RefRadar Privacy Policy

Last updated: June 21, 2026

RefRadar (“the app,” “we,” “us”) helps soccer referees see their available and assigned games from Ref Centre, get notified about new games, and add games to their calendar. This policy explains what we collect, how we use it, and the choices you have.

1. Information we collect

• Account details — your name and home location (city/region), which you provide when creating an account.
• Ref Centre credentials — your Ref Centre email and password, used solely to read your games on your behalf. See “How we protect your credentials” below.
• Game data — the available and scheduled games we read from your Ref Centre account so we can show them to you and notify you.
• Push notification token — a device identifier from Apple Push Notification service, used only to deliver alerts you’ve enabled.
• Google Calendar authorization (optional) — if you connect Google Calendar, a refresh token that lets us add your games to your calendar.

2. How we use your information

• To read and display your available and assigned games from Ref Centre.
• To send you push notifications when a new game matches your filters.
• To calculate travel distance from your home location to each game.
• To add games to your calendar when you ask us to (manually or via auto-sync).

We do not sell your data, show you ads, or use your information for any purpose other than running the app for you.

3. How we protect your credentials

• Your Ref Centre password is encrypted at rest using envelope encryption (AES-GCM). It is decrypted only momentarily, in memory, to sign in to Ref Centre and read your games.
• Your account password is stored only as a salted, one-way PBKDF2 hash — we cannot read it.
• Your Google Calendar refresh token is likewise encrypted at rest.
• RefRadar is read-only on Ref Centre. We never accept, decline, or change your assignments — we only read what is already there.
• All data is transmitted over HTTPS/TLS.

4. Google user data

If you connect Google Calendar, RefRadar requests the calendar.events scope. We use this access only to create calendar events for your games. RefRadar’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others, use it for advertising, or allow humans to read it except as required for security or to comply with law. You can revoke RefRadar’s access at any time at myaccount.google.com/permissions.

5. Data sharing

We do not share your personal data with third parties except service providers that host our infrastructure (Cloudflare) and deliver notifications (Apple), strictly to operate the app. We may disclose data if required by law.

6. Data retention & deletion

We keep your data only while your account is active. You can disconnect your Ref Centre account at any time in Settings → Disconnect Ref Centre, which deletes your stored credentials. To delete your entire account and all associated data, email us at the address below and we will remove it.

7. Children

RefRadar is intended for referees and is not directed to children under 13. We do not knowingly collect data from children under 13.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version.

9. Contact

Questions about this policy or your data? Email nikaanseirafian@gmail.com.