ulkepuan Mobile App Privacy Policy

1. Controller and contact

The app is provided by ulkepuan.com. For privacy, access, correction, or deletion requests, use the contact form at ulkepuan.com/contact.

2. Data we process

• Random installation ID: A UUID generated by the app. It is not a hardware serial number or advertising ID.
• Follow preferences: Selected country and club slugs and your match start, final score, qualification/elimination, and country coefficient notification choices.
• Push token: The technical registration token assigned by Firebase Cloud Messaging and the notification permission status.
• Technical data: App version, platform, and the last preference sync time.
• Optional feedback: Your message, category, and email address only when you choose to provide one.

3. Purposes and legal bases

We use this data to personalize the home screen, deliver the notifications you request, synchronize preferences for the same installation, prevent abuse, and respond to feedback. Notifications and an optional email address rely on your consent; essential service and security processing relies on providing the service and legitimate interests.

4. Firebase Cloud Messaging

We use Google Firebase Cloud Messaging (FCM) to deliver notifications. The app sends its FCM token to the ulkepuan.com server, which uses it only for events matching the countries or clubs you selected. Firebase processing is subject to Firebase Privacy and Security information.

5. Sharing, sale, and advertising

We do not sell your data or share it for advertising. This release contains no advertising SDK or third-party analytics SDK. Technical data required for notification delivery may be processed by Google/Firebase, and limited traffic data may be processed by infrastructure providers for hosting and security.

6. Retention and deletion

Active installation preferences and the FCM token are retained while you use the service. Invalid tokens are removed automatically, and installations inactive for 12 months may be deleted periodically. Feedback may be retained for up to 24 months. Uninstalling removes local preferences; to remove the server record as well, submit a request with your installation ID through the contact form.

7. Security

Communication uses HTTPS. API keys and Firebase service-account credentials are never embedded in the mobile app and remain server-side. No method of internet transmission can be guaranteed to be completely secure.

8. Children's privacy

The app is not specifically directed to children under 13 and we do not knowingly collect personal information from children. Contact us if you believe such data should be removed.

9. Your choices and rights

You can change follow and notification preferences in Settings, disable notifications, or revoke permission in Android settings. Depending on applicable law, you may request access, correction, deletion, restriction, or object to processing through our contact form.

10. Changes

We will update this policy and the date above when our data practices change. Material changes may also be announced inside the app.