RefRadar Privacy Policy

Last updated: August 28, 2026

RefRadar (“the app,” “we,” “us”) helps soccer referees see their available and assigned games from Ref Centre, get notified about new games, add games to their calendar, and — on the iPhone and Apple Watch — run the match itself. This policy explains what we collect, how we use it, and the choices you have.

1. Information we collect

• Account details — your name and home address, which you provide when creating an account. Your address is converted to an approximate map coordinate and used only to estimate driving distance to each field. We do not track your location in the background or between matches — see “Health and location data” below for the one case where your Apple Watch records position, and what happens to it.
• Ref Centre credentials — your Ref Centre email and password, used to read your games on your behalf and, when you tap “Accept this game,” to accept that game for you on Ref Centre. See “How we protect your credentials” below.
• Game data — the available and scheduled games we read from your Ref Centre account so we can show them to you, notify you, and accept games you choose.
• Push notification token — a device identifier from Apple Push Notification service, used only to deliver alerts you’ve enabled.
• Match records you create (on your device) — the score, cards, substitutions, timings, venue, competition and any fee or notes you enter for a match. These are stored on your iPhone, not on our servers.
• Health and workout data (on your device, optional) — if you choose to track a match on your Apple Watch, RefRadar records a workout with your heart rate, active energy and distance, and reads those figures back for your match report.
• Position during a match (on your device, optional) — during that same Watch workout, RefRadar records your GPS positions to draw your heat map. Recording starts at kick-off and stops at full time.
• Google Calendar authorization (optional) — if you connect Google Calendar, a refresh token that lets us add your games to your calendar and read your calendar events to warn you about scheduling conflicts. We read events only to check for overlaps with your games; we do not store your calendar events.
• Technical and diagnostic data — your IP address, recorded briefly to limit repeated sign-in and sign-up attempts, and short diagnostic notes about our requests to Ref Centre, which we use to spot breakages in the connection. See “Data retention & deletion” for how long each is kept.

2. How we use your information

• To read and display your available and assigned games from Ref Centre.
• To accept a game on Ref Centre on your behalf — only when you tap “Accept this game” and confirm.
• To send you push notifications when a new game matches your filters.
• To calculate travel distance from your home address to each game.
• To add games to your calendar when you ask us to (manually or via auto-sync).
• To read your Google Calendar — only if you connect it — so we can warn you when an available game overlaps an event you already have.
• To show your own match records, your heat map and your season totals back to you.

We do not sell your data, show you ads, or use your information for any purpose other than running the app for you.

3. How we protect your credentials

• Your Ref Centre password is encrypted at rest using envelope encryption (AES-GCM). It is decrypted only momentarily, in memory, to sign in to Ref Centre and read your games.
• Your account password is stored only as a salted, one-way PBKDF2 hash — we cannot read it.
• Your Google Calendar refresh token is likewise encrypted at rest.
• RefRadar acts on Ref Centre only when you tap “Accept this game” and confirm — it then accepts that one game for you. It never declines games, changes your existing assignments, or takes any action on Ref Centre on its own.
• All data is transmitted over HTTPS/TLS.

4. Health and location data

Your health and location data never leaves your devices. It is not sent to RefRadar's servers, and we cannot see it. There is no code path that uploads it.

• Only during a match, and only if you ask. The Watch workout and the GPS recording start when you start a match with “Track on Apple Watch” switched on, and stop at full time. Turn that off when you set the match up and neither one runs.
• What is written to Apple Health. One soccer workout per match, with the heart rate, active energy and distance your Watch measured during it. You can review or revoke this at any time in the Health app under Sharing → Apps → RefRadar.
• What we read back. Heart rate and distance for that match, shown on its match report and in your season trends. Nothing else is read from Health.
• Your heat map. Built on your iPhone from the positions your Watch recorded, and stored with that match on your device. Deleting the match deletes it.
• No background tracking. RefRadar does not record your location when you are not refereeing a match you started.

5. Google user data

If you connect Google Calendar, RefRadar requests the calendar.events scope. We use this access only to (1) create calendar events for your games and (2) read your calendar events to warn you when a game overlaps something you already have. We do not store your calendar events, and we use them for nothing else. RefRadar’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others, use it for advertising, or allow humans to read it except as required for security or to comply with law. You can revoke RefRadar’s access at any time at myaccount.google.com/permissions.

6. Who we share data with

We do not sell your data and we do not share it for advertising. We use a small number of service providers, each strictly to operate a specific part of the app:

• Cloudflare — hosts our servers and database. All account data described above is stored there.
• Apple — delivers push notifications and processes subscription purchases.
• Google — only if you connect Google Calendar, and only as described in “Google user data” above.
• Map lookup services — to work out how far a field is from you, we look up coordinates using Nominatim (operated by the OpenStreetMap Foundation, United Kingdom) and, if that fails, Photon (operated by Komoot, Germany). We send them only the address or field name being looked up — never your name, email, or any identifier that ties the address to you. Your home address is looked up once when you save it, and the result is stored on our side so it is not sent again.

Where your data is processed. These providers operate outside Canada, including in the United States, the United Kingdom and Germany. Your data is subject to the laws of those countries while it is being processed there, which may allow their courts or government authorities to access it. We may also disclose data if we are required to by law.

7. Data retention & deletion

We keep your data only while your account is active.

• Disconnecting Ref Centre. Settings → Disconnect Ref Centre deletes your stored Ref Centre credentials straight away.
• Deleting your account. Settings → Delete account in the app immediately removes your account and the data stored with it — your credentials, filters, games, schedule, push tokens, and any Google Calendar authorization. No email or waiting period is required.
• Diagnostic notes. The short technical notes described in section 1 are not tied to your account and are automatically deleted after 3 days, so a small number may briefly outlive a deleted account before they expire.
• Game history. While your account is open, games that are long past and no longer listed are cleared automatically after 90 days.
• On your device. Match records, heat maps and health data live on your iPhone and Apple Watch, so deleting the app removes those with it.

8. Your rights

You can exercise any of the following by emailing us at the address in section 11. We will respond within 30 days, and we will not charge you or treat you differently for asking.

• Access. Ask for a copy of the personal data we hold about you, and for an explanation of how it is used and who it has been shared with.
• Correction. Ask us to fix data that is inaccurate or incomplete. Your name, home address and filters can also be edited directly in the app.
• Deletion. Delete your account and its data at any time from Settings → Delete account, or ask us to do it for you.
• Withdraw consent. Disconnect Ref Centre or Google Calendar, or turn off notifications, at any time in Settings. Withdrawing consent for the Ref Centre connection means the app can no longer show you games.

If you are not satisfied with how we have handled your personal data, you can complain to the Office of the Privacy Commissioner of Canada.

9. Children

RefRadar is built for match officials and is not directed to children under 13, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child under 13 has created an account, email us at the address in section 11 and we will delete the account and its data.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version.

11. Contact

RefRadar is operated by Nikaan Seirafian, who is responsible for the personal data described in this policy and for answering the requests in section 8. Questions about this policy or your data? Email nikaanseirafian@gmail.com.