Privacy Policy

1 Information We Collect

We collect information in the following ways:

Information you provide directly

• Account information — full name, username, email address and password when you register.
• Profile information — profile photo, bio, sport preferences and skill level that you optionally add.
• Team & league data — team names, colours, kit details, match results and scores you create or submit.
• Payment information — when you pay collection fees or competition entry fees, payments are processed by our third-party payment processor (end2endPay). We receive a transaction reference and amount but do not store full card or bank account numbers.
• Communications — messages, challenge details, and announcements you post on the platform.
• Referral codes — if you refer another user, we associate your referral code with your account.

Information collected automatically

• Device information — device model, operating system version, unique device identifiers and mobile network information.
• Usage data — pages and screens viewed, features used, buttons clicked, timestamps and session duration.
• Push notification tokens — if you grant permission, we store your device push token to send match reminders and challenge notifications.
• Log data — IP address, browser type, referring/exit pages and crash reports for debugging.

Information from third parties

• Authentication providers — if you sign in via a third-party provider (e.g. Google), we receive your name and email from that provider.

2 How We Use Your Information

We use the information we collect to:

• Create and manage your account and profile.
• Operate team management, league standings, match scheduling and challenge features.
• Process payments and send payment confirmations or reminders.
• Send push notifications and emails about matches, challenges, and competition reminders (you may opt out at any time).
• Display your profile and activity to other users of the same teams or leagues.
• Improve, personalise and expand our platform features.
• Detect, investigate and prevent fraudulent transactions, abuse and other illegal activities.
• Comply with legal obligations and enforce our Terms of Service.

3 Sharing Your Information

We do not sell your personal data. We may share information in these circumstances:

• With other platform users — your username, profile photo, team memberships, challenge history and match results are visible to other users on the same teams or leagues, consistent with the sport community nature of the platform.
• Service providers — we use trusted third parties to help us deliver the service: end2endPay (payments), Supabase (database & authentication), and cloud hosting providers. These parties process data only as directed by us and are bound by confidentiality agreements.
• Legal requirements — we may disclose information if required by law, court order, or to protect the safety of our users or the public.
• Business transfers — if Kickmate is acquired or merges with another entity, your data may transfer as part of that transaction. We will notify you before this happens.

4 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain certain records for legal or financial compliance (e.g. payment transaction records are retained for up to 7 years as required by applicable financial regulations).

Anonymised or aggregated data (e.g. league statistics, win/loss ratios without personally identifying information) may be retained indefinitely.

5 Your Rights and Choices

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — update or correct inaccurate information via your profile settings or by contacting us.
• Deletion — request deletion of your account and personal data. You may do this in the app via Profile → Settings → Delete Account, or by emailing us.
• Portability — request an export of your personal data in a machine-readable format.
• Opt out of notifications — manage push notification permissions in your device settings; manage email preferences in your account settings.
• Restrict processing — in certain circumstances, request that we limit how we use your data.

To exercise any of these rights, email us at privacy@kickmate.ng. We will respond within 30 days.

6 Security

We implement commercially reasonable technical and organisational measures to protect your information, including:

• HTTPS/TLS encryption for all data in transit.
• Passwords stored using industry-standard hashing (bcrypt).
• JWT-based authentication with short-lived access tokens.
• Database access restricted to server-side processes only; no direct public database access.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately.

7 Children's Privacy

Kickmate is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

8 Third-Party Links and Services

Our platform may link to third-party websites or services (e.g. payment pages). We are not responsible for the privacy practices of those third parties and encourage you to read their privacy policies.

9 International Data Transfers

Kickmate is operated from Nigeria. Your information may be transferred to and processed in countries other than your own (including servers located in the EU or US) where data protection laws may differ. By using the platform you consent to such transfers. We take steps to ensure appropriate safeguards are in place.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

11 Contact Us

If you have any questions, requests, or complaints about this Privacy Policy or our data practices, please contact us: