Privacy Policy

Effective date: July 24, 2026

This Privacy Policy explains how the MatchOracle mobile application, website, backend services, and support channels (together, the “Service”) process information.

1. Controller and Scope

The Service is operated by Yulia Shkiter, an individual developer in Ukraine operating under the MatchOracle name (“MatchOracle,” “we,” “us,” or “our”). For applicable data-protection law, the operator is the controller of personal data processed for the Service.

This Policy applies to information processed through the MatchOracle iOS app, matchoracle.net, MatchOracle backend services, and support correspondence. Apple separately controls information it processes for the App Store, Apple Account, payment, and refund services under Apple’s own privacy terms.

2. Service Context

MatchOracle provides football fixtures, live match context, statistics, team form, performance information, and prediction-style insights for informational and entertainment purposes.

MatchOracle is not a bookmaker, sportsbook, casino, gambling platform, or real-money gaming service. It does not accept wagers, deposits, or withdrawals and does not pay winnings. Optional Premium access is sold only as an Apple auto-renewable subscription.

No MatchOracle account is required. The current Service does not provide user profiles, chat, comments, or user-generated public content.

3. Information We Do Not Receive

MatchOracle does not require or receive:

• your name;
• postal address;
• phone number;
• email address for account registration;
• account login credentials;
• your full payment card or bank account details;
• your Apple Account password;
• profile information.

Apple processes App Store payments and billing credentials. We receive only signed transaction and subscription-status information needed to validate access.

4. Information Stored Only on Your Device

The app may store preferences and app state locally, including:

• selected language;
• selected timezone;
• favorite matches or teams;
• notification preferences;
• viewed or opened prediction cards;
• cached football content used to improve app performance.

Information that remains only on the device is not collected by MatchOracle. It generally remains until you change the relevant setting, delete the app, or iOS removes it.

5. Information Collected or Processed by the Service

Anonymous installation and access data. The app creates a random installation identifier and stores it in the iOS Keychain. It is not an Apple advertising identifier and does not directly reveal your name. It is sent to our backend to maintain the daily free-match allowance, Premium entitlement, restore state, security controls, and abuse prevention across launches and, where iOS preserves Keychain data, reinstalls.

Subscription and purchase history. If you purchase, renew, restore, cancel, receive a refund for, or otherwise change Premium, we may process Apple-signed information including:

• subscription product identifier;
• Apple transaction and original transaction identifiers;
• purchase and expiration dates;
• production or sandbox environment;
• renewal and entitlement status;
• refund, revocation, billing retry, or grace-period status;
• the anonymous app-account token and installation identifier used for entitlement delivery.

Product interaction data. We retain the match selected for the daily free allowance and the date of that selection. Requests for fixtures, statistics, predictions, and performance may include match IDs, dates, competition filters, timezone, app version, build number, and similar request parameters.

Technical and security data. Internet requests necessarily expose an IP address to our hosting and infrastructure providers. Request time, endpoint, headers, response status, app/build metadata, rate-limit events, and error information may be processed for delivery, security, debugging, and reliability. We do not intentionally use IP addresses to build location profiles or for advertising.

Support data. If you contact us, we receive the sender address, message content, attachments you choose to provide, and technical details included in the support email, such as the anonymous Support ID, app version, build, and Premium status. Do not send payment-card details, passwords, or unrelated sensitive information.

6. Local Notifications

If you grant notification permission, the current release schedules football reminders locally on your device. Notification preferences and schedules remain on the device. The current release does not register an APNs device token with a MatchOracle notification server.

You can disable notifications in MatchOracle or iOS Settings at any time.

7. Purposes and Legal Bases

Where the GDPR, UK GDPR, or similar law applies, we process data under the following legal bases:

• Performance of a contract: providing requested app functions, Premium access, purchase validation, restoration, and support;
• Legitimate interests: protecting the Service, preventing fraud and abuse, enforcing one free selection per day, securing infrastructure, debugging, maintaining reliability, and establishing or defending legal claims;
• Consent: requesting iOS notification permission and any other optional processing expressly presented as consent-based;
• Legal obligations: complying with valid legal requests, tax/accounting duties that apply to us, consumer law, and regulatory requirements.

We do not use subscription, installation, or product-interaction data for third-party advertising, data-broker activity, or cross-app tracking.

8. Service Providers and Disclosures

We may disclose limited data to processors and providers only as necessary to operate the Service, including:

• Apple: App Store purchases, transaction verification, subscription management, refunds, and iOS services;
• Vercel: backend hosting, request delivery, and operational logs;
• Upstash: entitlement, free-access, caching, and rate-limit storage;
• API-Sports/API-Football and other football-data providers: football fixtures, scores, statistics, and related content;
• professional advisers, authorities, or successor operators: only where reasonably necessary for legal compliance, claims, safety, fraud prevention, or a legitimate business transfer subject to appropriate safeguards.

Providers operate under their own terms and privacy notices. We do not sell personal information, share it for cross-context behavioral advertising, or include third-party advertising or attribution SDKs in the current release.

9. International Transfers

We are based in Ukraine, while providers may process information in the European Economic Area, United Kingdom, United States, and other countries. Where required, transfers rely on contractual safeguards, adequacy decisions, provider data-protection terms, or another lawful mechanism. No online service can guarantee that every country provides identical legal protection.

10. Retention

We retain information only for the period reasonably necessary for the purposes described above, including:

• local app data: until removed through app/device settings or app deletion;
• installation, free-access, and previously unlocked-match records: while needed to preserve access, enforce limits, prevent abuse, and handle disputes, generally for the life of the Service and up to six years after the last relevant interaction;
• subscription entitlement and transaction records: while the entitlement may affect access and for up to six years after the last transaction or dispute, unless a longer period is legally required;
• ordinary operational logs: generally up to 30 days; relevant security, fraud, outage, or legal records may be isolated and retained for up to 12 months or longer when reasonably required;
• support correspondence: generally up to 24 months after the last communication, or longer when needed for an unresolved dispute or legal obligation.

We may retain a minimal suppression, fraud, or legal record after a deletion request where necessary to protect rights, comply with law, prevent repeat abuse, or document the request.

11. Security

We use reasonable administrative and technical measures, including Apple-signed transaction verification, encrypted network transport, access controls, rate limiting, and restricted infrastructure credentials. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

12. Your Rights and Choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent without affecting earlier lawful processing; and complain to a competent data-protection authority. These rights may be limited by identity verification, technical feasibility, legal obligations, fraud prevention, and the rights of others.

Visit Privacy Choices for instructions. Because MatchOracle has no account, include the anonymous Support ID generated by the app so we can locate relevant records. We may request reasonable verification before acting.

You may manage or cancel a subscription in your Apple Account settings and request an eligible refund from Apple. Deleting the app or asking us to delete backend records does not cancel an Apple subscription.

13. Children

MatchOracle is not directed to children under 13, and we do not knowingly collect personal data from children under 13. A parent or guardian who believes a child submitted information may contact us for review and deletion.

14. Automated Processing

Prediction-style insights may be generated through automated statistical or rule-based processing of football data. This processing does not make legal or similarly significant decisions about users and is not used to profile individuals.

15. United States Privacy Disclosures

We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics. Where applicable law grants additional rights, submit a request through Privacy Choices. We will not unlawfully discriminate because you exercised a privacy right.

16. Changes to This Policy

We may update this Policy to reflect changes in the Service, providers, law, or security practices. The effective date identifies the current version. Material changes may also be communicated in the app or through another reasonable channel where required. Continued use after the effective date is subject to the updated Policy, but this does not override consent or notice requirements imposed by law.

17. Contact

Controller: Yulia Shkiter, MatchOracle
Country: Ukraine
Email: matchoracleapp@gmail.com
Privacy requests: Privacy Choices

You may also complain to the supervisory authority available under the law applicable to you.