If you have arrived here, it is a reliable sign that you value your privacy. This document is a one-stop shop for the rules on the processing of personal data and the use of cookies and other tracking technologies within the Show Your Score mobile applications (iOS and Android), the web application (app.showyourscore.com) and the website (showyourscore.com) — together referred to as the "Application".
If you have any concerns about this Privacy Policy, you can contact us at any time at contact@showyourscore.com.
The controller of your personal data is Show Your Score Prosta Spółka Akcyjna with its registered office in Warsaw at Aleja Jana Pawła II 27, 00-867 Warsaw, entered into the National Court Register kept by the District Court for the Capital City of Warsaw under KRS number 0001010337, NIP 5273034354, share capital PLN 25,000 ("we", "us", the "Operator").
For purchases made via our website, Paddle (Paddle.com Market Limited and its affiliates) acts as the merchant of record and is an independent controller of the personal data processed to complete the payment (e-mail address, billing country, payment details, invoicing data). Details: Paddle Privacy Policy.
With regard to our social media profiles (Facebook, Instagram, LinkedIn, YouTube, TikTok, X), the provider of the given social network is a joint controller of personal data together with us, in line with the case law of the Court of Justice of the European Union.
We have not appointed a Data Protection Officer, as it is not mandatory in our situation. In all matters relating to data protection, contact us at contact@showyourscore.com.
| Purpose | Description | Legal basis (GDPR) |
|---|---|---|
| User account | Creating and maintaining your account. Sign-up requires an e-mail address (or authentication via Google, Facebook or Apple, in which case we receive your name, e-mail address and profile picture from the provider on the basis of your authorisation). Our systems also record the IP address used at registration. You can sign in with the same account in the mobile apps, the web application and on the website. | Art. 6(1)(b) |
| Team & sports content | Storing the content you add in order to generate Graphics: team names and logos, opponents, sponsors' logos, coach data and photo, and player data (first and last names, shirt numbers, positions, profile and celebration photos). See section 5 regarding players' data, including data of minors. | Art. 6(1)(b) |
| Orders, subscriptions and contract handling | Processing subscription purchases and providing paid features. Depending on the purchase channel, payment is processed by the Apple App Store, Google Play, or Paddle (website). We use RevenueCat to manage subscription entitlements across platforms. Order-related data (date, transaction ID, product, price) is stored with your account. | Art. 6(1)(b), Art. 6(1)(f) |
| AI image generation | When you use AI features, your text prompts and the images you provide (including player photos, logos and your own photos) are transmitted to third-party AI providers — Google (Gemini API) and OpenAI — for processing. Saved results are stored with your account and are not shared with other users; you may delete them at any time. | Art. 6(1)(b), Art. 6(1)(f) |
| Voice features | When you fill a template or the AI generator form by voice, the audio recorded by your microphone is transmitted through our servers to OpenAI for transcription, and the transcript is processed together with your account data (e.g. player names) to fill in the relevant fields. We do not store the audio or transcripts after processing; we only record anonymous usage statistics (e.g. token counts). | Art. 6(1)(b) |
| Photo processing | Photos you upload may be processed to provide app features: automatic background removal (performed on your device where supported, otherwise by our processing partners — ClipDrop, remove.bg or Pixelcut) and face detection used solely to correctly frame and position the photo on Graphics (performed on-device and/or using Google Cloud Vision). Face detection is not used to identify anyone and no biometric templates are created or stored; only the position of the face within the photo is recorded. | Art. 6(1)(b), Art. 6(1)(f) |
| Complaints and withdrawals | Handling complaints and withdrawal statements; for website purchases, refunds are executed by Paddle. | Art. 6(1)(c) |
| Tax and accounting obligations | Issuing and storing invoices and accounting records (for website sales these obligations are primarily fulfilled by Paddle as merchant of record). | Art. 6(1)(c) |
| Newsletter and product messages | Sending e-mail messages related to the service (e.g. subscription reminders, new templates) and, where consented, marketing messages. You can unsubscribe at any time. | Art. 6(1)(b), Art. 6(1)(f) |
| Push notifications | Sending push notifications via Firebase Cloud Messaging, based on the notification permission granted in your device settings; you can withdraw it at any time. | Art. 6(1)(a), Art. 6(1)(f) |
| Contact and correspondence | Handling messages sent by e-mail, in-app feedback or social media messengers. | Art. 6(1)(f) |
| Analytics and statistics | Analysing how the Application is used in order to improve it, using the tools listed in the annex (Firebase Analytics, Mixpanel — including session replay, Google Analytics). | Art. 6(1)(f) |
| Marketing and advertising measurement | Measuring the effectiveness of our advertising and building advertising audiences using Meta (Pixel and Conversions API) and Google tools; on iOS, advertising identifiers are used only after you grant App Tracking Transparency consent. A hashed (SHA-256) e-mail address and technical identifiers may be transmitted to Meta to attribute subscription purchases to advertising campaigns. | Art. 6(1)(f), Art. 6(1)(a) |
| Defence and enforcement of claims; archives; data-protection compliance | Establishing, asserting or defending claims; maintaining archives; demonstrating GDPR compliance. | Art. 6(1)(f), Art. 6(1)(c) |
The Application is designed for coaches, team managers and club staff, who add data of team members (names, shirt numbers, positions, photos) in order to generate Graphics. If you add other people's data — in particular data of minor players — you are responsible for being entitled to do so, e.g. on the basis of consent obtained from the player or their parent/legal guardian. We process such data solely to provide the service to you (Art. 6(1)(b) and (f) GDPR), we do not use it for marketing, and we delete it when you remove it from your account or delete the account. Requests concerning players' data may also be submitted directly to us at contact@showyourscore.com.
In most cases you provide it yourself (account registration, adding content, purchases, correspondence). Some information is collected automatically by the tools described in the annex. Player data is typically provided by the coach or club staff member managing the team account.
We have analysed the risks and implemented appropriate technical and organisational measures. Data is stored in the Google Cloud / Firebase infrastructure of our project, access is restricted, and connections are encrypted (TLS). We monitor our infrastructure and improve our procedures on an ongoing basis.
We use the services of carefully selected providers, in particular:
Where required, data may also be disclosed to public authorities entitled to access it under the law.
Yes — some of our providers process data in the USA (in particular Google, OpenAI, Meta, RevenueCat, Pixelcut, remove.bg). Transfers take place on the basis of the mechanisms provided for in the GDPR, in particular the EU-US Data Privacy Framework or standard contractual clauses. Mixpanel is configured with EU data residency.
We do not make decisions based solely on automated processing that would produce legal effects for you. Advertising tools may personalise the advertisements you see based on your activity (behavioural advertising); this does not affect the terms of any contract with us.
Under the GDPR you have the right to: access your data and receive a copy; rectify it; erase it; restrict processing; object to processing based on legitimate interest; data portability; withdraw consent at any time (without affecting prior processing); and lodge a complaint with the President of the Personal Data Protection Office (PUODO) or another competent supervisory authority.
You can delete your account (together with the associated data) directly in the Application settings or by contacting us.
Our website and web application use cookies — small text files stored on your device. Some are essential for the services to function; others (analytics, marketing) are used only with your consent, which we ask for via the consent banner on your first visit. You can change your decision at any time (by clearing cookies for our site, which triggers the banner again), manage cookies in your browser, use incognito mode, or use the opt-out tools of the individual providers. Blocking some cookies may limit the functionality of the services.
On the website showyourscore.com, before you give consent, no analytics or marketing tools are loaded (Google Consent Mode v2 with all categories denied by default).
| Tool | Provider | Purpose |
|---|---|---|
| Firebase (Auth, Firestore, Storage, Functions, Messaging, Remote Config, Analytics, Crashlytics, Performance) | application infrastructure, push notifications, product analytics, crash and performance reporting | |
| Mixpanel + Session Replay | Mixpanel (EU endpoint) | product analytics; session replay records how the app screens are used in order to improve UX — replays are linked to the account e-mail |
| Google Analytics | website traffic statistics (loaded only after consent) | |
| Meta Pixel + Conversions API | Meta Platforms | advertising measurement and audiences (website: loaded only after consent; server-side events use hashed identifiers) |
| Meta (Facebook) SDK | Meta Platforms | Facebook login; on iOS advertising features are enabled only after App Tracking Transparency consent |
| RevenueCat | RevenueCat, Inc. | subscription management and entitlements across App Store, Google Play and web (Paddle) |
| Paddle Checkout | Paddle | payment processing for website purchases (merchant of record) |
| OpenAI API | OpenAI | AI image generation, voice transcription, AI text features |
| Google Gemini API / Cloud Vision | AI image generation; face-position detection for photo framing | |
| ClipDrop / remove.bg / Pixelcut | Init ML / Kaleido AI / Pixelcut | background removal from photos and logos |
| AdMob | in-app advertising shown to free-plan users (Android) |
We may modify this Privacy Policy, in particular due to technological or legal changes. Registered users will be notified of changes, which take effect no earlier than 7 days after notification.