Privacy Policy
This Policy explains what data we collect, how we use it, who we share it with, and your rights. By using Zzquad you accept these practices.
1. Data we collect
Identity: name, age, optional gender, email, photo, player type, positions, preferred formats, language and theme. When you sign in with Apple or Google, they share a stable identifier, your email and (the first time) your name.
Activity: matches you create or join, requests, attendance, badges given and received, ratings (individual and, where applicable, team), clubs you belong to, teams you're part of, league and tournament participation (rosters, results, standings, top-scorer lists) and any text you write inside the app (match name, description, messages).
Location: only with your explicit permission, used to show nearby matches. You can revoke permission from your device at any time.
Device and diagnostics: model, operating system, app version, language, push tokens (FCM/APNs), technical logs, performance metrics and crash reports.
Advertising and analytics identifiers: where allowed by your platform settings, we may collect mobile advertising IDs (IDFA on iOS, GAID on Android) and analytics SDK identifiers to measure usage and personalize content. You can reset or limit these from your device settings.
Payments: when you transact (match cost, no-show fine, subscription, league or tournament entry fee, management fee, in-app purchase, marketplace transaction), our payment providers handle the card data. We keep only transaction metadata (amount, date, reason, related match or league) for billing, accounting and dispute handling.
Communications: messages you send to support and any information you provide when reporting a user or content.
2. How we use it
To operate the Service (authentication, rating, attendance, clubs, push notifications); to improve the product (analytics, bug fixing, training and tuning machine-learning and AI models — using pseudonymized or aggregated data where feasible — for recommendations, anti-abuse and ranking); to communicate with you (service alerts and, with your consent where required, marketing); to display advertising and sponsored content; to prevent fraud, abuse and harm; and to comply with applicable law.
3. Legal bases (where GDPR applies)
We process your data based on: (a) the performance of our contract with you (operating the app), (b) your consent (location, marketing, certain ads), (c) our legitimate interests (improving the product, preventing abuse, securing the Service), and (d) legal obligations.
4. Automated decisions
Some features rely on automated processing — for example, computing your rating, matching players, ranking results or detecting suspicious activity. These are best-effort estimates. You can contact us to request human review of any significant decision that materially affects you.
5. Who we share data with
Other users: your public profile (name, photo, age, type, rating, positions, badges, clubs and teams) is visible to other players when you appear in matches, clubs or searches. When you participate in a league or tournament, your team roster, results, standings and historical performance are public-facing for that competition.
Service providers: Apple and Google (sign-in), Firebase (auth and push), MongoDB Atlas (database), Stripe (payments) and providers of email, analytics, advertising measurement, customer support and infrastructure — all under confidentiality terms and limited to what we contract them for.
Advertising and sponsorship partners: when we run sponsored content or run ads, partners may receive measurement and engagement data, subject to the choices you make at the platform level.
Aggregated or anonymized data: we may share reports or statistics that don't identify you, including with third-party partners and for commercial purposes.
Authorities: when required by law or to protect rights and safety.
Corporate transactions: if Zzquad is sold, merged or transferred, data may be part of the deal. We'll let you know before any change in applicable regime.
6. International transfers
Our providers may host your data outside Chile (e.g. in the United States or the European Union). When that happens, we require reasonable contractual safeguards to protect your data during transfer and processing.
7. How long we keep it
We retain different categories of data for different periods:
Account profile (name, email, photo, preferences): while your account is active, plus up to 90 days after deletion for backups and abuse prevention.
Match activity, attendance and badges: kept as long as the account is active to compute ratings; older records are aggregated or anonymized after 36 months.
Payments and billing: up to 6 years to comply with tax, accounting and consumer-protection rules in Chile and other jurisdictions where we operate.
Technical logs and crash reports: up to 12 months, earlier if no longer needed for debugging.
Reports, moderation decisions and bans: up to 36 months (or longer if needed to prevent re-registration of banned users), kept pseudonymized once the account is closed.
Marketing engagement data: until you withdraw consent or 24 months of inactivity, whichever is sooner.
We may keep data longer when needed to resolve disputes, enforce our Terms or comply with the law. Aggregated and anonymized data is not subject to these limits.
8. Your rights
Depending on where you live you may have the right to access, rectify, delete, port, restrict or object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, write to team@zzquad.com from the email tied to your account. We'll respond within applicable deadlines.
EU / UK (GDPR): you may also lodge a complaint with your supervisory authority. California (CCPA/CPRA): you have the right to know, delete, correct and limit use of sensitive personal information. We do not sell personal information for money; we may share certain identifiers with advertising partners, which may qualify as "sharing" under California law — you can opt out by writing to us. Brazil (LGPD) and Chile (Law 19.628): equivalent rights of access, correction, deletion and opposition apply.
9. Marketing communications
We may send service notices that you can't opt out of (such as account or security alerts). For marketing or promotional messages, you can opt out from in-app settings or by following the unsubscribe link in our emails.
10. Cookies, SDKs and similar technologies
The mobile app uses analytics and performance SDKs and may use similar technologies (advertising identifiers, device fingerprints) to measure usage, prevent abuse and personalize content.
On any Zzquad website we may use strictly necessary, analytics and (where applicable) advertising cookies. Where required by law, we will display a consent banner before non-essential cookies are set, and you can withdraw consent or adjust preferences at any time.
You can manage advertising identifiers from your device settings (Limit Ad Tracking on iOS, Reset Advertising ID on Android) and disable analytics from in-app Settings.
11. AI transparency
We use machine-learning and AI models to compute ratings, rank and recommend matches and clubs, suggest players to invite, moderate content and detect fraud. These systems use your profile, activity and behavior data as inputs and produce probabilistic outputs.
We do not use Zzquad data to make legally binding decisions about you (such as credit scoring or employment). The rating and matching outputs are best-effort estimates and may be imperfect.
Where the EU AI Act, Chile's AI guidelines or equivalent frameworks apply, we will provide additional disclosures and honor opt-out or human review requests for material automated decisions. Write to team@zzquad.com to request human review.
12. Security and breach notification
We apply reasonable technical and organizational measures — encryption in transit, access controls, network monitoring, backups and least-privilege roles — to protect your data. No system is fully immune.
If we determine that your personal data has been compromised in a way that creates a meaningful risk to you, we will notify you and the relevant authorities without undue delay and, where required (for example, under GDPR), within 72 hours of becoming aware of the incident. The notice will describe what happened, what data was affected, and the steps we're taking and recommending.
13. Business clubs and partner agreements
When a club is operated by a business, federation, league or other organization that uses Zzquad to manage members, matches or sponsorships, the organization is a separate controller of any data it collects from its members through Zzquad. In that case Zzquad acts as a data processor on behalf of the organization for that data, under a Data Processing Agreement available on request to team@zzquad.com. For your account-level data, Zzquad remains the controller as described in this Policy.
14. Children
Zzquad is not directed to children under 16. If we learn an account belongs to a minor under that age, we'll delete it.
15. Changes
We may update this Policy when we add features, providers or new uses (including new AI capabilities or partnerships). For material changes we'll notify you in the app. The "Last updated" date above reflects the current version.