This privacy policy explains what personal data the Victory Point app and the website victory-point.com collect, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it.
For any privacy question or request, email support@victory-point.com.
Victory Point is an Android app for recording game results with family and friends. It's published on Google Play under the developer name "Victory Point Support".
The app and this website are run by Luis Pinho de Aguiar, Dubai, United Arab Emirates ("we", "us"). We decide how your personal data is used, which makes us the data controller.
When you create an account: your first name, family name and email address, and your password. Our login provider stores the password in scrambled (hashed) form, and we can't see it.
When you complete your profile: your nickname, gender (you can choose "Private"), date of birth, nationality and phone number, the chess-piece avatar you choose, and a user code we give you (for example AB0001) so friends can find you in the app.
When you record games: the game, the players, the scores and round results, and the date and time it was played. Players can be other Victory Point users or names you type in. If you add someone who doesn't have an account, please use only a first name or nickname. If you use the Guest Tracker without an account, nothing is saved.
When you subscribe: Google Play takes your payment, and we never see or store your card details. Through Google Play and our subscription provider, RevenueCat, we receive the subscription you bought, its price and currency, the country of purchase, whether it's active, when it renews or ends, and a purchase reference.
When you contact us or send feedback: the in-app Feedback screen opens an email to support@victory-point.com. We receive your email address and whatever you write.
Technical data and crash reports: when the app connects to our servers, our hosting provider records technical details such as your IP address, device type and the time of the request. These logs are used for security and to fix problems. If the app has an error or crashes, it sends a crash report to Google Firebase Crashlytics. A report contains technical details about the error, your device model and operating system version, the app version, a random installation ID, and your account's user ID, so we can match a report to your account if you contact us. It doesn't contain your name, email address or game scores. The app contains no advertising or analytics tools.
On this website: if you sign up for news on victory-point.com, we collect your email address. The website is hosted by GoDaddy, which uses cookies to run the site and to measure visits. The cookie banner tells you about them.
We use your data for these purposes. If you live in the EU or the UK, the legal basis for each is shown after the dash.
• Creating and running your account: logging in, verifying your email, resetting your password – needed to provide the app.
• Saving your games and showing results to you and the other players – needed to provide the app.
• Letting other users find you and add you to games – needed to provide the app.
• Managing your subscription and unlocking paid features – needed to provide the app, and to keep transaction records the law requires.
• Answering your questions and feedback – our legitimate interest in replying to you.
• Keeping the service secure and fixing faults – our legitimate interest in a working, secure app.
• Finding and fixing app crashes and errors – our legitimate interest in a working, reliable app.
• Sending news from the website – your consent, which you can withdraw at any time.
We don't sell your personal data. We don't use it for advertising. We don't make automated decisions about you that have legal or similarly significant effects.
Other signed-in Victory Point users can find you by your user code, or in the list of players when they set up a game. Player lists show your user code with your nickname, or your first name if you haven't set a nickname, and your avatar. When someone adds you to a game, your name is saved in that game, and the game and its results can be seen by the other players in it.
Your email address, phone number, date of birth, gender and nationality can be read only by you. Other users can't see them, in the app or otherwise.
A game, its players and its scores can be read only by the person who recorded it and the registered players in it. Other signed-in users can still read your first and family name. People who aren't signed in can't read any of this.
We use these service providers. They handle your data only to provide their service to us:
• Supabase Inc. – hosting, database and login. Our database is in Mumbai, India.
• RevenueCat Inc. – subscription management (United States).
• Google – app distribution and payment through Google Play. Google's own privacy policy covers your Google account and payment details.
• Google (Firebase Crashlytics) – crash reports, so we can find and fix errors in the app (United States).
• GoDaddy – website hosting and the newsletter sign-up.
• Microsoft – our support mailbox (Microsoft 365).
We may also share data when the law requires it, or to protect our rights or the safety of others. If Victory Point is transferred to another owner (planned: LA Consulting FZ-LLC), your data will move with it under this policy, and we'll tell you before it happens.
Our providers store and process data outside the country you live in, including in India and the United States. Where the law requires it, we rely on the safeguards in our providers' data processing terms.
• Data travels between the app and our servers over encrypted connections (HTTPS).
• Passwords are stored only in hashed form by our login provider.
• Database rules stop users from changing or deleting anyone else's profile, games or subscription, and people who aren't signed in can't read your data.
• Access to the database and provider accounts is limited to the people who run the app.
No system is completely secure. If a breach affects your personal data in a way that puts you at risk, we'll tell you, and the relevant authorities where the law requires it.
• Account and game data: as long as your account is open. When you delete your account in the app, it's deleted straight away. Requests by email are completed within 30 days.
• Games you played with other registered users: they stay in the other players' game history so their scores stay correct. Your name in them is replaced with "Deleted player" and is no longer linked to any account.
• Backups and server logs: deleted data and request logs may stay in our hosting provider's systems for a short time, normally no more than 7 days.
• Crash reports: 90 days, then deleted automatically by Firebase Crashlytics.
• Subscription records: as long as your account is open, and deleted with it. Google and RevenueCat keep their own transaction records under their own policies, for tax and accounting.
• Emails and feedback: 24 months after your last message.
• Newsletter email address: until you unsubscribe.
You can delete your account in the app (Manage Profile, then Delete Profile), or ask us on the web at victory-point.com/delete-account. Deleting your account doesn't cancel a Google Play subscription, so cancel that in Google Play first.
Depending on where you live, data protection law (including the UAE Personal Data Protection Law and, in the EU and UK, the GDPR) gives you the right to:
• get a copy of the personal data we hold about you;
• have it corrected if it's wrong;
• have it deleted;
• limit or object to how we use it;
• receive it in a format you can take elsewhere;
• withdraw your consent where we rely on it, such as for the newsletter.
To use any of these rights, email support@victory-point.com from the address linked to your account. We may ask you to confirm it's you. We reply within 30 days.
If you're unhappy with how we've handled your data, please contact us first. You can also complain to the UAE Data Office or, in the EU or UK, to the data protection authority in your country.
Children: Victory Point isn't meant for children under 13, and we don't knowingly collect their personal data. If you think a child under 13 has created an account, email us and we'll delete it.
Changes to this policy: if we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you in the app or by email.
Contact: Luis Pinho de Aguiar, Dubai, United Arab Emirates. Email: support@victory-point.com
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.