Privacy Policy for
ScoreCastPro
Last Updated: April 30, 2026 Effective Date:
April 30, 2026
1. Introduction
Welcome to ScoreCastPro (“we,” “our,” or “us”). We
are a European-based organization committed to
complying with the General Data Protection Regulation
(GDPR) and the California Consumer Privacy Act
(CCPA). This Privacy Policy explains how we collect, use,
disclose, and protect your information when you use our mobile
application, ScoreCastPro, designed to help sports
clubs and individuals stream their matches with professional
overlays.
By using ScoreCastPro, you agree to the terms outlined in this
policy. If you do not agree with these terms, please do not use the
app.
2. Scope of This
Policy
This Privacy Policy applies to all users of
ScoreCastPro, including clubs, coaches, players, and
any other individuals or entities using our services. It covers data
processed through the app, our backend services, and our websites (app.scorecastpro.com, www.scorecastpro.com).
ScoreCastPro is designed to minimize data
collection. We only collect what is strictly necessary to
operate the subscription system and to allow the app to function. We do
not collect names, email addresses, phone numbers, postal addresses, GPS
or other location data, contacts, photos, social-media data, advertising
identifiers (IDFA/IDFV), or behavioral analytics.
3.1. Data Sent to Our
Backend
When you use ScoreCastPro, the app communicates with our subscription
backend in order to authenticate the installation, enforce the freemium
/ Pro plan, and reconcile in-app purchases with the App Store. The
following data is transmitted and stored on our servers:
- Installation identifier
(
device_install_id): a random UUID generated
locally on your device the first time you launch the
app and stored in the iOS Keychain. It is not the
device's hardware identifier and cannot be linked to you
personally.
- Account identifier: a UUID created by our backend
and associated with your installation. It is not an
email address or a username.
- Technical device metadata: device model (e.g.
iPhone15,2), device idiom (phone/pad), iOS version, app
version and build number. Collected for compatibility and support
purposes.
- IP address: like any web service, our servers
automatically receive your IP address when the app makes a request. It
is recorded in technical logs (see §6).
- Apple in-app purchase data (only if you subscribe
to ScoreCastPro Pro): the signed App Store transaction (JWS), the
transaction ID, the original transaction ID, the product ID, the
purchase / expiration dates, the trial flag, and Apple's
server-to-server subscription notifications. We never see or
store your payment card or PayPal credentials — payment is
handled entirely by Apple. We only receive Apple's signed receipt
confirming the purchase status.
3.2. Data Stored
Locally on Your Device
The following data stays on your device and is never
transmitted to our servers. We do not have access to it:
- Custom scoreboard templates: team names, logos,
colors, and scoreboard customizations.
- Recorded videos: any video you record with
ScoreCastPro is stored locally; if you enable “Save to Photos”, it is
also added to your iOS Photo Library, which remains under your sole
control.
- App preferences: selected sport, default settings,
scoreboard positioning, etc.
- Streaming credentials and tokens: OAuth tokens for
Twitch and YouTube/Google (stored in the iOS Keychain) and stream keys
for the streaming destinations you configure.
- Diagnostic logs: short-lived logs generated during
a recording/streaming session, kept locally for troubleshooting.
You can delete this locally stored data at any time by removing the
relevant items from the app or by uninstalling ScoreCastPro from your
device.
3.3. Data Collected
Automatically
- Server access logs: when the app calls our backend,
we record technical logs (timestamp, IP address, endpoint, installation
identifier, account identifier, transaction identifier where
applicable). These logs are used for security, fraud prevention and
debugging.
- Crash logs: if the app crashes, iOS may generate a
crash report. These reports do not contain personal data and are used
solely to improve app stability.
- App Store statistics: Apple may share aggregated,
anonymized statistics (e.g. number of downloads, app version
distribution) through App Store Connect. This data is governed by
Apple's Privacy Policy.
We do not use any third-party analytics,
advertising, attribution or crash-reporting SDKs (no Firebase,
Crashlytics, Sentry, Mixpanel, Amplitude, Adjust, Branch, Facebook SDK,
etc.).
We use the limited data described in §3.1 only to:
- create and authenticate your installation;
- determine whether your installation is on the Free plan, in trial,
or has an active Pro subscription;
- reconcile your in-app purchase with Apple's App Store and apply
renewals, cancellations and refunds;
- provide support and debug technical issues;
- prevent fraud and abuse of the subscription system;
- comply with our legal and accounting obligations.
We do not sell, rent, or share your data with
advertisers. We do not build a profile about you.
5. Legal Basis for
Processing (GDPR)
Under the GDPR, we rely on the following legal
bases:
- Performance of a contract (Article 6(1)(b)):
processing data needed to provide the app and manage your subscription
(installation identifier, account identifier, Apple purchase data).
- Legitimate interest (Article 6(1)(f)): processing
technical metadata, server logs and crash reports for security, fraud
prevention, debugging and product improvement. These purposes do not
override your rights and freedoms.
- Legal obligation (Article 6(1)(c)): keeping
subscription / billing records for the period required by applicable
accounting and tax law.
6. Data Storage and
Security
- Backend hosting: our backend (application +
PostgreSQL database) is hosted by OVHcloud in Milan,
Italy (region
EU-SOUTH-MIL). All data described in
§3.1 stays within the European Economic Area.
- What is stored on our servers: account UUIDs,
installation records (
device_install_id, technical
metadata, last seen date), purchase records (Apple transaction
identifiers, product, dates, status, signed receipt) and Apple
subscription notifications. No name, no email, no postal address.
- Local-only data: the items listed in §3.2
(templates, videos, preferences, OAuth tokens, stream keys) are never
uploaded to our servers.
- Security measures: communications between the app
and the backend use TLS. OAuth tokens and the installation identifier
are stored in the iOS Keychain on your device. Backend access is
restricted and audited.
7. Third-Party
Services
ScoreCastPro integrates with the following third parties to deliver
its features. Each provider acts under its own privacy policy:
- Apple App Store / StoreKit — handles all payments
and subscription lifecycle. We receive only Apple's signed transaction
receipts and S2S notifications. See Apple's Privacy
Policy.
- Twitch — when you choose to stream to Twitch, we
use Twitch's OAuth flow. The resulting access token, refresh token and
your Twitch user ID / login / display name are stored in the iOS
Keychain on your device and never sent to our servers. See Twitch Privacy
Policy.
- YouTube / Google — when you choose to stream to
YouTube, we use Google Sign-In with the YouTube Live scopes. Access and
refresh tokens are managed by Google's SDK on your device. See Google Privacy Policy and
YouTube Terms.
When you stream to one of these services, your video and audio are
sent directly from your device to that service. ScoreCastPro is not in
the middle.
8. Data Subject
Rights (GDPR and CCPA)
8.1. GDPR Rights (EU
Users)
If you are a resident of the European Economic Area
(EEA), you have the following rights under the GDPR:
- Right to Access (Article 15): you may request a
copy of the data we hold tied to your installation / account
identifier.
- Right to Rectification (Article 16): you may ask us
to correct inaccurate technical data.
- Right to Erasure (Article 17): you may request
deletion of your account and the associated installation and purchase
records, subject to the legal retention obligations described in
§11.
- Right to Restrict Processing (Article 18).
- Right to Data Portability (Article 20): you may
request your account / purchase data in a structured, machine-readable
format.
- Right to Object (Article 21) to processing based on
our legitimate interest.
- Right to Lodge a Complaint with your national
supervisory authority.
To exercise these rights, contact us at support@scorecastpro.com.
Because we do not collect your name or email, please include your
installation identifier or the email associated with the App Store
purchase to help us locate your records. We will respond within
30 days.
8.2. CCPA Rights
(California Users)
If you are a resident of California, you have the
following rights under the CCPA:
- Right to Know what personal information we collect,
use or disclose. The categories are listed in §3.1.
- Right to Delete your personal information, subject
to the legal retention obligations described in §11.
- Right to Opt-Out of Sale: we do not sell
personal information.
- Right to Non-Discrimination for exercising your
CCPA rights.
To exercise these rights, contact us at support@scorecastpro.com.
We will respond within 45 days.
9. Children’s Privacy
ScoreCastPro is not directed at children under 13
(or under 16 in the EEA, where applicable). We do not knowingly collect,
use, or disclose information from children. If you are a parent or
guardian and believe we have inadvertently collected data from a child,
please contact us at support@scorecastpro.com
so we can take appropriate action.
10. International Data
Transfers
Our backend and database are hosted in Italy (EEA).
The data we collect described in §3.1 stays within the EEA. When you use
third-party services such as Apple, Twitch, or Google/YouTube, those
providers may transfer data outside the EEA in accordance with their own
privacy policies and applicable safeguards.
11. Data Retention
- Installation records (
devices):
retained while your installation is active. Records that have not
contacted our backend for an extended period may be archived or
deleted.
- Account records (
accounts): retained
while at least one installation is linked to the account, or until you
request deletion.
- Purchase records (
purchases) and Apple
subscription notifications: retained for the duration of the
subscription and for up to 10 years after the last
transaction, in accordance with EU accounting and tax obligations.
- Server access logs: retained for a limited
operational period (typically a few months) for security and debugging
purposes.
- Local data on your device: retained for as long as
you choose to keep it; deleted when you remove the relevant content or
uninstall the app.
12. Changes to This
Privacy Policy
We may update this Privacy Policy from time to time to reflect
changes in our practices or legal requirements. If we make material
changes, we will:
- post the updated policy at this URL,
- update the “Last Updated” date at the top of the document,
- and, where appropriate, notify you within the app.
Your continued use of ScoreCastPro after such changes constitutes
your acceptance of the new policy.
If you have any questions or concerns about this Privacy Policy or
our data practices, please contact us at: Email: support@scorecastpro.com
Website: https://www.scorecastpro.com