Privacy Policy — ScoreSay
Published at: https://scoresay.com/en/privacy/
This policy covers the ScoreSay mobile app and shop orders. Novaurion’s other websites and voice AI platforms are governed by a separate privacy policy; the two must not be confused.
Data controller: Novaurion Yazılım ve Yapay Zeka Çözümleri
İzmir Teknopark, İYTE Kampüsü B2 Ar-Ge Binası, Gülbahçe Mah. Gülbahçe Cad. No: 1/48 İç Kapı No: 4, Urla / İzmir, Türkiye · [email protected]
Short answer
Keeping score, joining a tournament with its code and following a tournament work without an account; an account is optional and needed only to run a tournament (be its organizer), add friends, set up a club, and sign up to a tournament where players sign up themselves through a link (open registration). Without one the app never asks for your name, email or location, and your scores stay on your phone. If you do create an account we take your email, your first and last name (other people only see a short form such as “Ferhat T.”; if you sign up to a tournament, its organizer also sees the name you choose for the entry list), your country, city and phone number (all three for support and account security; shown to no one) and your acceptance of the terms; gender, level and avatar are entirely optional. Promotional emails and SMS are sent only if you switch them on; they are off by default. Your settings and match summaries are kept on our server so they follow you across devices, and they are deleted the moment you tap “Delete account” (details: Account). If you set up a club account, the club’s details (including the club’s contact phone), court devices and club screens are also kept on our server (details: Club accounts). The free version shows an ad after each match via Google AdMob, and the ad technology processes limited device data for that purpose. If you buy the Ad-Free subscription (monthly or yearly), both the ads and that data processing stop entirely.
Long answer
Account is optional; running a tournament needs one. Keeping score, joining a tournament with its code, entering scores in it and watching the live board work without registration or sign-in, and in that case the app never asks for your name, email, phone number or location. An account is needed only to run a tournament (be its organizer), add friends, set up a club, and sign up to a tournament with open registration (see Open registration). If you want your settings and match history on more than one device, you can also create an account with your email address. You sign in with a 6-digit code emailed to you; the code is valid for 10 minutes, only its hash is kept on the server, and code records are purged within a day. Accounts on a club team may optionally also set a password (a club may give a password to a staff account it creates); the password itself is never stored, only a salted scrypt hash is kept, and passwords are never sent by email.
Profile. When the account is created you fill in a short profile form. Required: your first and last name, country and city, a phone number, and your acceptance of the terms of use and the privacy notice (the time of acceptance is recorded; acceptance cannot be withdrawn, it ends when you delete the account). You pick or type the country and city yourself; the app does not access your device’s location. Your country, city and phone number are kept for support and account security; the phone number is not verified and no SMS code is sent. If you have allowed notifications, your country and city are also used to let you know when a new tournament with open registration is listed in your city (at most two notifications a week; you can turn this off on the “Notifications” or “Tournaments in your city” screen; see Tournaments in your city). Optional: gender (female/male; to make setting up mixed-doubles tournaments easier) and level (1–7; for balanced pairings and tournament seeding). Under Profile → “Edit profile” you can change the required fields but not leave them empty; the optional fields you can leave empty, and change or clear later. Accounts created with earlier versions of the app are asked for any missing required fields the first time the new version opens. Your full name, gender, level, country, city and phone number are visible only to you: they are not shown to organizers, clubs or other users; your friends and other users (friend list, notifications, live match) see only a short name derived from your first name and the initial of your last name (e.g. “Ferhat T.”) and your avatar if you have one. The one exception is open registration: when you sign up to a mixed-format tournament, the gender you choose on the sign-up form is shown to the organizer and, once the roster is set, on the tournament’s public board.
Promotional messages: off by default. The same form asks separately whether you want offers and news by email and by SMS. Both start switched off; for a channel you switch on, only the time of your consent is recorded. Your phone number is not used for promotional messages unless you switch this consent on. You can switch the consent off at any time on the same screen; the record is deleted the moment you do, and nothing is sent through that channel.
When you create an account we also keep: your email address, the short name others see, an optional avatar photo, the device name and platform of each device you sign in on (e.g. “iPhone · iOS”), your preferred sport and hand, and the app language. While you are signed in the following is stored on our server (scoresay.com, hosted in the United Kingdom) and synced between your devices: your app settings, your match summaries (including the player names you type), the tournaments linked to your account, and the list of signed-in devices. This data is used only to run your account; it is not used for advertising, not shared with third parties (what a tournament organizer sees when you sign up is described under Open registration), and promotional messages are sent to you only if you switched on the consent above. Account data is kept until you delete the account; inside the app you can download a copy of your data (JSON) and delete everything instantly with “Delete account” (see Deleting your data).
Stored on your device. The following stays in your phone’s own storage:
- the score of the match in progress
- a summary of your recent matches
- your settings (announcement preference, remote setup, etc.)
- the last known state of your Ad-Free subscription (so you stay ad-free offline)
Player names you type are part of these records and, if you have no account, never leave the device (the one exception is tournament mode). Deleting the app deletes all of it. If you created an account and are signed in, your settings and match summaries are additionally kept on our server; the score of the match in progress is never synced.
Advertising (Google AdMob). In the free version a full-screen ad is shown when a match ends, plus a banner below some list screens. Ads are served by Google’s AdMob service; when AdMob has no ad to show, one may come through Unity Ads or Liftoff instead (mediation). Google, Unity and Liftoff may process: the advertising identifier (the Android advertising ID; on iOS the IDFA only if you allow it), IP address, general device information and diagnostics about ad performance.
- On Android ads may be personalised to your interests. Users in the EU/UK are shown Google’s consent screen on first launch and their choice is honoured. You can reset or delete your advertising ID at any time in your device settings (Settings → Google → Ads).
- On iOS Apple’s App Tracking Transparency prompt is shown on first launch. If you allow it, ads may be personalised and Google may use your advertising identifier (IDFA) to link activity across apps. If you decline, only non-personalised ads are shown, there is no cross-app tracking, and the app works exactly the same. You can change your choice at any time in Settings → Privacy & Security → Tracking.
How Google uses this data: policies.google.com/technologies/partner-sites
If you buy the Ad-Free subscription, the ad technology is never initialised and the ad-related data processing above stops entirely.
Purchases (RevenueCat). The only in-app subscriptions are Ad-Free (monthly or yearly) and Tournament Pro (monthly or yearly), both bought through the App Store’s or Google Play’s own payment sheet. Club plans (Club Duo, Club Trio, Club Arena) are not sold in the stores: they are sold to clubs on a quote basis under a contract and enabled in the app with an activation code (the code is stored on the server only as a hash). Your payment details (card, billing address, etc.) stay with Apple/Google; neither the app nor Novaurion ever sees them. To verify that the subscription is active we use the RevenueCat service: RevenueCat processes a randomly generated anonymous ID and the store receipt — it receives no name, email or payment information. If you created an account and are signed in, your account’s random ID is used instead of that anonymous ID so your subscription follows you across devices — RevenueCat still receives no name or email. RevenueCat privacy policy: revenuecat.com/privacy
Analytics: anonymous usage measurement only. The app (unlike the website, see Website analytics) contains no third-party analytics tool, no crash reporter and no cookies. To understand at which step people stop using the app, it sends the following events to our own server together with a randomly generated device identifier: app open, match setup, match start and end, score card share, subscription screen view, purchase, notification permission, Academy lesson start and completion, module test score and post-match self-evaluation answers. This identifier is never linked to your account, your advertising ID or your IP address; the records are deleted after 90 days. Cross-app tracking happens only on iOS if you granted the tracking permission, and only through the ad services (AdMob, Unity Ads and Liftoff) and ad measurement (Meta). Ad measurement (Meta SDK): the app tells Meta that it was installed and opened; this is used solely to measure how many installs our ads on Meta lead to. Data processed: the advertising identifier (on iOS only if you allowed tracking), IP address and general device information. If you decline tracking, the install is counted but not linked to you. No data is collected for any other purpose.
Permissions.
| Permission | Why |
|---|---|
| Vibrate | Haptic feedback when a point is scored |
| Internet | Loading ads, verifying the subscription, account sync, tournament mode and club features |
| Camera and Photos (only when you ask) | To read player names from a photo or screenshot of a list when setting up a tournament. Text recognition runs on your device. So that names and their pairings are read correctly, the image you choose is sent to our server and read by an AI model; the image is held in memory only for that moment, never written to disk or logged, and is discarded as soon as the answer comes back (details: Reading names from a photo). With no internet connection this step is skipped and reading happens on your device alone. The camera opens only when you tap the button. |
| Camera: QR scanning (only when you ask) | To scan QR codes inside the app: adding friends and, as a club manager, pairing a court device (tablet) with a court. The image is used only to decode the QR code on your device; no photo is taken, stored or sent to the server. The QR codes for joining a tournament and for starting a match from a court are links you scan with your phone’s own camera app; the app asks for no camera permission for those. |
| Photos (only when you ask) | To pick an avatar photo for your account, or a logo and sponsor images for your club or tournament. Only the image you choose is uploaded to our server, downscaled, and shown on your profile or on the club/tournament screens; the rest of your library is not accessed. You can remove the avatar and the images at any time. |
Advertising ID (Android AD_ID) | Ad serving and frequency capping |
Bluetooth remote. The remote connects to the phone as a keyboard, handled by the operating system. The app only hears key presses; pairing and connection are entirely the OS’s business. The app requests no Bluetooth permission.
Spoken announcements. The score is spoken using ready-made announcer recordings that the app downloads from our server (skortabelasi.com); if a recording has not downloaded yet, your phone’s own text-to-speech is used. No personal data is sent when the voice packs are downloaded. The microphone is not used, no audio is recorded, and no audio data from you is processed or transmitted.
Feedback. If you send feedback from inside the app, your rating, topic, message, optional email address (pre-filled from your account if you have one; you can clear it), your account ID and nickname if you are signed in, the app version, operating system, language and IP address are sent to our server. They are used only to reply to you, improve the app and thank you inside the app once your suggestion ships; never for advertising or profiling, never shared with third parties. Without an email address or account, feedback is anonymous.
Support requests. At a moment that suggests you are stuck (for example, leaving a tournament draft without starting it, logging out at the required profile step, or closing a plan page after hitting a limit), the app asks “Need a hand?” at most once per situation. If you answer, the reason you pick, your message, an optional e-mail address and phone number (if you ask us to call you), your account ID if you are signed in, the code of the tournament concerned and a short setup context (step, sport, format, number of players), the app version, operating system and language are sent to our server; your IP address is not stored with the request. They are used only to get back to you and improve the app; never for advertising or profiling, never shared with third parties. Whether the question was shown is also recorded in the anonymous usage measurement. If you have an account and have allowed notifications, we may send one “need a hand?” notification about a tournament draft that has not been started. Requests are deleted automatically after 12 months, and immediately if you delete your account.
KVKK and GDPR. Data processed for ad serving and subscription verification (advertising ID, IP address, anonymous subscription ID) is processed on Google’s and RevenueCat’s servers abroad; under Turkish law (KVKK) this constitutes a cross-border transfer. The legal basis is legitimate interest, and explicit consent for personalised ads — Google’s consent screen in the EU/UK, and Apple’s tracking prompt on iOS. Without an account your scores and settings never leave the device: clear match history inside the app, or uninstall to erase everything on the device. If you created an account, the account, profile and sync data (email, first and last name, country, city, phone, short name, acceptance of the terms, optional gender/level, device name, settings, match summaries), club account data (including the club’s contact phone) and open-registration data (see Open registration) are processed on the basis of performance of a contract (KVKK Art. 5/2-(c), GDPR Art. 6(1)(b)); your avatar photo and promotional messages by email/SMS on the basis of your explicit consent (KVKK Art. 5/1, GDPR Art. 6(1)(a); for promotional messages also the consent required by Turkish Law No. 6563), which you can withdraw at any time. For the people a club enters in its own player roster, the club is the data controller and Novaurion acts as a processor (see Club accounts); our server is in the United Kingdom (a cross-border transfer under KVKK). You can delete the account and download a copy of your data inside the app at any time. The Ad-Free subscription stops all ad-related processing. For questions about your rights, write to [email protected].
Reading names from a photo
When setting up a tournament, instead of typing the player list you can take a photo or pick a screenshot. This runs only when you start it; the camera and the photo library never open on their own.
Text recognition runs on your device. So that the names are read correctly and matched with the right partners, the image you choose and the recognized text lines are sent to our own server (scoresay.com) and from there read by Anthropic’s Claude AI model. The model answers only one question: which players are on this list, and who is paired with whom.
Neither the image nor the text is stored anywhere. On our server they are held in memory only while the request is being handled; they are never written to disk, never appear in log files, and are discarded as soon as the answer comes back. The only thing that reaches the database is the player names you confirm adding to the roster — and those are kept as described under tournament mode. Anthropic does not use these requests to train its models. No account is created and nothing identifying you is sent.
With no internet connection, or if this step fails for any reason, reading happens on your device alone and the flow continues unbroken; the app then shows a “read offline” note under the list. You can correct or remove any name before adding it.
Names in the score call
When the score is announced in Turkish, player and team names are spoken in the commentator’s voice too. For that, the name you typed for the match is sent to our own server (scoresay.com) and voiced from there by the ElevenLabs speech service. Only the name is sent; no score, match, device or account information.
The generated audio is kept on our server so that the same name is not generated again the next time it is requested; who made the request (IP address, device, account) is not stored. If you prefer, set “Score call voice” to “Device voice” on the Voice announcements screen; names are then never sent.
Tournament mode (Americano)
Tournament mode links several phones to the same tournament, so tournament data is kept on our own server (scoresay.com, hosted in the United Kingdom). The person who creates the tournament (the organizer) signs in to their account in the app and types a tournament name and the players’ nicknames; participants join without an account, with a tournament code made of letters and digits (e.g. AMR-7K3QX), and pick their own name from the list. Instead of typing the names, the organizer can also let players sign up themselves through a link; on that route the people signing up need an account too (see Open registration). Stored on the server: the tournament name and settings (with open registration also the number of places, the entry fee, the venue and the sign-up deadline), the player names the organizer typed or took into the roster from the sign-ups, match scores and standings, a randomly generated link key per device (to tell which device is scoring which match) and, if the organizer entered them, a sponsor line, a logo address and any sponsor images they upload. Joining a tournament asks for no e-mail, phone number, location or device identifier; organizing and open registration rely on your account, but your e-mail address and phone number are never shown to other participants or to the organizer. A tournament you create or join on a device where you are signed in to your account is additionally linked to it (just a “this tournament belongs to this account” record) so you can return to it from another device; deleting the account removes the link, while the tournament itself remains.
Anyone who knows the tournament code can open the live board (scoresay.com/t/CODE) and see player names and scores, so share the code only with the people you play with. Tournament data stays on the server after the tournament ends so the standings remain viewable; if you want it deleted, e-mail the tournament code to [email protected] and we will remove it.
Sponsor impression counters. If the organizer added sponsor images, the devices showing the live board or a player screen report how many times and for how many seconds each image was displayed, as aggregate numbers; the organizer sees this in the sponsor report for their own tournament. Nothing identifying you is sent: a random number generated on the device is stored only as a hash specific to that tournament — it cannot be matched across tournaments and is deleted after 90 days. No advertising identifier is used and there are no tracking cookies.
Tournament Pro. A monthly/annual subscription for organizers, bought through the store’s own payment sheet. Our server checks with RevenueCat whether the subscription is active: the app attaches the anonymous subscription identifier generated by RevenueCat to tournament requests, and the server stores it alongside that device’s record. The identifier contains no name, e-mail or payment details; it is used only to answer “does this device have an active subscription?”.
Open registration (signing up to a tournament through a link)
An organizer can create a tournament without typing the player names and share a registration link (or its QR code) instead; players then sign up themselves in the app. The organizer must be signed in to their account to do this, and signing up also requires the optional account. Anyone who opens the link sees only a summary: the tournament name, sport and format, date, the club’s name and logo or the organizer’s short name (e.g. “Ferhat T.”), the venue, the entry fee, the number of places and how many are taken. The names of the people who signed up are not shown there.
What is stored when you sign up. The link to your account; the name you want on the entry list (your short name by default — you can change it); in a pairs tournament your partner’s name and an optional team name; only in mixed formats, the gender you select on the form; the status and position of the entry (main list or waiting list); the “paid” mark set by the organizer; and when the entry was created and changed. In a pairs tournament your partner can confirm with their own account through a one-time invitation link; until then they remain just the name you typed. To sign you up, your device gets a link key for that tournament and the tournament is linked to your account (see Tournament mode).
What the organizer sees. The organizer (for a club tournament, the club running it) sees the list of entries: the name on the list, partner and team name, whether the partner has confirmed with their account, the position, the entry time, the paid mark they set themselves, in mixed formats the gender, and, if the name on the list differs from your account, your account’s short name. Your e-mail address, phone number and other profile details are not shown to the organizer. Once the organizer sets the roster, the name on the list, the team name and (in mixed formats) the gender appear on the tournament’s public live board (scoresay.com/t/CODE), like any tournament roster. If you have allowed notifications, you are notified when your entry changes (moved up from the waiting list, removed by the organizer, tournament started or cancelled) and when your partner confirms; the organizer is notified of new sign-ups and withdrawals, with the name on the list.
No payments. ScoreSay does not take, process or broker any payment, and no money moves in the app. The entry fee shown is information from the organizer and is paid at the venue, directly to the organizer. The “paid” mark is only a note the organizer keeps on their own list and is not a receipt. The fee, refunds and cancellations are between you and the organizer; Novaurion is not a party to that arrangement.
Legal basis. Sign-up data is processed to carry out your request to be entered in the tournament (KVKK Art. 5/2-(c), GDPR Art. 6(1)(b)); for the same reason it is shown to the organizer of that tournament.
Retention and deletion. You can cancel your entry in the app before the tournament starts. Cancelled entries and entries removed by the organizer are deleted automatically after 30 days; all other entries 30 days after the tournament ends. If you delete your account, your entries in tournaments that have not started are deleted immediately (the first person on the waiting list moves up); where you had confirmed as someone’s partner, only the link to your account is removed and the partner name stays in their entry. In tournaments that have started or ended, the link to your account and the name on the entry are removed; the name in the tournament’s own roster and results stays as part of the tournament record. Your entries are included in the copy of your data you can download in the app (“Download my data”).
Tournaments in your city (public tournament list)
Clubs’ tournaments are listed publicly in the app’s Tournaments in your city list and on the city pages under skortabelasi.com/tournaments/; these pages may appear in search engines. The list contains tournament information only: the tournament name, sport and format, date, the club’s name, city and (for clubs with a paid plan) logo; if registration is open, the entry fee, the number of places, how many are taken, the sign-up deadline and the registration link; for a tournament in progress, a link to the live board if the club shows tournament codes. Player and organizer names are not listed. No tournament is listed automatically: a tournament appears only if its organizer turns on sharing under “City listing” in the tournament settings, and the organizer can turn it off at any time. A tournament not linked to a club (a personal tournament) is listed only if its organizer turns this on, with the city they choose and the venue name they typed. Anyone who opens the registration link of a listed tournament sees the summary described under Open registration.
City notifications. If you have an account and have allowed notifications, we may send you a notification when a new tournament with open registration is listed in the city in your profile, with the tournament name, its club or venue, the date and the registration link. At most two notifications are sent per week, and only once for the same tournament. For this, a record of which tournament notification went to which account, and when, is kept for 120 days and then deleted automatically; if you delete your account, it is deleted immediately. You can turn these notifications off in the app on the “Notifications” or “Tournaments in your city” screen. Your city is used for no purpose other than targeting this notification and is shared with no one. Legal basis: performance of the service provided with your account (KVKK Art. 5/2-(c), GDPR Art. 6(1)(b)).
Club accounts
If you are signed in to your account you can set up a club in the app. For a club the following is stored on our server (scoresay.com, hosted in the United Kingdom): the club name, the club’s address slug (e.g. scoresay.com/c/club-name), country and city, the club’s contact phone (for contact with the club, support and plan quotes; seen only by the club’s members, never shown on the public club screens), logo and sponsor images, court names, sports and announcer settings, the club’s members (which accounts are owner, manager or staff), plan and licence details (only a hash of any activation code used), tournaments linked to the club and matches played at the club (including player names and scores). The account that creates the club is its owner; members reach the club only through their own accounts and only as far as their role allows.
The club’s player roster. Club staff can keep a list of their players in the club panel: name, phone number, e-mail, level and a note. The club, not Novaurion, collects and enters this information; for this data the club is the data controller and Novaurion is only a processor storing it on the club’s behalf. Only members of that club can see the list; it is used for nothing else and shared with no one. If you are on a club’s list and want your entry corrected or deleted, contact the club first; if you write to us, we pass your request on to the club and delete the entry where necessary.
Court devices. Tablets placed at the courts are paired with a court by the club manager scanning a QR code with their phone. For each device the server keeps only: a randomly generated device key (hash only), the device type (court, board or admin device), the court number, a label, battery level, app version, and the pairing and last-seen times. These records contain no personal data. A device can be removed from the club panel or from the device itself.
Starting a match from a court. When the court tablet is idle it shows a short-lived QR code. A player scans it with their phone, sets up the match on the phone and keeps score on the phone; the tablet shows the same score. No account is needed. The server keeps only a hash of the QR code and of the setup ticket, the scan and start times, which court and which match, and the ID of the random link key issued to the phone for that match; these records are deleted automatically within 1 day. The match itself (the player names you enter and the score) stays as the club’s match record and appears on the club screens.
Public club screens. The club board (scoresay.com/c/CLUB) and the Club TV screen (scoresay.com/tv/CLUB) are open to anyone with the link. They show the club’s name and logo, court names, team and player names of the matches on court, live scores, upcoming matches and the club’s sponsor images. The club can choose in its settings whether tournament join codes are shown on these screens. Because the names you enter when setting up a match at a club appear on these screens, you may use a nickname if you prefer.
Club reports. Club managers see match counts per day and per court and a sponsor impression report. Sponsor impressions are kept as anonymous aggregate counters: day, screen type (web or app), number of impressions and display time. The random number used so that the same screen is not counted over and over is used only briefly in the server’s memory and is not stored. Sponsor counters are kept as long as the club exists and are deleted when the club is deleted; there is no separate automatic deletion period.
Booking system connection. A club can connect its own booking system. The booking system then sends our server the court, the start and end time, the player names (full name or shortened name) and the club’s own member number; these are shown only on the booked court’s tablet around the booking time and do not appear on the public club screens before play. When the match ends, the result (player names, score, winner, times) is sent back to the club’s booking system over a signed connection. The club is the data controller for this data; Novaurion acts as data processor. Booking records are deleted automatically 30 days after the booking ends and delivery records after 30 days; all of it is deleted immediately when the club is deleted. The match played stays in the club’s match records like any match played at the club.
Club team invitations. A club owner can invite the people who run the club with them (managers, staff) by email address. A person who already has an account is added to the team immediately and receives a notification email. A person without an account receives an invitation email; the invited email address is kept until that person first signs in with it, for at most 14 days, and is then deleted automatically. When the person signs in, they enter their own name, phone and city and accept the terms of use themselves. Pending invitations are deleted immediately when the club is deleted.
Deleting a club. The club owner can delete the club in the app (confirming by typing the club’s name). The moment it is deleted, the club and its board/TV addresses are closed and the following is deleted immediately: all memberships, the club’s player roster, courts and announcer settings, court device records, court match-start records, sponsor counters, and the logo and sponsor images (including the image files). Tournaments are detached from the club but not deleted (see Tournament mode). Records of licences granted to the club are kept, together with the club’s name and country/city, as contract and billing records; they are deleted on request where no legal retention obligation applies or once it has ended. When you delete your account, clubs of which you are the only owner are deleted in the same way; a club that has another owner stays, and only your membership is removed.
Club contact form. If you write to us through the Clubs page on scoresay.com or the “5 or more courts” quote form in the app, we store: your name, the club’s name, city, number of courts, phone number and/or e-mail, language, where the form was sent from and, if you are signed in, your account ID. This is used only to get back to you about the offer (KVKK Art. 5/2-(c), GDPR Art. 6(1)(b): steps taken at your request before entering into a contract); it is not added to any marketing list and not shared with anyone. There is no automatic deletion: the record is kept until you ask us to delete it, and is deleted on request.
Shop orders
If you order a product through scoresay.com then, unlike the app, we do have to collect personal data — we need somewhere to send the product and something to put on the invoice. We collect: your name, delivery address, phone number, e-mail address, and the contents and total of your order; your Turkish ID number (or foreign ID number) for an individual invoice; plus company name, tax office and tax number if you asked for a company invoice.
Your card details never reach us. Payment runs on the infrastructure of iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., a licensed Turkish payment institution. Your card number, expiry date and CVC go straight to iyzico’s system and are never written to our server at any point. All that comes back to us is “payment succeeded / failed” and a transaction reference. In this relationship iyzico is a data processor and its own privacy policy applies.
Who we share it with. Your delivery address and phone number go to the carrier so the parcel can be moved. To take the payment, your name, e-mail address, phone number, address and — for an individual invoice — your Turkish ID number are passed to the payment institution iyzico. Invoice details enter our accounting records and the Turkish e-invoice system as tax law requires. Beyond that, your order data is shared with nobody, added to no marketing list, and used for no advertising.
How long we keep it. Commercial books and records must be kept for 10 years under the Turkish Commercial Code and Tax Procedure Law, so we cannot delete your order and invoice records during that period. This is a legal obligation, not a choice. Records are destroyed once the statutory period expires.
Legal basis. Processing order data is necessary for the conclusion and performance of a contract under Article 5/2-(c) of the Turkish Data Protection Law; retention rests on compliance with a legal obligation under Article 5/2-(a). Because this rests on contract and statute rather than consent, you cannot ask for it to be erased while your order is in progress; it is erased after the statutory retention period.
Your rights. Under Article 11 of the Turkish Data Protection Law you may access your order data, have inaccurate data corrected, and ask for erasure once the statutory retention period has passed. Write to [email protected].
The full terms of sale are on the Distance Sales Agreement and Preliminary Information Form pages.
Website analytics (scoresay.com)
On this website we may use Google Analytics 4 to understand which pages are read and how people find the site. This applies to the website only; the mobile app contains no analytics.
No cookie is set without your consent. When the site opens, a cookie preference bar appears at the bottom. Until you choose “Accept”, Google Analytics runs in consent-denied mode: it writes no cookie to your browser and cannot recognise you across visits; Google only receives a cookieless, identity-free page-view signal. If you choose “Decline”, that choice is stored in your browser and the bar does not return.
If you accept, Google Analytics sets its _ga cookies (for up to 2 years) and processes: pages viewed, time on site, referring site, browser and device type, and approximate location (country/city; the IP address is truncated and not stored). This is never matched to your name, e-mail, account or app data, and is not used for advertising (advertising cookies stay off in every case). The data is processed on our behalf by Google LLC (USA) on the basis of your consent, which you can withdraw at any time.
Meta pixel (ad measurement). We use the Meta Pixel to measure whether the ads we run on Meta (Facebook, Instagram) actually work. It too starts only after you choose “Accept”: until you consent the pixel script is not even downloaded and no request reaches Meta. If you accept, the following is sent to Meta: the address of the page you are viewing, your IP address, your browser and device information, any Meta cookies you have, and whether you clicked the quote link on the “Clubs” page. Meta processes this on our behalf for ad measurement and ad targeting; the data is handled by Meta Platforms Ireland Ltd. (Ireland) and Meta’s own policy applies: facebook.com/privacy/policy. This rests solely on your explicit consent. If you decline, no ad measurement takes place; you may still see our ads, but they are not linked to this site.
To change your choice: reopen the cookie preference. How Google uses data: policies.google.com/technologies/partner-sites.
Embedded Instagram content
On some pages we show our Instagram posts embedded. This content is not loaded until you press the play button: until then your browser sends no request to Instagram at all, and only a cover image from our own server is on the page.
When you press the button, the content is loaded from Instagram (Meta Platforms Ireland Ltd.); at that moment your IP address, browser and device information and any Instagram cookies you have are sent to Meta, and Meta’s own privacy policy applies: privacycenter.instagram.com/policy. If you do not press it, no data is transferred. This transfer is based on your click, that is, your explicit consent; it is independent of the analytics choice in the cookie bar.
Children. The app is not directed at children.
Changes. If this policy changes, the date above is updated and the current text is published at the same address.
Contact: [email protected]
Deleting your data
If you have an account, go to Settings → Account → “Delete account” inside the app: your email, first and last name, short name, profile details (gender, level, country, city, phone number), acceptance of the terms and promotional consents, avatar, device list, synced settings, match summaries, friendships, notification records and club memberships are all deleted immediately, with no waiting period. Tournaments you created are shared with other people, so the tournament record stays and only its link to your account is removed; you can have those deleted too by the route below. Your open-registration entries in tournaments that have not started are deleted as well (if you paid a fee, talk to the organizer about a refund); in tournaments that have started or ended, only the link to your account and the name on the entry are removed. Clubs of which you are the only owner are deleted at the same time, to the same extent as “Delete club” (see Club accounts); a club that has another owner stays, and only your membership is removed. While deleting, you can optionally tell us why you are leaving (a preset reason and an optional short note); this note is written to our feedback log and e-mailed to us without your account ID, name or e-mail address, only with the app version, operating system, language and IP address, and it is not linked to the deleted account. Before deleting you can take a copy of your data (JSON) with “Download my data”. If you can no longer access the app, you can request the same deletion by e-mail.
If you never created an account, there is no account to delete. You can clear the match history and settings on your device from inside the app or by uninstalling it; none of that ever reaches the server. The only things kept on our server are the record of a tournament you have run, of a match you started from a court at a club, or of a club contact request you sent, and you can ask us to delete them.
How to request deletion by e-mail
- Email [email protected].
- Use “Data deletion” as the subject.
- For an account, write from the account’s e-mail address; for a tournament, include the tournament code (e.g. AMR-7K3QX); for a club, include the club’s address (e.g.
/c/club-name) — that is all we need to find the record. - We delete it within 30 days at the latest and confirm in writing.
| Data | Where | Retention |
|---|---|---|
| Account (optional): email, short name, avatar, device name/platform, sport/hand preference, synced settings and match summaries (including player names), list of linked tournaments, friendships | Our server | Until you delete the account — “Delete account” in the app deletes all of it immediately; by e-mail request within 30 days at the latest |
| Profile: first and last name, country, city, phone number (for support and account security), time the terms were accepted; optional gender, level; time of email/SMS promotional consents | Our server | Until you delete the account — you can change the required fields, and clear the optional fields and switch off the consents in your profile at any time; “Delete account” deletes all of it immediately |
| Club: name, address, country/city, contact phone, logo and sponsor images, courts and announcer settings, members and their roles, plan/licence details, club tournaments and matches, club sponsor counters | Our server | As long as the club exists — when the owner deletes the club in the app, or its only owner deletes their account, it is deleted immediately; tournaments are only detached from the club, and licence records (with the club name) are kept as contract records |
| Club player roster: name, phone number, e-mail, level, note (the club is the data controller) | Our server (on the club’s behalf) | Until the club removes the entry or deletes the club (then deleted immediately); at the person’s request within 30 days at the latest |
| Court device records: device key hash, type, court number, label, battery, app version, last seen (no personal data) | Our server | As long as the club exists; deactivated when the device is removed, deleted immediately when the club is deleted |
| Starting a match from a court: QR and ticket hashes, times, court/match and link key ID | Our server | 1 day, then deleted automatically |
| Booking system connection: bookings (court, time, player names, the club’s member number), result delivery records, API key hash, result URL (the club is the data controller) | Our server (on the club’s behalf) | Bookings 30 days after they end, delivery records after 30 days (automatic); deleted immediately when the club is deleted |
| Club team invitations: invited email address and role | Our server | Deleted automatically when the person first signs in, or after 14 days at the latest; deleted immediately when the club is deleted |
| Club contact requests: name, club, city, number of courts, phone/e-mail, language, source, account ID if any | Our server | Until you ask us to delete it (no automatic deletion) — on request within 30 days at the latest |
| Support requests: reason, message, optional e-mail/phone, account ID if any, tournament code and setup context, app version/operating system/language | Our server | Deleted automatically after 12 months; “Delete account” deletes them immediately |
| Sign-in codes (the 6-digit code sent by e-mail) | Our server (hash only) | Valid for 10 minutes; the record is purged automatically within 1 day |
| Tournament record: player names, match scores, round schedule, standings and prizes, club name/logo, sponsor images, device join keys | Our server | Until you ask us to delete it — on request all of it is deleted |
| Open registration: link to the account, name on the list, partner and team name, gender (mixed formats only), status and position, the organizer’s paid mark, times | Our server | Cancelled or removed entries 30 days, all others 30 days after the tournament ends, then deleted automatically; “Delete account” deletes your entries in tournaments that have not started immediately |
| City notification records: which tournament notification went to which account, and when | Our server | Deleted automatically after 120 days; “Delete account” deletes them immediately |
| Tournament sponsor impression statistics: anonymous aggregate counters and tournament-specific viewer hashes | Our server | Aggregate counters are kept with the tournament record; viewer hashes are deleted automatically after 90 days |
| Usage events (random device identifier, event name, time, platform, language, app version) | Our server | 90 days, then deleted automatically |
| Reading names from a photo: the image sent and the recognised text lines | Nowhere | Not stored — processed as the request happens and discarded once the answer returns, so no record exists to delete |
| Match history, settings, player names (normal match, no account) | Your phone only | Until you delete them; uninstalling the app removes all of it |
| Advertising ID, IP address, subscription id (anonymous, or the account id when signed in) | Google / RevenueCat | Governed by their policies; you can reset your advertising ID in your device settings |
Invoice data for shop orders is outside this scope because we are legally required to keep it (see the order section above).