Riffa Sports Club app

Privacy policy

Effective: 9 October 2026

Rhinoz Studio operates the Riffa Sports Club app. This policy explains the information used to run the app and your choices. Privacy contact: marwan.qaid@me.com.

Information we process

• Account: email, account identifier, name, username, chosen profile photo and information you permit Apple or Google to share. The authentication service processes passwords; the app does not retain plaintext passwords. Session credentials are stored securely on your device.
• Predictions and loyalty: score predictions, selected goalscorers, points, rankings and prediction and attendance statistics.
• Attendance evidence: submitted photo, caption, match identifier, venue and time, review status, reviewer notes and awarded points. This can indicate attendance at a specific place and time. The app does not request GPS permission.
• Notifications and preferences: language, appearance, notification preferences, in-app message read status and an Apple device token when notifications are permitted and the device is registered.
• Support and security: information you send to support and service providers' operational or security logs, which may include network addresses, request times and service errors.

How we use information

To provide accounts, predictions and rankings; review attendance evidence and award points; store preferences and manage notifications; provide support and protect the service against abuse. Public content can be browsed without signing in; account features require sign-in.

Public visibility

Usernames, profile photos, points and statistics may appear in supporter rankings. Attendance evidence is not a public album; it is available to the submitting user and authorized reviewers. Do not upload sensitive information or photograph others without permission. Re-encoding photos does not remove personal information visible in them.

Services and sharing

Supabase provides authentication, database and file storage. Resend delivers account emails such as confirmation and password recovery. Apple and Google process sign-in under their own policies and share information you authorize. Apple may provide a private relay address when you hide your email. Apple Push Notification service is used for device notification delivery when enabled.

Cloudflare hosts these privacy and support pages. These providers may process information outside your country. Authorized staff and service providers access information as needed to operate the service; disclosure may also be required by law. External content and album links have their own providers' policies.

Permissions and device storage

The app requests camera access for attendance photos and uses the system photo picker for avatars without reading your entire library. Revoke camera or notification permissions in iOS Settings; the associated feature may then be unavailable. Some club data and images are cached for faster loading.

Retention and deletion

Account, profile, prediction and attendance data remain in the service to provide account features until you delete them or your account. Signing out does not delete data. Start deletion from My account → Delete account and follow the confirmation steps. Apple accounts may require renewed Apple authorization.

When permanent deletion completes, the account, profile, predictions, points, notifications, personal photos and attendance evidence are removed from the active service shared by the app and website. Club content and other users' accounts are not deleted. Deletion cannot be undone.

Interrupted requests resume when you retry, not on an automatic schedule. A limited technical record may remain with the account identifier, deletion status and timestamps for security and request recovery, without photos or predictions. There is currently no scheduled automatic deletion for this record; contact us about it or to request removal. Provider logs and backups follow their own retention configurations and policies and may not disappear immediately with active-service data. Contact us for the period applicable to your request.

Security and privacy requests

Access controls, signed file links and secure device session storage help protect information. No method guarantees absolute security. Edit profile details in the app or contact us to request access, correction, deletion or information about applicable privacy rights. We may verify your identity before fulfilling a request. Never send passwords or sign-in codes to support.

Children and changes

The app is not designed specifically for children. Parents or guardians can contact us about a child's information. A store age rating is not itself a legal consent age. Updated policies and effective dates will appear on this page when practices change.