Privacy Policy

SportNest (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform (the “Service”). By using SportNest, you agree to the collection and use of information in accordance with this policy.

We comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR) issued by the National Information Technology Development Agency (NITDA). For users in the European Economic Area (EEA), we also comply with the General Data Protection Regulation (GDPR). For California residents, we comply with the California Consumer Privacy Act (CCPA).

We collect information to provide and improve the Service. The types of data we collect include:

2.1 Information from Google OAuth

When you sign in with Google, we receive the following profile information as shared by Google with your consent:

• Display name
• Email address
• Profile picture
• Google account identifier (used as your unique user ID)

We do not receive or store your Google password. Authentication is handled entirely by Google's OAuth service.

2.2 Content you create

• Posts and comments you publish in match threads and the community feed.
• Reactions and likes you give to posts and comments.
• Your profile information, including display name, bio, and favorite club.
• Your unique username (handle).
• Reports you submit regarding content or users.
• Match threads you create or follow.

2.3 Usage and activity data

• Which matches you follow and reminders you set.
• Notification activity (which notifications you receive and interact with).
• Profile views and post impressions (aggregated for analytics).
• Bookmarked posts.
• Follow relationships (who you follow and who follows you).

2.4 Technical data

• IP address (used for rate limiting and security).
• Browser type and device information.
• Pages visited and interaction timestamps.

We use the information we collect for the following purposes:

• To provide the Service: Display match threads, community feeds, notifications, profiles, and other core features.
• To personalize your experience: Show you content from followed matches, clubs, and users; tailor your community feed.
• To send notifications: Deliver in-app and email notifications about match events, mentions, follows, and other activity you have opted into.
• To maintain safety and security: Detect and prevent spam, abuse, unauthorized access, and other harmful activity. This includes rate limiting and automated content moderation.
• To improve the Service: Analyze aggregated usage patterns to understand how SportNest is used and to develop new features.
• To comply with legal obligations: Respond to lawful requests from authorities and comply with applicable laws, including the NDPA and NDPR.

We do not sell, rent, or trade your personally identifiable information to third parties. We do not use your data for targeted advertising. We may, however, sell or share aggregated, anonymized data that cannot be used to identify you (e.g., de-identified usage trends, match engagement statistics) for research, analytics, or industry insights.

We process your personal data based on the following legal grounds:

• Consent: When you sign in with Google and agree to share your profile information, you consent to our collection and use of that data.
• Contractual necessity: Processing is necessary to provide the Service you have requested (e.g., displaying your posts, sending notifications you have enabled).
• Legitimate interests: We process certain data for our legitimate interests, such as improving the Service, ensuring security, and preventing abuse. These interests are balanced against your rights and freedoms.
• Legal obligation: We may process data to comply with applicable laws, including the NDPA, NDPR, GDPR (for EEA users), or CCPA (for California residents).

For EEA users: These legal bases align with GDPR Article 6. We do not rely on consent as the sole basis for processing where other legal grounds are available.

SportNest uses essential cookies and browser local storage to operate the Service. Specifically:

• Session token: Stored in your browser's local storage to keep you signed in. This is essential for authentication.
• Cookie consent preference: Stored in local storage to remember whether you accepted or declined non-essential cookies (if applicable).
• Theme preference: Stored in local storage to remember your display settings.

We do not use advertising cookies, analytics tracking cookies, or third-party tracking cookies. Clearing your browser's local storage will sign you out and reset your preferences.

We share your information only in the following circumstances:

• Other users: Your display name, avatar, username, and posted content are visible to other SportNest users as part of the community experience. Match threads and the community feed are public by design.
• Service providers: We share data with third-party providers who help us operate the Service, including:
  • Cloud hosting providers (infrastructure and data storage).
  • Email delivery services (for notifications you have opted into).
  • Sports data providers (for live scores and match information).
  • Authentication providers (Google OAuth).
  These providers are contractually obligated to use your data only for the purposes of providing services to us.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, the safety of our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any change in ownership or use of your data.

We do not sell, rent, or trade your personally identifiable information. We do not share your data with advertisers or data brokers. We may sell or share aggregated, anonymized data that cannot be linked back to you.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account. Upon deletion, we remove your profile, posts, and personal data from active systems within 30 days.
• Content retention: Your posts and comments may be retained in an anonymized form after account deletion to maintain the integrity of conversation threads.
• Analytics data: Aggregated and anonymized usage data may be retained indefinitely as it can no longer be linked to you.
• Security logs: IP addresses and security-related logs may be retained for up to 90 days for security and fraud prevention purposes.
• Backup data: Data may persist in encrypted backups for up to 90 days before being permanently overwritten.

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Regular security assessments and updates.
• Access controls limiting who can view personal data.
• Rate limiting and abuse detection systems.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 All users (NDPA/NDPR)

Under the Nigeria Data Protection Act 2023 and NDPR, you have the right to:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data.
• Right to object: Object to our processing of your data.
• Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Withdraw consent at any time where we rely on consent to process your data.

9.2 EEA users (GDPR)

If you are located in the European Economic Area, you additionally have:

• Right to restriction: Request that we limit how we use your data.
• Right to object to automated decisions: We do not make decisions based solely on automated processing, but you retain this right.
• Right to lodge a complaint: Lodge a complaint with your local data protection authority.

9.3 California residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. As noted above, we do not sell personal information. We may sell or share aggregated, anonymized data that is not personally identifiable.

To exercise any of these rights, contact us at privacy@sportnest.live. We will respond to verified requests within 30 days.

SportNest is operated from servers located in multiple regions. If you access the Service from outside the country where our servers are located, your data may be transferred to, stored, and processed in a country that may have different data protection laws than your jurisdiction.

For EEA users: Transfers of data from the EEA to countries outside the EEA are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to countries that have been deemed to provide an adequate level of data protection.

For Nigerian users: Your data is primarily processed within Nigeria. Where data is transferred outside Nigeria, we ensure appropriate safeguards are in place as required by the NDPA, including adequate data protection measures in the receiving country or appropriate contractual clauses with data recipients.

SportNest is not intended for children under the age of 13 (or the minimum age required in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@sportnest.live.

The Service integrates with third-party services, including Google OAuth for authentication and third-party sports data providers for match information. Each of these services has its own privacy policy governing the use of your data. We encourage you to review the privacy policies of these providers:

• Google Privacy Policy: policies.google.com/privacy

SportNest is not responsible for the privacy practices of third-party services.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through in-app notification, email, or by posting the updated policy with a revised effective date.

We encourage you to review this policy periodically. Your continued use of the Service after the effective date of any updated policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• General inquiries: support@sportnest.live
• Privacy and data protection: privacy@sportnest.live

For EEA users: You also have the right to lodge a complaint with your local data protection authority if you believe your rights under GDPR have been violated.

For Nigerian users: You may also contact the National Information Technology Development Agency (NITDA) if you believe your rights under the NDPA or NDPR have been violated.