Privacy Policy

Introduction

Welcome to WEBA Score ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lawn bowls scoring application and related services.

WEBA Score is the trading name of Gordon Hendry, 85/8 Calder Gardens, Edinburgh, EH11 4LH, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC286527.

By using WEBA Score, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1. Information You Provide Directly

Club Account Information

• Email address
• Club name
• Club code (chosen by you during registration)
• Contact email addresses (club contact and secretary email)
• Authentication credentials (securely managed through Firebase Authentication)

Player Account Information

• Your name
• Email address (used to invite you to your club and to sign in)
• Profile photo (optional)
• The clubs you belong to
• Players you mark as favourites

Subscription Information

• Subscription plan (Free, Subscription or Plus), including the 7-day free trial every new club starts with
• Payment information (processed securely through Stripe – we do not store credit card details)
• Billing history

Game Data

• Team names
• Game titles
• Scores and results
• Match dates and times
• Player PINs (5-digit codes generated for scoring access)

Player Activity

• Challenges you send, receive and play, and their results
• Group game invitations and your responses
• Practice sessions you record
• Your stats, achievements, leaderboard positions and ELO rankings
• In-app notifications

Support Messages

• Messages you send us through the in-app Contact Support chat
• Your name, email address and club name, so we know who we are replying to
• The date and time of each message

2. Information Collected Automatically

Usage Information

• Device information (browser type, device type)
• IP address
• Date and time of access
• Pages visited within the application
• Actions performed (games created, scores updated, etc.)

Technical Data

• Browser version and type
• Operating system
• Screen resolution
• Time zone settings

Notification Data

• A push notification token for each device on which you allow notifications, used only to send you app notifications such as challenge updates and replies to your support messages

3. Information from Third-Party Services

We use the following third-party services that may collect information:

Firebase (Google)

• Authentication data
• Database storage (Firestore)
• File storage (profile photos)
• Cloud Functions activity logs
• Hosting analytics

Stripe

• Payment processing information
• Subscription status
• Billing details

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

• Create and manage your club account
• Process and manage subscriptions
• Enable game scoring functionality
• Generate match scorecards and email them to your club's Secretary Email (clubs with a subscription or on their free trial)
• Provide PIN-based access for players and spectators
• Run the Player Portal: club membership, challenges, group games, leaderboards and ELO rankings
• Track club activity and usage

Communication

• Send subscription confirmations and updates
• Notify you of subscription status changes
• Send a welcome email when your club registers
• Send club invitation emails and challenge notifications
• Send match scorecards via email (clubs with a subscription or on their free trial)
• Respond to your inquiries and support requests
• Notify you when we reply to a support message
• Send important service announcements

Improvement and Analytics

• Monitor and analyse usage patterns
• Improve our services and user experience
• Develop new features
• Debug and fix technical issues
• Prevent fraud and abuse

Legal Compliance

• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and the rights of our users

Data Storage and Security

Where We Store Your Data

Your data is stored securely using:

• Firebase Cloud Firestore (Google Cloud Platform)
• Firebase Authentication (Google Cloud Platform)
• Firebase Cloud Storage (Google Cloud Platform)

Data is stored in Google Cloud data centers with industry-standard security measures.

Security Measures

We implement appropriate technical and organisational measures to protect your data:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Authentication: Secure Firebase Authentication with email/password
• Access Controls: Role-based access with admin and user permissions
• Firestore Security Rules: Database-level security rules to prevent unauthorised access
• PIN Lockout System: Device lockout after multiple failed PIN attempts
• Stripe PCI Compliance: Payment data handled by PCI-DSS compliant Stripe

Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide you with our services
• Required by law or for legitimate business purposes

Deleting Your Account

You can delete your account at any time in the app. Club admins can do this from Club Settings, and players from the account menu on the My Clubs screen. You can also ask us to delete it by contacting us.

When a player deletes their account, we delete:

• Your player profile and profile photo
• Your club memberships, leaderboard positions and ELO rankings
• Your practice sessions and in-app notifications
• Group game invitations you organised, and your place in other invitations
• Your support messages
• Your login

Challenges you played are part of your opponents' history, so they are kept, but your name on them is replaced with "Former member".

When a club admin deletes their account, we also delete:

• Club information, members and announcements
• All of the club's games and scores, including player PINs
• The club's tournaments and club leagues
• Device lockout records

Any active subscription is cancelled at the same time.

When we remove a club, we delete the club information, all of its games and scores (including player PINs) and its device lockout records.

Support messages: We keep your support conversation so that we can see the history of your questions when we reply. Your support messages are deleted when you delete your account in the app, and you can ask us to delete them at any time by contacting us. Support messages are only ever read by us. They are not shared with your club or with other users.

Sharing Your Information

We may share your information only in the following circumstances:

Service Providers

• Firebase/Google Cloud: Hosting, database, and authentication services
• Firebase Cloud Messaging (Google): Delivering push notifications to your device
• Stripe: Payment processing and subscription management
• IONOS: Sending our emails, such as scorecards, invitations and notifications

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Government requests
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you via email and/or prominent notice on our website of any such change.

Your Rights and Choices

Access and Update

You can access and update your club information at any time through your admin dashboard. Players can change their name and photo from the account menu on the My Clubs screen.

Data Deletion

You can delete your account yourself in the app, or ask us to delete it by contacting us. See Deleting Your Account for exactly what is removed.

Subscription Management

You can:

• Change your subscription plan at any time
• Cancel your subscription through the Stripe Customer Portal
• Update payment methods
• View billing history

Emails From Us

We do not send marketing or promotional emails. We only send emails about your account and your use of the app, such as your welcome email, club invitations, challenge notifications, match scorecards and subscription updates.

Cookies and Tracking Technologies

Cookies We Use

Essential Cookies

• Authentication session cookies
• Security tokens
• User preferences

We do not use advertising or analytics cookies.

Your Cookie Choices

You can control cookies through your browser settings. However, disabling certain cookies may limit functionality of the service.

Children's Privacy

WEBA Score has no minimum age, and junior bowlers are welcome to use it. We only collect the information described in this policy, we do not show adverts, and we never sell anyone's information.

Players only appear in a club once that club invites them. If you are a parent or guardian and have questions about your child's information, or would like it changed or deleted, please contact us and we will help.

Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our service, you consent to such transfers.

We ensure appropriate safeguards are in place for international transfers, including:

• Google Cloud Platform's global infrastructure
• Standard contractual clauses
• Compliance with GDPR for EU users

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the service after changes constitutes acceptance of the updated Privacy Policy.

Your Data Protection Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information below.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Know whether we sell or disclose your personal information
• Opt-out of the sale of your personal information (we do not sell data)
• Access your personal information
• Request deletion of your personal information
• Non-discrimination for exercising your rights

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of becoming aware of the breach
• Inform you of the nature of the breach
• Describe the potential consequences
• Outline the measures we have taken or will take to address the breach
• Provide recommendations for protecting your information

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries, please include:

• Your club name and code
• Your email address
• A detailed description of your request
• Any relevant documentation

We will respond to your inquiry within 30 days.

Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Consent

By using WEBA Score, you consent to this Privacy Policy and agree to its terms.