Privacy policy

Krovo stores the matches you log, the groups you are in and the people you play against. That is the product, and there is nothing else worth taking.

We do not sell your data. We do not run advertising. We do not track you across other apps or websites, and Krovo asks for no advertising identifier.

Your account. Your name, and — if you signed in with Apple or Google — the identifier they give us. If you use Apple's private relay, we never see your real address. If you carried on as a guest there is no Apple or Google account behind it at all, and we hold nothing about you beyond the name and username you chose.

What you log. Matches, scores, categories, groups, and who played. This is the point of the app.

What you write. Comments, and what you argued in a vote.

People you have not invited yet. If you log a match against somebody who is not on Krovo, we store the name you typed for them and nothing else. No number, no email, no contacts upload. See "People who are not on Krovo" below.

Your photo, if you add one. A profile picture, or a picture for a group you run. Choosing one is the only time Krovo opens your photo library, and nothing is read until you pick.

Diagnostics. Crash reports, if you leave them on in iOS settings. They are not linked to your account.

Your subscription, if you buy one. We never see your card — the payment happens inside Google Play or the App Store and we are not part of it. What we do get, from our billing provider RevenueCat, is whether you are subscribed, which plan, and when it renews or lapses. RevenueCat also gives your app an identifier of its own so a purchase can be matched to the right account. That is the whole of it: no card number, no billing address, no bank.

No contacts. No location. No advertising identifier. No microphone, and no camera — Krovo can pick a photo you already have, and never take one.

Your groups. Everyone in a group sees that group's matches, standings and comments. That is what a group is.

Groups are separate. People in one group cannot see another, ever.

One-to-one rivals. A match logged privately between two people is visible to those two people only.

Nobody else. There is no public profile, no global leaderboard and no discovery. Nobody who is not in your group or your one-to-one can see your results.

Photos are hosted, and the link is not secret. A picture you add is stored at a long, random web address so it loads quickly for everybody who should see it. Anybody who has that exact address can open it. We never publish the address anywhere, and changing or removing a picture deletes the old file so the old address stops working — but a copied link may keep working for a short time while it is still cached.

You can log matches against somebody who has not joined. We store the name you gave them so your own record makes sense.

If they join and accept, those results become theirs, and they can reject any single one for seven days afterwards. If they say it is not them, nothing transfers.

We never contact them on your behalf. Inviting them is you sending a link, through whatever app you already use.

See it. Everything about you is in the app already.

Take it. Export your full history as a CSV, any time, free.

Delete it. Delete your account from Settings. Your profile and personal details go.

What survives deletion, and why. Matches you played stay in your groups, with your name replaced. A result belongs to everyone who was there. Deleting your side of a scoreline would silently rewrite five other people's records of a game they played. Your comments are removed.

Data is held on Supabase servers in the EU.

Your account is kept while it exists. Matches are kept while the group exists, because a group's history is the point of it. There is no expiry date on a group — an archive that deletes itself after a quiet year is not an archive.

A group is deleted when its last member deletes it, and everything in it goes at that point. You can export your matches to a spreadsheet at any time, free, from Settings.

Reports of objectionable content are kept for two years so repeat behaviour can be recognised.

Krovo is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child has an account, write to us and it will be removed.

krovoapp@gmail.com

Questions, complaints, data requests and reports all reach a person at that address.