updated: July 20, 2026

This Privacy Policy describes how AtTechEdu Limited ("Company", "we", "us", or "our") collects, uses, processes, and shares personal information when you use the Score Lock mobile application, the admin portal, and its associated services (collectively, the "Service").

By using the Service as a League Administrator (Host) or a Player, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We collect information necessary to authenticate users, prevent gameplay manipulation, verify payment entitlements, send notifications, and accurately compute tournament standings.

A. Information Provided Directly by You

  • Account Information (Administrators/Hosts): When registering a league host account, we collect your email address and password. If you sign up using Google Authentication, we receive your name, email address, profile picture URL, and unique authentication identifier from Google.
  • Competition Details: We store the custom Competition Codes, Season Names, player rosters, and team allocations created by administrators.
  • Roster Passcodes: The Service stores player passcodes (generated by administrators) to allow secure player access without requiring individual emails for players.
  • Gameplay Prediction Activity (Players): We collect and store your weekly score predictions, Star Game designations, and Goal Banker team selections.
  • Subscription & Payment Entitlements: We track whether you have purchased the premium "Remove Ads" pass or any Administrator League licenses. Please note: All payment transactions are handled directly by the Apple App Store, Google Play Store, or Stripe. We do not store or process credit card numbers or banking credentials on our servers.

B. Automatically Collected Device & Usage Information

  • Authentication and Session Tokens: We use secure local browser storage and native device secure storage to cache authentication tokens, allowing you to remain logged in.
  • Push Notification Tokens: To deliver match notifications and reminders, we register and store your device's native Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) tokens.
  • Action Logs and Timestamps: We log the exact millisecond you submit predictions or Goal Bankers to enforce fair-play lockout rules (locking predictions at match kickoff).
  • Ad Identifiers: If you use the ad-supported version of the app, third-party advertising SDKs may collect mobile advertising identifiers (e.g., Apple's IDFA or Google's Advertising ID) to serve relevant ads.

2. How We Use Your Information

We process your data to fulfill our services and ensure the integrity of the competitions:

  • Gameplay & Calculations: To authenticate players, compile H2H standings, run Last Person Standing eliminations, track Goal Rush points, and determine Cup advancements.
  • Fair Play Verification: To audit lockout timestamps and verify that predictions were submitted before matches kicked off.
  • Push Reminders: To send push notifications reminding players to submit predictions before the weekly deadline.
  • Subscription Management: To verify ad-free entitlements across devices using RevenueCat receipt validation.
  • Improvement & Diagnostics: To diagnose layout issues, fix database query performance, and improve the user experience.

3. Third-Party Service Providers

To operate the app, we share data with trusted third-party cloud infrastructure providers. We do not sell or lease your personal information.

  • Google Firebase: We use Firebase Authentication to verify identity, Cloud Firestore to store gameplay data, and Firebase Cloud Messaging (FCM) to deliver push notifications. Your data is stored on secure Google Cloud servers.
  • RevenueCat: We use RevenueCat to validate in-app subscription receipts and manage premium ad-removal accounts across iOS and Android platforms.
  • Google AdMob: For players using the free version, Google AdMob may serve third-party ads. AdMob uses device identifiers to provide ad personalization and measure campaign performance.

4. CCPA and GDPR Data Protection Rights (UK & EU Users)

As a UK-based entity, AtTechEdu Limited ensures that users in the UK, European Union, and California are afforded their full data rights:

  • The Right to Access & Rectify: You have the right to request copies of your personal data and ask us to correct any inaccurate predictions or profile details.
  • The Right to Deletion (Erasure): You can request that we delete your data. Players can request account deletion by contacting their league administrator or emailing us.
  • The Right to Object/Restrict Processing: You have the right to request that we restrict or stop processing your data.

To exercise any of these rights, please contact us at support@attechstudios.co.uk.

5. Data Retention & Account Deletion

  • Competition Data: We store prediction and league details as long as the league is kept active by the administrator.
  • Admin Deletion: League administrators can permanently delete a competition code. Deleting a competition completely wipes the competition document, player profiles, and all predictions from Cloud Firestore.
  • Manual Deletion Request: Users can request complete profile and data removal by contacting us at support@attechstudios.co.uk. We will process and confirm deletion within 30 days.

6. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has registered, please contact us immediately, and we will purge the account and associated records.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: