1. Introduction
This Privacy Policy explains how Valuball collects, uses, stores, shares and protects your personal information when you use the Valuball mobile app (on iOS and Android), our website at valuball.co, and related services (together, the "Service").
Valuball is operated by Valusport Group Pty Ltd (ACN 698 493 337 / ABN 22 698 493 337), an Australian company with its principal place of business at Unit 104, 17 Meredith Street, Bankstown NSW 2200, Australia ("Valuball", "we", "us", or "our"). For the purposes of data protection law, Valusport Group Pty Ltd is the controller of your personal information.
By using the Service, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.
2. Scope
This policy applies to all users of the Service worldwide. Because Valuball is available to users in the United Kingdom, the European Union, Australia and elsewhere, this policy is written to meet our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, the UK GDPR and EU GDPR, and applicable US state privacy laws. Region-specific rights are set out in Section 15.
3. Information We Collect
3.1 Information you provide directly
When you create an account, subscribe, contact support, or otherwise interact with us, we may collect:
- Your name
- Email address
- Account credentials and settings
- Subscription tier and status (Free, Premium or Boardroom)
- Communication and notification preferences
- The clubs or content you choose to follow
- Any information you include in support requests or correspondence
3.2 Information from third-party sign-in providers
You can create or access your account using a third-party sign-in provider. Depending on which you choose, we receive a limited set of profile information:
- Sign in with Google — your name and email address.
- Sign in with Apple — your name and email address. If you choose to hide your email, Apple provides us with a private relay email address (ending in
@privaterelay.appleid.com) instead of your personal address; any messages we send are forwarded to you by Apple. You may stop using the relay or revoke access at any time in your Apple ID settings. - Sign in with Microsoft — your name and email address.
We use this information solely to create and manage your account and to personalise your experience. We do not access your emails, contacts, calendars, files, or any other data held by these providers. See Section 5 for how to revoke access.
3.3 Payment and subscription information
How payment information is handled depends on where you subscribe:
- On the web (valuball.co) — payments are processed by Stripe. Stripe collects and processes your payment details. We do not receive or store your full card number; we receive your subscription status and limited transaction metadata.
- On iOS — purchases are made through Apple In-App Purchase and processed by Apple under your Apple ID. We do not receive your payment card details; we receive confirmation of the transaction and your subscription status.
- On Android — purchases are made through Google Play Billing and processed by Google under your Google account. We do not receive your payment card details; we receive confirmation of the transaction and your subscription status.
- Subscription management — we may use RevenueCat to manage and validate subscriptions across platforms. RevenueCat receives a pseudonymous user identifier and your purchase and entitlement information so that your subscription is recognised consistently across web, iOS and Android.
3.4 Information collected automatically
When you use the Service we automatically collect:
- Device and technical information — device type and model, operating system and version, app version, language, and similar technical identifiers.
- Usage data — pages and screens viewed, features used, actions taken, and session information. This is used in aggregated and de-identified form to understand and improve the Service.
- Push notification token — if you enable notifications, we collect a device push token (via our notifications provider, OneSignal) to deliver them.
- Cookies and similar technologies — on our website, as described in Section 8.
4. How We Use Your Information
We use your personal information to:
- Provide, maintain, operate and improve the Service
- Create, authenticate and manage your account
- Process subscriptions and manage your tier and entitlements
- Personalise your experience, including the clubs and metrics you follow
- Send service-related messages and, if you have enabled them, push notifications
- Provide customer support and respond to your requests
- Analyse usage (in aggregated/de-identified form) to improve our products
- Detect, prevent and address fraud, abuse, security incidents and technical issues
- Comply with our legal, tax, accounting and regulatory obligations
Legal bases (UK/EU users). Where the GDPR applies, we process your personal information on the following bases: performance of our contract with you (providing the Service and your subscription); our legitimate interests (improving and securing the Service, preventing fraud); your consent (for example, push notifications and certain analytics cookies, which you can withdraw at any time); and compliance with legal obligations (for example, retaining transaction records).
5. Third-Party Sign-In and Revoking Access
When you sign in with Google, Apple or Microsoft, we request only your basic profile information (name and email) for authentication and personalisation. We do not access any other data from those accounts.
You can revoke Valuball's access at any time:
- Google — Google Account permissions
- Apple — Settings → your name → Sign in with Apple, then select Valuball and stop using Apple ID
- Microsoft — Microsoft account apps and services
Revoking access may prevent you from signing in. To also delete your Valuball account and data, see Section 13. For how each provider handles your data, see the Google Privacy Policy, the Apple Privacy Policy, and the Microsoft Privacy Statement.
6. Payments and Subscriptions
Valuball offers Free, Premium and Founder tiers. Paid subscriptions may renew automatically until cancelled. You manage and cancel subscriptions where you bought them:
- Web (Stripe): through your account or by contacting us
- iOS: in your Apple ID subscription settings
- Android: in your Google Play subscription settings
We do not store full payment card details. Our payment providers (Stripe, Apple, Google) process payments under their own terms and privacy policies.
7. Push Notifications
If you enable notifications, we use OneSignal to deliver them and to manage your notification preferences. This involves collecting a device push token and limited device information. You can turn notifications off at any time in your device settings or within the app. See the OneSignal Privacy Policy.
8. Cookies and Analytics (Website)
On our website we may use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used. This may include analytics services that help us measure usage in aggregated form. You can manage or disable cookies in your browser settings; disabling some cookies may affect how the site works.
9. Third-Party Services and Sub-Processors
We rely on the following service providers to operate the Service. Each processes data under its own privacy policy and, where required, under a data processing agreement with us:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, account storage | Account and profile data, auth |
| Stripe | Web payment processing | Subscription and transaction data |
| Apple | iOS sign-in and in-app purchases | Auth identifier, purchase status |
| Android sign-in and Play Billing | Auth identifier, purchase status | |
| Microsoft | Sign-in | Auth identifier (name, email) |
| OneSignal | Push notifications | Device push token, device info |
| RevenueCat | Cross-platform subscription management | Pseudonymous ID, purchase/entitlement data |
| Cloudflare | Hosting, content delivery, security | Technical/connection data |
We may update this list as our infrastructure changes; material changes will be reflected in this policy.
10. How We Share Your Information
We do not sell your personal information, and we do not share it for third-party advertising. We share information only:
- With the service providers listed in Section 9, to operate the Service on our behalf
- Where you direct us to (for example, when you choose a sign-in provider or payment method)
- To comply with law, legal process, or a lawful government request
- To protect the rights, safety, or property of Valuball, our users, or others, including to prevent fraud or abuse
- In connection with a corporate transaction such as a merger, acquisition, or sale of assets, subject to this policy
11. International Data Transfers
Valusport Group Pty Ltd is based in Australia, and our service providers operate in various countries including the United States and the European Union. This means your personal information may be stored and processed outside your country of residence, including outside Australia, the UK and the EU.
For Australian users, this constitutes a disclosure of personal information to overseas recipients under the Australian Privacy Principles, and we take reasonable steps to ensure those recipients handle your information consistently with this policy. For UK/EU users, where we transfer data outside the UK/EEA we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
12. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Service. When you delete your account (Section 13), we delete or de-identify your personal information, except where we are required or permitted to retain it — for example, transaction and billing records kept to meet tax, accounting and consumer-law obligations (which may be retained for up to seven years under Australian law), and limited information retained for fraud prevention, security, or to comply with legal obligations. We will tell you, on request, what we have retained and why.
13. Account Deletion and Deleting Your Data
You can delete your Valuball account and associated personal information at any time:
- In the app — go to Settings → Account → Delete Account. This is available within the iOS and Android apps.
- On the web or by request — visit our account-deletion page or email us at [email protected], and we will action your request without requiring you to reinstall the app.
When you delete your account we permanently remove your personal information from our systems and request deletion from our sub-processors, subject to the limited retention exceptions in Section 12. If you signed in with Apple, we revoke the associated authorisation token using Apple's Sign in with Apple REST API as part of deletion. If you have an active paid subscription, you may need to cancel it where you purchased it (App Store, Google Play, or web) before or as part of deleting your account; we will explain the steps if any are required. We aim to complete deletion within 30 days.
14. Data Security
We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. Payment card information is handled by our payment providers and is never stored on our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify affected users and the relevant authorities as required by law.
15. Your Privacy Rights
Subject to your location and applicable law, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and personal information
- Export or receive a copy of your data (data portability)
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
To exercise any of these rights, contact us at [email protected]. We will not discriminate against you for exercising your rights.
Australia. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you are unhappy with how we handle your information.
UK/EU. If the UK or EU GDPR applies to you, you may lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.
United States (including California). Depending on your state, you may have rights to know, access, delete and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under California law. You may exercise these rights by contacting us at [email protected].
16. Children's Privacy
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.
17. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date at the top shows when the policy was last revised.
18. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or your personal information, contact us at:
Valusport Group Pty Ltd ACN 698 493 337 / ABN 22 698 493 337 Email: [email protected] Unit 104, 17 Meredith Street, Bankstown NSW 2200, Australia