Privacy Policy

1. Introduction

KRONOSTATS ("we", "our", or "the company") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our mobile application, website, and related services (collectively, "the Service").

By using the Service, you agree to the practices described in this Privacy Policy. We recommend that you read this document carefully.

2. Information We Collect

Account information: When you create an account, we collect your email address, name, and password (stored in encrypted form). If you sign in with an external provider, we collect the associated identifier and email address.

Subscription information: We record the type of plan purchased, subscription status, start and expiration dates. Payments are processed entirely by the Apple App Store or Google Play Store; KRONOSTATS does not store credit card numbers or sensitive financial data.

Usage data: We collect information about how you interact with the Service, including: screens visited, features used, predictions viewed, league and team preferences, frequency and duration of use, and notification interactions.

Device information: We automatically collect device type, operating system and version, unique device identifier, configured language, time zone, and installed application version.

Technical data: IP address, browser type (on the web), network information, and error logs for diagnostic purposes.

3. How We Use Your Information

We use the collected information to: (a) provide, maintain, and improve the Service; (b) manage your account and process subscriptions; (c) personalize your experience by showing relevant content (leagues, teams, and predictions of interest to you); (d) send notifications about live matches, results, and Service updates; (e) improve our prediction models and analysis algorithms; (f) detect, prevent, and respond to fraud, abuse, and security issues; (g) comply with legal obligations and resolve disputes.

We do not use your information to create advertising profiles, nor do we sell your personal data to third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases: (a) Contract performance: processing is necessary to provide the Service you have subscribed to; (b) Consent: when you have given explicit consent, for example, to receive push notifications or marketing communications; (c) Legitimate interest: to improve the Service, ensure security, and prevent fraud; (d) Legal obligation: when processing is necessary to comply with an applicable legal obligation.

5. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share limited information in the following cases:

Service providers: We share data with providers that help us operate the Service, including hosting services (server infrastructure), analytics services (anonymous usage metrics), payment platforms (Apple App Store, Google Play Store), and push notification services.

Sports data providers: We use API-Football to obtain sports data. We do not share your personal information with these providers.

Legal requirements: We may disclose your information if required by law, a court order, or legal proceedings, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfer: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of the transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically: account data is retained until account deletion; usage data is retained for 24 months in identifiable form, then anonymized; technical logs are retained for 90 days; subscription data is retained according to applicable tax and accounting requirements (generally 5 years).

When you delete your account, we will delete or anonymize your personal information within a maximum of 30 days, unless the law requires retention for a longer period.

7. Data Security

We implement technical and organizational security measures to protect your information, including: data encryption in transit (TLS/SSL) and at rest; passwords stored using secure hashing algorithms (bcrypt); authentication tokens with automatic expiration and rotation; restricted access to personal data limited to authorized personnel only; continuous security monitoring and periodic audits.

Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you. Rectification: You may request correction of inaccurate or incomplete data. Deletion: You may request deletion of your personal data. You can delete your account directly from the app settings. Portability: You may request to receive your data in a structured, commonly used, machine-readable format. Objection: You may object to the processing of your data in certain circumstances. Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise these rights, contact us at soporte@kronostats.app. We will respond to your request within a maximum of 30 days.

9. Children's Privacy

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a minor, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at soporte@kronostats.app.

10. Cookies and Tracking Technologies

Our website uses essential cookies necessary for site functionality (authentication, language preferences). We do not use advertising tracking cookies.

Our mobile application does not use cookies but may use similar technologies (such as local storage) for essential Service functionality.

You can configure your browser to reject cookies, although this may affect website functionality.

11. International Data Transfers

Your data may be processed on servers located outside your country of residence. We take steps to ensure that international data transfers are carried out with appropriate safeguards, including standard contractual clauses and provider security certifications.

12. Jurisdiction-Specific Rights

Residents of Colombia: In accordance with Law 1581 of 2012 and Decree 1377 of 2013, you have the right to know, update, rectify, and delete your personal data. You may exercise these rights by contacting us at soporte@kronostats.app. The Superintendence of Industry and Commerce is the competent authority for personal data protection.

EU/EEA Residents (GDPR): You have all the rights indicated in section 8 of this policy. The legal basis for processing is indicated in section 4. You may file a complaint with the data protection authority in your country.

California Residents (CCPA/CPRA): We do not sell your personal information. You have the right to know what information we collect, request its deletion, and not be discriminated against for exercising your rights. For requests, contact soporte@kronostats.app.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through a notice on the Service or by email. The last updated date is indicated at the top of this document.

We recommend reviewing this Policy periodically to stay informed about how we protect your information.

14. Contact

If you have questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, you can contact us at:

Email: soporte@kronostats.app