Liga is a social tennis and racket-sports companion app. This policy explains what data we collect when you use Liga, why we collect it, and how it's handled. We aim to collect the minimum needed to run the product.
What we collect
- Account. Email address and password. Your password is hashed by Firebase Authentication; we never see or store the plain-text value.
- Profile. First name, last name, country, and optional city, postal code, and street address that you enter during onboarding or in profile settings.
- App usage. Matches you record (scores, participants, sport, format, timestamps), per-sport ELO ratings and games-played counts, tournament participation, and recurring court sessions you organize or RSVP to.
- Social graph. Friendships, club memberships, and invitations you send or receive within Liga.
- Device tokens. Firebase Cloud Messaging (FCM) push tokens, used solely to deliver Liga's push notifications (match confirmations, friend requests, court-session invites). Removed on sign-out.
- Avatar. Optional profile photo you upload, stored in Firebase Storage.
- Crash reports. When the app crashes or hits an unexpected error, we send anonymized crash reports to Sentry to fix bugs. Personally identifying fields (email, names) are scrubbed before transmission.
- App attestation tokens. Apple's App Attest API mints a per-device cryptographic token that proves your app install is genuine. The token itself contains no identifying information.
How we use it
Your data is used to operate Liga's features: signing you in, displaying your matches and ratings, connecting you with friends and clubs, sending you push notifications, syncing events to your device calendar if you opt in, and detecting abuse of our backend services. We do not use it for advertising or behavioral profiling.
Who we share it with
Liga relies on a small set of third-party services to operate. Each receives only the data needed for its role:
- Google (Firebase). Hosts Liga's authentication, database, file storage, push notifications, and serverless functions. All Liga data lives here.
- Sentry (Functional Software, Inc.). Receives crash reports and error breadcrumbs with PII scrubbed. Used only to diagnose and fix bugs.
- Apple. Verifies App Attest tokens when our backend requests it. No Liga user data is sent — only the per-device attestation receipt.
We do not sell your data, share it with advertisers, or send it to analytics providers beyond what is listed above.
What we don't do
- We don't sell or rent your personal data.
- We don't track you across other apps or websites.
- We don't show third-party ads.
- We don't send marketing emails — only transactional emails like password resets.
- We don't use third-party analytics SDKs.
Your rights
- Delete your account. Open Liga → Profile → Settings → Delete account. This permanently removes your profile, matches, tournaments you created, court sessions you organized, friendships, and uploaded avatar. The deletion cascades server-side via a Cloud Function and is not reversible.
- Edit your profile. Update your name, country, and other profile fields from Profile → Edit.
- Revoke calendar or push permission. Use iOS Settings → Liga to toggle Calendar or Notifications permission at any time.
- Data export. Not yet available in-app. Email haraldluckow@gmail.com to request your data.
Children
Liga is not directed at users under 16. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we'll remove it.
Data retention
Account data is retained while your account is active. When you delete your account, your data is removed from Liga's databases within 30 days. Crash reports in Sentry are retained for 90 days. Backups may persist for up to 30 additional days before being purged.
Contact
For questions about this policy or your data, email haraldluckow@gmail.com.
Changes to this policy
If we change this policy materially, we will update the "Last updated" date above. Significant changes will be surfaced inside the app the next time you open it.