1. Introduction
This Privacy Policy describes how FIFA World Cup 2026("we," "us," or "our") collects, uses, and shares information when you use our mobile application and related services (the "App"). By using the App, you agree to the collection and use of information in accordance with this policy.
This policy is designed to meet the requirements of the Google Play Store, Apple App Store, and applicable privacy laws including the GDPR and CCPA where applicable.
2. Information We Collect
Account information: When you register, we collect your full name, email address, phone number, and password (stored in hashed form). We may also store your favorite team and profile preferences.
Authentication data: We issue access and refresh tokens to keep you signed in. OTP codes are used for phone verification and are not retained after verification.
Usage data: We may collect information about how you interact with the App, including features used, match views, and notification preferences.
Device information: We may collect device type, operating system version, unique device identifiers, and push notification tokens to deliver notifications and improve compatibility.
Log data: Our servers automatically record information such as IP address, request timestamps, and error logs for security and troubleshooting.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Authenticate you and verify your phone number via OTP
- Provide tournament data, match updates, team information, and notifications
- Personalize your experience (e.g., favorite team)
- Send match alerts and service-related communications
- Improve, maintain, and secure the App
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
Where the GDPR applies, we process your data based on:
- Contract: to provide the App and services you requested
- Consent: for optional features such as push notifications
- Legitimate interests: for security, analytics, and service improvement
- Legal obligation: where required by law
5. Sharing of Information
We do not sell your personal information. We may share data with:
- Service providers: cloud hosting (e.g., database and API infrastructure), analytics, and push notification services, bound by confidentiality agreements
- Legal requirements: when required by law, court order, or government request
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to users where required
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).
Server logs are typically retained for up to 90 days unless a longer period is needed for security investigations.
7. Data Security
We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and secure token-based authentication. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability
- Withdraw consent at any time (without affecting prior processing)
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at privacy@fifawc2026.app. We will respond within 30 days.
9. California Privacy Rights (CCPA)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, email privacy@fifawc2026.app.
10. Children's Privacy
The App is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. International Data Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect data transferred outside the EEA or UK.
12. Third-Party Links
The App may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their policies before providing any personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or email. Continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: privacy@fifawc2026.app