Privacy Policy

Ninety Plus is a football information app that provides match schedules, results, league tables, information about teams and players, and lets you take part in a football prediction game and user rankings.

The app can be used:

• with a registered account;
• in guest mode without creating an account.

In guest mode no account data is created. Some settings may be stored locally on the device. When you use certain features, such as push notifications, the necessary technical identifiers may be processed.

The data collected depends on which Ninety Plus features you use.

2.1. Account data

When you create an account using email and password, we process:

• email address;
• display name;
• internal Firebase user ID;
• account creation date;
• date of last activity.

Firebase Authentication is used for registration, sign-in and password recovery.

Passwords are handled by Firebase Authentication. Ninety Plus does not receive or store users' passwords in plain text.

Sign-in via Google, Apple or other third-party authentication services is not currently used.

2.2. Profile data and settings

You may provide or choose:

• display name;
• profile photo;
• favorite football team;
• interface language;
• content language;
• light or dark theme;
• push notification settings.

You can change your display name and profile photo.

2.3. Predictions and rankings

To run the prediction game we store:

• predictions you make;
• prediction history by round, month and season;
• points awarded;
• your position in the leaderboards;
• results of participation in completed and current rounds.

This data is linked to your account for as long as the account is active.

2.4. Information visible to other users

Some profile information is public within the app.

Other registered users can see:

• display name;
• profile photo;
• number of points;
• position in the ranking;
• results of participation in the prediction game.

Your predictions may become visible to other registered users after the prediction submission deadline for the relevant round has passed.

Your email address is not shown to other users.

You should not include in your display name or photo any information you do not want to show to other participants.

2.5. Push notification data

With your permission we process:

• Firebase Cloud Messaging token;
• app installation identifier;
• device platform — iOS or Android;
• app version;
• your chosen notification settings.

This information is used to send notifications:

• about the start of a new round;
• about an approaching prediction deadline;
• about the publication of results.

You can turn off all notifications or individual categories in the Ninety Plus settings, and fully disable notifications in your device's system settings.

Inactive notification tokens are automatically deleted from the database after 60 days.

2.6. Approximate location by IP address

When you register an account, the server obtains your IP address and passes it to the IP geolocation service ip-api.com to determine your approximate country and city.

The country and city determined from the IP address are stored in your profile. The IP address itself is not stored in your profile, although it may be temporarily processed by the third-party service and the technical infrastructure while the network request is performed.

Ninety Plus does not request permission to access the device's location, does not obtain GPS coordinates and does not collect precise location.

Information derived from an IP address may be inaccurate, for example when using a VPN, a proxy server, or a mobile network.

2.7. Technical information

To operate and protect the app the following may be processed:

• device platform — iOS or Android;
• app version;
• IP address;
• date and time of network requests;
• server function technical logs;
• Firebase Installation ID;
• information necessary for authentication, notification delivery, abuse prevention and troubleshooting.

We do not use Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, Sentry, or other behavioral analytics or automatic crash-reporting systems.

We do not collect the device model for our own purposes.

2.8. Photos

Ninety Plus requests access to the photo library only when you choose an image for your profile photo yourself.

The photo you select is uploaded to Firebase Cloud Storage and linked to your account.

The app does not use photo library access for any other purpose.

Ninety Plus does not request camera access.

Ninety Plus does not collect:

• precise GPS coordinates;
• contacts and address book;
• microphone data;
• camera data;
• your calendar;
• SMS and call history;
• health data;
• payment and banking data;
• government identifiers;
• advertising identifier;
• third-party website browsing history;
• data for targeted advertising.

The app contains no advertising, no AdMob and no third-party ad networks.

We do not sell personal data and do not use it to track users across apps and websites.

We do not send marketing emails. Email may be used for transactional messages, for example password recovery, confirmation of an account deletion request, or a support reply.

We use data to:

• create and manage your account;
• register, sign in and restore access;
• save settings and personalize the app;
• display your favorite team's page;
• accept and store football predictions;
• award points and build rankings;
• display public profiles;
• send notifications you have allowed;
• determine the approximate region of the account;
• handle support requests;
• protect accounts and prevent abuse;
• administer and maintain stable operation of the app;
• comply with applicable law;
• establish, exercise or defend legal claims.

Depending on the type of data and applicable law, processing may be carried out:

• to provide Ninety Plus features at your request;
• based on your consent, for example when enabling push notifications or selecting a photo;
• for legitimate interests, including security, fraud prevention and keeping the app operational;
• to comply with legal obligations.

You can withdraw a permission previously granted for notifications or photo access through the app or device settings.

Withdrawing a permission does not affect the lawfulness of processing carried out before the withdrawal.

The following third-party services are used to provide Ninety Plus features.

6.1. Google Firebase

We use:

• Firebase Authentication — for registration, sign-in, password recovery and account management;
• Cloud Firestore — to store profiles, settings, predictions, rankings and football data;
• Cloud Storage — to store profile photos;
• Cloud Functions — to run server-side operations;
• Firebase Cloud Messaging — to deliver push notifications.

In providing these services, Google may process email addresses, IP addresses, authentication data, user agent strings, installation identifiers and other technical information.

Google processes data in accordance with its own terms and privacy policies.

6.2. ip-api.com

When you register an account, your IP address may be passed to the ip-api.com service to determine your approximate country and city.

We do not pass the following to this service:

• your name;
• your email address;
• your profile photo;
• your predictions;
• your points;
• your Firebase UID.

The service processes the IP address on its own in accordance with its terms and privacy policy.

6.3. API-Football

API-Football is used as a source of football data, including:

• schedules;
• match results;
• league tables;
• line-ups;
• information about teams and players;
• sports statistics.

Requests to API-Football are made by Ninety Plus server functions. The mobile app does not send API-Football your account, email, profile, predictions or other personal data.

6.4. Expo

The app uses Expo modules for notifications, photo selection, platform information and app update delivery.

In providing the corresponding technical functions, Expo may process limited technical data about network requests and app installation in accordance with its terms and privacy policy.

6.5. Apple and Google Play

Apple and Google may independently process data related to:

• downloading and installing the app;
• operation of the app stores;
• platform security;
• system notifications;
• app updates;
• operating system diagnostics.

Such processing is carried out by Apple and Google independently and is governed by their own privacy policies.

A limited number of authorized Ninety Plus administrators may access user data through a secured administrative panel.

Administrators may see information necessary for:

• managing users;
• support operations;
• ensuring security;
• verifying the correctness of predictions and rankings;
• processing account deletion requests;
• preventing fraud and abuse;
• app maintenance.

Access is granted only to administrators with the corresponding rights.

Apart from the providers listed in this Policy, information may be disclosed:

• upon a lawful request from a government authority;
• to fulfil a legal obligation;
• to investigate fraud or a security breach;
• to protect the rights of users, the developer or third parties.

We do not sell or rent users' personal data.

Account, profile, prediction and ranking data is stored for as long as your account remains active or the data is needed to provide the app's features.

Inactive FCM tokens are automatically deleted after 60 days.

Server function technical logs are stored for a limited time in accordance with the Google Cloud infrastructure settings and may be used for security and troubleshooting.

After a confirmed account deletion request, personal data is deleted or anonymized from active systems, as a rule, within 30 days.

Residual copies of certain data may be retained in technical backups and in the systems of infrastructure providers for up to 90 days. During this period such copies are not used for the app's ordinary operation and are deleted or overwritten as part of standard technical cycles.

Certain information may be retained longer only where necessary to comply with legal obligations, ensure security, prevent fraud or resolve disputes.

You can request deletion of your Ninety Plus account and associated data:

• on your own through the public page: https://ninety-plus.app/en/account-deletion;
• for questions about a request you have already sent, at: [email protected].

To protect against deletion of someone else's account, we may ask you to confirm the request via the email address associated with the account.

Account deletion may be carried out manually by an administrator. Confirmed requests are processed, as a rule, within 30 days.

When an account is deleted, the following is deleted or anonymized:

• Firebase Authentication account;
• email address;
• display name;
• profile photo;
• favorite team;
• language settings;
• theme and notification settings;
• active FCM tokens;
• the link between the user and their predictions;
• personal information in the leaderboards;
• other data directly linked to the account.

To keep completed rounds and overall statistics accurate, some predictions and results may remain in anonymized form. In that case:

• email and photo are deleted;
• the public name is replaced with “Deleted user”;
• the data no longer allows the account owner to be identified;
• the user no longer appears as an active participant.

Deleting the app from your device does not by itself delete your account and data.

After processing the request, we may send a confirmation to your email address.

We apply reasonable technical and organizational measures to protect information, including:

• transmitting data over secure HTTPS connections;
• Firebase Authentication;
• Firestore and Cloud Storage access rules;
• deny-by-default access unless explicitly allowed by the rules;
• separation of user and administrator access;
• administrative access via dedicated privileges;
• restricted access to the Firebase Console and the administrative panel;
• protection of server keys and secrets;
• abuse detection measures.

Despite the measures applied, no method of transmitting or storing data provides absolute security.

Ninety Plus infrastructure providers may process personal data in various countries where their servers, offices or the processors they engage are located.

The location of processing depends on the specific service and its technical configuration.

When personal data is transferred outside the European Economic Area or another territory whose law imposes restrictions on international data transfers, the safeguards provided for by law are applied. These may include adequacy decisions, the Standard Contractual Clauses approved by the European Commission, and other applicable contractual, technical and organizational measures.

For Google Firebase services, the relevant international data transfer mechanisms are governed by the applicable Google data processing and security terms.

We do not claim that all Ninety Plus data is stored exclusively in a single country or only within the European Union.

Depending on your country of residence and applicable law, you may have the right to:

• obtain information about the processing of your data;
• request access to the data;
• correct inaccurate information;
• receive a copy of the data you provided;
• request deletion of your account and data;
• restrict certain processing;
• object to certain ways of processing;
• withdraw a consent you have given;
• lodge a complaint with a competent data protection authority.

To exercise these rights you can contact us at: [email protected]

Before providing, changing or deleting data, we may ask you to confirm your identity and ownership of the relevant account.

Ninety Plus is not specifically directed to children under the age of 13, or another higher minimum age set by the law of the user's country.

We do not knowingly request personal data from children who have not reached the applicable minimum age to use the app independently.

If a parent or legal guardian believes that a child has provided Ninety Plus with personal data without the necessary permission, they can contact us at: [email protected]

After receiving a confirmed request, we will take reasonable steps to delete the relevant data.

We may update this Policy when there are changes to:

• the app's features;
• the data collected;
• third-party providers;
• the ways data is processed;
• requirements of law or the app stores.

The date of the last update is shown at the top of the document.

We may additionally notify you of material changes within the app or by another available means.

If new processing requires separate user consent, it will be requested before such processing begins.

App: Ninety Plus

Google Play developer: Alex Popsa

Email for privacy, support and data deletion matters: [email protected]

Account deletion page: https://ninety-plus.app/en/account-deletion