Privacy Policy

What we collect

boxcores collects only what the product needs to work: your email address and password (for your account, handled by Supabase Auth — we never see your password), your username and profile details (display name, bio, location, favourite club and similar fields you choose to fill in), and the content you create — match logs, ratings, reviews, tags, hot takes, comments, lists and follows.

We do not run ads, we do not use analytics or tracking SDKs, and we do not sell or share your data with anyone.

How it's used

Your data is used solely to run boxcores: signing you in, showing your diary and profile, and powering social features (feed, friends, likes, comments). Content visibility follows your settings — private, friends-only, or public. Match data (fixtures, scores, crests) comes from third-party sports data providers and isn't personal to you.

Where it lives

Your account and content are stored in our Supabase (PostgreSQL) database. Traffic between your device and our servers is encrypted with TLS.

Deleting your account

You can permanently delete your account and all of your content at any time — in the iOS app under Settings → Delete account. Deletion is immediate and irreversible: your profile, logs, reviews, takes, comments, lists and friendships are all removed.

Reports & blocks

When you report content or block a user, we store that report/block so we can act on it. Reports are reviewed by us and may result in content removal or account action.

Contact

Questions or requests about your data: email ilkinspam@gmail.com. See also our Terms of Service.