Privacy Policy

Effective date: May 3, 2026  ·  Last updated: May 3, 2026

This Privacy Policy explains how Vamora (“Vamora”, “we”, “us”, or “our”) collects, uses, shares, and protects information about you when you use the Vamora mobile application and related services (collectively, the “Service”). Vamora is a real-football fantasy league platform that lets users create profiles, join competitions, and track match results.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information we collect

We collect information you provide directly, information collected automatically when you use the Service, and information from third parties when you choose to connect them.

Information you provide

• Account information: name, nickname, email address, password (stored as a one-way hash), and profile image.
• Profile data: birthday, gender, location (city / region), preferred football position, and other optional profile fields.
• Gameplay data: competitions you create or join, match-related information, ratings, and player statistics generated while using the Service.
• Support communications: messages, attachments, and contact details when you contact us for support.

Information collected automatically

• Device & technical data: device model, operating system and version, app version, language, time zone, and unique device identifiers.
• Usage data: screens viewed, features used, in-app actions, session duration, and approximate timestamps.
• Diagnostic data: crash logs, performance traces, and error reports.
• Network data: IP address (used to derive approximate coarse location and to secure the Service).

Information from third parties

• Sign-in providers: if you sign in with Google, we receive your basic profile (name, email, profile picture, Google account ID) as authorized by you.

2. How we use your information

We use the information we collect to:

• Create and manage your account and authenticate you.
• Operate core features of the Service such as competitions, matches, ratings, and player profiles.
• Personalize your experience and show relevant content within the app.
• Send transactional notifications (for example, match invites or competition updates).
• Diagnose, debug, secure, and improve the Service, including by analyzing crashes and performance.
• Detect, prevent, and respond to fraud, abuse, or violations of our terms.
• Comply with legal obligations and enforce our agreements.

3. Legal basis for processing (GDPR)

If you are located in the European Economic Area or United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

4. How we share information

We do not sell your personal information. We share information only:

• With other users, when you publish a profile, join a competition, or participate in a match (e.g., your nickname, image, position, rating, and match results may be visible).
• With service providers that process data on our behalf under written agreements (hosting, analytics, crash reporting, authentication, communications).
• For legal reasons, when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect our rights or the safety of users.
• In a corporate event such as a merger, acquisition, or asset sale, in which case we will require the recipient to honor this policy or notify you of any changes.

5. Third-party services

The Service relies on the following categories of third-party providers. Each provider has its own privacy policy:

We may add, replace, or remove providers from time to time. We update this list when we do.

6. Device permissions

The Vamora mobile app may request the following device permissions. You can grant or revoke them at any time in your device settings.

• Photos / Camera: only used when you choose to upload or change your profile picture.
• Internet access: required to communicate with our backend.
• Notifications: used to deliver match-related and account notifications you opt in to.

We do not collect precise GPS location, microphone audio, contacts, or SMS data.

7. Data retention

We retain personal data for as long as your account is active and for a limited period afterward to satisfy legitimate operational, legal, or accounting needs. Specifically:

• Account & profile data: kept while your account exists. Deleted within 30 days of account deletion, except where law requires longer retention.
• Gameplay records: historical match and competition results may be retained in anonymized or pseudonymized form so that rankings and league histories remain consistent for other players.
• Diagnostic logs: typically retained for up to 90 days.
• Backups: may persist for up to 30 days after deletion before being overwritten.

8. Account & data deletion

You can request permanent deletion of your account and associated personal data at any time:

• In-app: open Vamora → Settings → Account → Delete Account, and confirm.
• By email: contact us at m2ktechies@gmail.com from the email address associated with your account, and we will process your request.

After your request is confirmed, your account is removed from the Service immediately, and your personal data is purged from active systems within 30 days. Anonymized statistical data and information we are legally required to retain may be kept longer, as described in section 7.

9. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data (see section 8).
• Restriction / Objection: ask us to limit or stop certain processing.
• Portability: request a machine-readable export of the data you provided.
• Withdraw consent: where processing is based on consent, you can withdraw it at any time.
• Lodge a complaint: with your local data protection authority.

To exercise any of these rights, contact us at m2ktechies@gmail.com. We will respond within the timeframe required by applicable law.

10. California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion of that information, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information.

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (“CCPA”) as amended by the CPRA. To exercise your rights, email m2ktechies@gmail.com.

11. Children’s privacy

Vamora is not directed to children under 13 (or under 16 in the EEA / UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us at m2ktechies@gmail.com and we will promptly delete it.

12. International data transfers

Your information may be processed and stored in countries other than your own, including countries that may have different data-protection rules. When we transfer data internationally we use appropriate safeguards, such as Standard Contractual Clauses, where required by law.

13. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (HTTPS/TLS), secure password hashing, access controls, and audit logging on our backend. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide a more prominent notice (for example, an in-app banner or email).

15. Contact us

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, please contact us:

• Email: m2ktechies@gmail.com
• Website: https://vamora.net