Privacy Policy

Last updated: October 13, 2026

Overview

MySportSync ("we", "our", "us") is a sports tracking application that helps fans follow their favourite teams across multiple leagues and sync game schedules to their calendars. We are committed to protecting your privacy and being transparent about how we handle your data.

Information We Collect

When you use MySportSync, we collect:

Account information: Email address and password (encrypted) when you create an account.
Preferences: Teams you follow, selected leagues, and notification settings.
Subscription data: Payment processing is handled securely by our payment provider. We do not store your credit card details.
Calendar data: If you connect Google Calendar, we create and manage calendar events for your followed teams' games. We only write events to your calendar — we do not read or access any of your existing calendar data.
Device and notification data: A device token and your notification preferences when you enable match reminders or explicitly opt in to occasional product-update push notifications.
Service activity: For signed-in accounts, a random app-install identifier, platform, app version and last-active time. We do not retain the page path, browser user-agent, screen size or viewport in this heartbeat record.
Support data: The content and optional screenshot you submit when reporting a problem.
Product analytics: We collect aggregated, cookieless usage events, including page visits. We do not include email addresses, names, calendar contents or team selections in these analytics events.
Signup acquisition details: When you create an account, we store campaign tags, referring website hostname, landing-page path, signup method, app platform, device category and operating system linked to your account. We use these details to understand how people find MySportSync and complete signup. We do not store raw URLs, query strings, IP addresses or browser user-agent strings in this signup record.

Google Calendar Integration

MySportSync uses the Google Calendar API to sync game schedules to your calendar. Specifically:

We request only the calendar.app.created scope. It lets MySportSync create its own dedicated “MySportSync” calendar in your Google account and add, update, and remove game events in that calendar.
We cannot and do not read, modify, or delete any of your other calendars or any events you or other apps have created.
Your Google account credentials are handled entirely by Google's OAuth 2.0 system. We do not see or store your Google password.
Google refresh tokens are encrypted at rest and are not available to the browser after connection.
You can disconnect Google Calendar from Settings. We attempt to remove MySportSync-created calendars and revoke the Google authorization; if Google is unavailable, we tell you how to complete that external cleanup manually.

MySportSync’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar access only to provide the calendar sync you turn on; we do not use it for advertising, sell it, or let people read it except where needed for security, to comply with law, or with your consent.

How We Use Your Information

To provide and improve the MySportSync service
To manage your account and subscription
To sync game schedules to your connected calendar
To send important service-related communications
To send product news, fixture tips, and occasional offers when you explicitly opt in

Data Storage & Security

Your application data is stored using Supabase with row-level security policies. Data is transmitted over encrypted HTTPS connections and sensitive provider credentials are encrypted at rest. We do not store complete payment-card details.

Data Sharing

We do not sell, trade, or share your personal information with third parties, except:

Stripe and Apple, for subscription billing and purchase lifecycle processing
Google, when you choose to connect your Google Calendar
Supabase, for secure data hosting
Resend, our email delivery provider, for necessary operational and admin notifications, and for marketing email only when you have opted in
Firebase and Apple Push Notification service, when you enable match reminders or explicitly opt in to product-update push notifications
Vercel, for hosting and privacy-focused Web Analytics
Sentry, for error monitoring. MySportSync does not enable Sentry Session Replay
Upstash, for abuse-rate limiting. We send a keyed pseudonymous digest rather than your raw IP address.

Your Rights

You can:

Access or update your account data in the app
Delete your MySportSync account from Settings
Disconnect Google Calendar and remove MySportSync from your Google Account connections
Cancel a web subscription through Stripe or an App Store subscription through Apple
Turn off product-update push notifications at any time in MySportSync Settings
Withdraw marketing consent at any time in Settings or by using the unsubscribe link in an email
Contact us for access, correction, deletion or privacy questions

Data Retention

We retain account data while your account is active. An in-app deletion request immediately locks new account activity and removes application data as the deletion workflow completes. We make a bounded, best-effort attempt to delete MySportSync-created Google calendars and revoke Google access before discarding the credentials; external provider outages may require the manual steps shown in the app.

Deleting a MySportSync account does not itself cancel billing controlled by Apple. The app provides the Apple subscription-management link and requires a separate warning and confirmation before immediate deletion. Your MySportSync data and access end as the deletion workflow completes, but Apple billing may continue until you separately cancel the subscription through Apple. Payment, fraud-prevention, security and de-identified deletion-audit records may be retained only where reasonably required for legal obligations, disputes, abuse prevention or operational integrity. Copies in encrypted backups and processor logs are not used to provide the service and expire under the applicable backup and processor retention schedules.

Children's Privacy

MySportSync is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or an in-app notice.

Contact Us

If you have questions about this privacy policy or your data, contact us at:

support@mysportsync.com