Privacy Policy

We collect the following types of information:

• To provide, operate, and maintain the Service
• To process ticket purchases, merchandise orders, and membership subscriptions
• To comply with legal obligations under Cyprus and Greek law regarding ticket sales
• To send match notifications, news updates, and reward alerts (based on your preferences)
• To track fan engagement points and manage loyalty rewards
• To enable social features such as friend connections, messaging, and leaderboards
• To improve the Service through analytics and user feedback
• To detect, prevent, and address fraud, abuse, and security issues

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you agree to receive notifications, marketing, or use optional features
• Contract: When you purchase tickets, memberships, or merchandise
• Legal Obligation: When we must collect national ID and fan card data for ticket sales compliance
• Legitimate Interest: For security, fraud prevention, and service improvement

We do not sell your personal information. We may share data with:

• Payment processors (e.g., Stripe) to handle transactions securely
• Cloud service providers that host and support our infrastructure
• Stadium authorities when required for ticket verification and entry control
• Law enforcement or government agencies when required by law
• Other users — your public profile, fan level, and leaderboard ranking are visible to other app users based on your privacy settings

We implement industry-standard security measures to protect your personal data, including encrypted data transmission (TLS/SSL), secure password hashing, role-based access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data for as long as your account is active, or as necessary to provide the Service. Ticket purchase records (including national ID and fan card data) are retained as required by Cyprus and Greek law. You may request deletion of your account at any time through the app settings, which will permanently remove your profile, points, and associated data.

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your account and data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us using the information below.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it. Age-restricted accounts may have limited features until verified.

We use cookies and similar tracking technologies to enhance your experience, analyze app performance, and remember your preferences. You can control cookies through your device or browser settings. Some features may not function properly if cookies are disabled.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy within the app and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

For data protection complaints, you also have the right to lodge a complaint with the Cyprus Data Protection Commissioner (www.dataprotection.gov.cy).