Privacy Policy

Kuckart Business Solutions LLC ("we," "us," or "our") operates the pre90 mobile application and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other global privacy regulations.

1. Information We Collect

1.1 Personal Information You Provide

We collect minimal personal information that you voluntarily provide when you register for an account:

• Email Address: Used solely for account creation, authentication, and service-related communication (e.g., password resets).
• Display Name: Used to identify you within your fanclub community. You may edit your display name at any time.
• Profile Bio: An optional short text description you may add to your profile.

If you sign in with Google or Apple, we receive only your email address and display name from the respective provider. We do not receive or store your Google or Apple account password.

1.2 Automatically Collected Information

When you use our Service, we may automatically collect the following technical information solely for operating and improving the Service:

• Device Information: Device type, operating system version, and app version — used for compatibility and debugging.
• Crash Reports: We use Firebase Crashlytics to collect anonymous crash data (stack traces, device state at time of crash) to identify and fix bugs. Your user ID may be associated with crash reports solely for debugging purposes. Crash data is not used for tracking or advertising.
• Log Data: Server-side access logs (IP address, timestamps, error logs) retained for security and fraud prevention.

1.3 User Activity Data

We store the following data generated by your use of the Service:

• Match Predictions: The scores you predict for upcoming matches.
• Poll Votes: Your selected option when voting on fanclub polls created by administrators.
• Event RSVPs: Your attendance response to fanclub events created by administrators.
• Venue Check-Ins: A record that you checked in at a match venue (see Section 2 — Location).
• Notification Preferences: Your chosen notification category settings (see Section 2 — Push Notifications).
• Content Reports: If you report a post for inappropriate content, we store the report reason and details.
• Blocked Users: If you block another user, we store the block relationship to filter content for you.

Note on content creation: Only fanclub administrators can create posts, announcements, polls, events, and upload images to the fanclub feed. Regular members cannot publish posts or upload images to the feed. Members interact with admin-created content by voting on polls, responding to events, and submitting match predictions.

2. Device Permissions and Access

pre90 requests certain device permissions to provide specific features. Each permission is requested only when needed, requires your explicit consent, and is used solely for the stated purpose. None of these permissions are used for tracking, advertising, or profiling.

2.1 Camera and Photo Library

Purpose: The camera and photo library are accessible solely to allow you to select or take a photo for your profile picture. Fanclub administrators may additionally select images from their photo library to attach to feed posts and match content.

What we access: Only the specific image you select or capture. We do not scan, index, or access any other photos or media on your device.

Storage: Selected images are uploaded to your private storage area within Firebase Cloud Storage. Profile pictures are stored at a path accessible only to your account (users/{your-id}/). Admin-uploaded images are stored in the fanclub's storage area.

Not used for: Tracking, advertising, facial recognition, or any purpose other than displaying your chosen profile picture or admin-created feed content.

2.2 Calendar

Purpose: Calendar access allows you to add upcoming match fixtures to your device calendar and receive local reminders before kickoff.

What we access: We only write events to your calendar when you explicitly tap "Add to Calendar" for a specific match or use the bulk-sync feature. Each calendar event includes the match title, date, time, venue, and a reminder set 60 minutes before kickoff.

What we do NOT access: We do not read, scan, or collect any existing calendar data from your device. We have no access to your other calendar events, appointments, or personal schedule.

Not used for: Tracking, advertising, analytics, or any purpose other than adding the specific match events you request.

2.3 Location (When In Use)

Purpose: Location access is used solely to verify that you are physically present at or near a match venue when you voluntarily initiate a venue check-in.

When accessed: Only at the moment you tap the "Check In" button on a match detail screen. Location is never accessed in the background.

What we access: Your latitude and longitude at the time of check-in, which is sent to our server to compare against the known venue coordinates.

Data retention: Your precise coordinates are used for the one-time proximity verification and are not stored persistently. We store only the result of the check-in (success or failure) and the associated match fixture ID.

Not used for: Background tracking, location history, advertising, geofencing, analytics, or any purpose other than the one-time venue proximity verification you initiate.

2.4 Push Notifications

Purpose: Push notifications keep you informed about activity within your fanclub. All notifications are related to app functionality; none are used for advertising or marketing.

Notification categories: You can independently enable or disable each category in the Notification Preferences screen within the app:

Token storage: When you enable notifications, we store a Firebase Cloud Messaging (FCM) device token in your user record. This token is used solely to deliver notifications to your device. If you disable notifications or sign out, the token is removed.

Not used for: Advertising, marketing, cross-app tracking, or any purpose other than delivering the notification categories described above.

3. No Tracking and No Advertising

Specifically:

• We do not use any advertising SDKs or display ads.
• We do not use device identifiers (IDFA/GAID) for tracking or advertising.
• We do not share data with advertising networks, data brokers, or analytics companies.
• We do not use fingerprinting or cross-app tracking of any kind.
• We do not build behavioral or interest-based profiles for advertising purposes.
• All data collected is used solely for providing and maintaining the functionality of the Service as described in this policy.

4. How We Use Your Information

We use the information we collect for the following purposes:

We do NOT:

• Sell your personal information to any third party
• Share your information with advertisers or ad networks
• Use your information for marketing purposes without your explicit consent
• Use your data to build profiles for advertising or interest-based targeting

5. Data Storage and Security

5.1 Where We Store Your Data

Your personal information is stored using Google Firebase services, hosted in the North America (NAM5) region. Firebase provides enterprise-grade security and infrastructure maintained by Google Cloud Platform.

5.2 How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest.
• Access Controls: Firestore Security Rules enforce that users can only read and write their own documents. Fanclub data and memberships are managed exclusively through server-side Cloud Functions.
• Storage Rules: Firebase Storage rules ensure users can only read and write files in their own storage path (users/{uid}/). Admin-uploaded content is managed through authenticated Cloud Functions.
• Authentication: Secure authentication through Firebase Authentication (email/password, Google Sign-In, Apple Sign-In).
• Server-Side Validation: All privileged operations (fanclub management, content creation, check-in verification) are validated on the server via Cloud Functions.

5.3 Data Retention & Account Deletion

We retain your personal information for as long as your account is active or as needed to provide you the Service.

Delete your Pre90 account and data:

• In the app: Profile → Delete Account
• On the web (no app required): visit our dedicated deletion page at https://pre90.com/delete-account.html, or email privacy@pre90.com

Upon account deletion, we delete your user document, profile data, membership records, predictions, poll responses, notification tokens, and uploaded images. Certain anonymized or aggregated data may be retained as required by law or for fraud prevention.

6. Information Sharing and Disclosure

6.1 Third-Party Service Providers

We use the following third-party services to operate our Service. These providers process data solely on our behalf and are contractually obligated to protect your information:

We do not use any advertising SDKs, analytics platforms (beyond Crashlytics), or data brokers.

6.2 Information Visible to Other Users

Within your fanclub community, the following information is visible to other members:

• Your display name and profile photo (via a public profile record)
• Your prediction results and leaderboard ranking
• Your venue check-in status for specific matches

Your email address, bio, auth provider, and notification preferences are not visible to other users.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

6.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

7. Your Privacy Rights

7.1 Rights for All Users

Regardless of your location, you have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information and account. You can delete your account directly in the app (Profile → Delete Account) or by emailing us.
• Objection: Object to our processing of your personal information.

7.2 GDPR Rights (European Economic Area Users)

If you are located in the EEA, you have additional rights under the GDPR:

• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Restriction: Request restriction of processing under certain circumstances.
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent (e.g., push notifications, location access).
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

7.3 CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the CCPA:

• Right to Know: Request disclosure of personal information collected, used, or shared.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt-out of the sale of personal information. Note: We do NOT sell personal information.
• Right to Non-Discrimination: Not be discriminated against for exercising your rights.

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

• Email: privacy@pre90.com
• Subject line: "Privacy Rights Request"

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

8. International Data Transfers

Your information is processed and stored in the North America (NAM5) region through Google Firebase. If you are accessing the Service from outside North America, please be aware that your information may be transferred to, stored, and processed in the United States.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Other legally approved transfer mechanisms

9. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@pre90.com and we will promptly delete such information.

Users between the ages of 13 and 18 should use the Service only with the involvement and consent of a parent or legal guardian.

10. Cookies and Web Technologies

The pre90 mobile application does not use cookies. Our companion website (pre90.com) uses cookies and similar technologies as described in our Cookie Policy.

11. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending you a notification through the Service (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Data Protection Officer

For questions about our data protection practices or to exercise your privacy rights, you can contact our Data Protection Officer:

14. Contact Us

15. Jurisdiction-Specific Information

15.1 European Economic Area (EEA)

If you are in the EEA, the data controller responsible for your personal information is Kuckart Business Solutions LLC. You have the right to lodge a complaint with a supervisory authority in your country.

15.2 United Kingdom

If you are in the UK, you have rights under the UK GDPR and Data Protection Act 2018. You may contact the Information Commissioner's Office (ICO) with any concerns.

15.3 Canada

If you are in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You may contact the Office of the Privacy Commissioner of Canada with any concerns.

15.4 Australia

If you are in Australia, your personal information is protected under the Privacy Act 1988. You may contact the Office of the Australian Information Commissioner (OAIC) with any concerns.

15.5 Brazil

If you are in Brazil, your personal information is protected under the Lei Geral de Proteção de Dados (LGPD). You have rights similar to those under GDPR.

Terms of Use | Cookie Policy | Back to Home