🚫
No ads, ever
We don't show ads or sell your data to advertisers.
This Privacy Policy describes how GoalClash ("we," "us," or "our") collects, uses,
stores, and shares information when you use the GoalClash mobile application
(the "App") and related services. By using the App, you agree to the practices
described in this policy.
🔍
No sections match your search. Try different keywords like "location", "delete", or "email".
🏃
1. Who We Are
▼
GoalClash is a FIFA World Cup 2026 football prediction and fan competition app. The App is operated by the GoalClash team at admin@moje.asia.
For privacy-related questions or requests, contact us at admin@moje.asia.
📊
2. Information We Collect
▼
We collect information in the following categories. Tap a category to explore:
Required for account
2.1 Account and profile information
When you create an account or sign in, we collect:
- Email address and display name (from email/password, Google Sign-In, or Sign in with Apple)
- Username, selected country, and profile avatar (preset or custom photo you upload)
- World Cup winner prediction and gameplay statistics (points, level, rankings)
- Referral code, referral activity, and optional referred-by information
- Account creation date and unique user identifier
Core feature data
2.2 Gameplay and social data
To provide competition features, we collect:
- Match score predictions and advanced predictions (e.g., possession, corners, cards)
- Leaderboard entries, country rankings, and friend connections
- Friend requests and social interactions within the App
- Stadium territory and country conquest participation data
Only during check-in
2.3 Location information (precise location)
We request access to your device's location only when you use the Stadium Check-In feature. We use location to verify that you are within the geofence of a World Cup 2026 stadium. We do not collect location in the background or for continuous tracking.
When you check in, we may collect:
- Latitude, longitude, accuracy, and altitude
- Anti-spoofing signals (e.g., whether location appears mocked)
- Stadium ID, match ID, timestamp, and QR verification data
With your permission
2.4 Camera and photos
With your permission, we access:
- Camera — to scan stadium QR codes and take profile photos
- Photo library — to select a profile avatar image
Custom profile photos are uploaded to our secure cloud storage (Firebase Storage). We do not access your camera or photo library except when you actively choose to use these features.
Automatic
2.5 Device and diagnostic data
We automatically collect certain technical information, including:
- App usage events and screen views (via Firebase Analytics)
- Crash reports and error logs (via Firebase Crashlytics)
- Device type, operating system version, and app version
- Authentication tokens stored securely on your device
If enabled
2.6 Push notifications (if enabled)
If you enable push notifications, we may collect and store a device push token (FCM token) to send you match updates, announcements, or other App notifications. You can disable notifications at any time in your device settings.
On your device
2.7 Local storage on your device
The App stores certain data locally on your device, including:
- Theme preferences and onboarding status
- Cached user profile data for offline access
- Authentication tokens in secure storage (Keychain on iOS, EncryptedSharedPreferences on Android)
- Pending referral codes
Never collected
2.8 What we do not collect
- We do not show advertisements and do not use advertising identifiers for ad targeting
- We do not collect payment or financial information (the App has no in-app purchases)
- We do not access your contacts, address book, or SMS messages
- We do not collect health, biometric, or financial data
⚙
3. How We Use Your Information
▼
We use the information we collect to:
- Create and manage your account and authenticate you
- Provide match prediction, scoring, leaderboard, and social features
- Verify stadium check-ins using location and QR codes
- Display country rankings, stadium conquest maps, and referral rewards
- Store and display your profile, avatar, and gameplay history
- Send push notifications you have opted into
- Monitor App performance, fix bugs, and prevent fraud or abuse
- Analyze aggregated usage to improve the App experience
- Respond to your support requests
- Comply with applicable legal obligations
⚖
4. Legal Bases (EEA/UK Users)
▼
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:
| Purpose | Legal basis |
|---|---|
| Providing the App and your account | Performance of a contract |
| Stadium check-in verification | Performance of a contract; your consent (location permission) |
| Analytics and crash reporting | Legitimate interests (App reliability and improvement) |
| Push notifications | Your consent |
| Legal compliance | Legal obligation |
🔗
5. How We Share Information
▼
We do not sell your personal information. We may share information in the following circumstances:
- With other users — Your username, country, avatar, points, and rankings may be visible on public leaderboards and to friends you connect with.
- With service providers — We use Google Firebase and related services to host data, authenticate users, store files, and analyze crashes. These providers process data on our behalf under contractual safeguards.
- With authentication providers — When you sign in with Google or Apple, those providers process your authentication data according to their own privacy policies.
- For legal reasons — We may disclose information if required by law, court order, or to protect the rights, safety, and security of users and the public.
- Business transfers — If GoalClash is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Privacy Policy.
🛠
6. Third-Party Services
▼
The App uses the following third-party services:
Google
Firebase Authentication
User sign-in and account management
Google
Cloud Firestore
Store user profiles, predictions, and game data
Google
Firebase Storage
Store profile avatar images
Google
Firebase Analytics
App usage analytics
Google
Firebase Crashlytics
Crash and error reporting
Google
Firebase Cloud Messaging
Push notifications (when enabled)
Google
Google Sign-In
OAuth authentication
Apple
Sign in with Apple
OAuth authentication (iOS)
Third-party
Map tiles
Display stadium and conquest maps
Each third party's use of your information is governed by its own privacy policy. For Google/Firebase, see Firebase Privacy and Google Privacy Policy. For Apple Sign In, see Apple Privacy Policy.
📅
7. Data Retention
▼
We retain your personal information for as long as your account is active or as needed to provide the App. We may retain certain data longer where required by law or for legitimate business purposes, such as resolving disputes, enforcing our terms, or maintaining aggregated analytics.
When you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required by law.
🛡
8. Security
▼
We implement appropriate technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) for all data sent between the App and our servers. Authentication tokens are stored in secure device storage.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
💪
9. Your Rights and Choices
▼
Depending on your location, you may have the following rights:
📄
Access
Request a copy of the personal data we hold about you
✎
Correction
Update your profile information directly in the App
🗑
Deletion
Request deletion of your account and associated data
📦
Portability
Request a copy of your data in a portable format
🚫
Object / restrict
Object to or restrict certain processing
🔓
Withdraw consent
Revoke permissions in device settings anytime
To exercise these rights, contact us at admin@moje.asia. We will respond within the timeframe required by applicable law (typically 30 days).
EEA/UK users may also lodge a complaint with their local data protection authority.
Device permissions
📍
Location
Required only for Stadium Check-In; disabling it prevents check-ins
📷
Camera
Required for QR scanning and taking profile photos
🖼
Photos
Required to select a profile avatar from your library
🔔
Notifications
Optional; disable to stop push notifications
🗑
10. Account and Data Deletion
▼
Follow these steps to request deletion of your account and personal data:
1
Email admin@moje.asia from the address linked to your account
2
Use the subject line: "Account Deletion Request"
3
We verify your identity and confirm deletion within 30 days
Upon verified request, we will delete:
- Your user profile and authentication account
- Your predictions, check-in records, and gameplay data
- Your uploaded profile avatar from cloud storage
- Your friend connections and referral associations tied to your account
Some anonymized or aggregated data that cannot identify you may be retained. We will confirm deletion within 30 days of your verified request.
Apple App Store requirement: Users must be able to initiate account deletion within the App or via a clearly disclosed web-based process. We provide deletion by email request as described above.
Google Play requirement: Apps that allow account creation must provide a readily discoverable option to request account and data deletion. Contact us at the email above to submit your request.
👶
11. Children's Privacy
▼
GoalClash is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13.
If you believe we have collected information from a child under 13, please contact us at admin@moje.asia and we will promptly delete such information.
🌎
12. International Data Transfers
▼
Your information may be processed and stored in countries other than your own, including countries where our service providers (such as Google Firebase) operate data centers. These countries may have different data protection laws than your country of residence.
Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for international transfers of personal data.
🇺🇸
13. California Privacy Rights (CCPA/CPRA)
▼
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising
- Not receive discriminatory treatment for exercising your privacy rights
To submit a request, email admin@moje.asia. We will verify your identity before processing your request.
Categories of personal information collected in the past 12 months: identifiers (email, user ID, username), profile information, precise geolocation (check-in only), photos (profile avatars), internet/electronic activity (app usage, crash logs), and inferences (gameplay rankings and statistics).
🔄
14. Changes to This Policy
▼
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you through the App or by other appropriate means.
Your continued use of the App after changes become effective constitutes acceptance of the updated policy.
📧
15. Contact Us
▼
Questions about your privacy?
We're here to help. Reach out anytime for privacy requests, concerns, or feedback.
GoalClash — Privacy
admin@moje.asia ·
goalclash.web.app