Privacy Policy
Sportron (the “App”)
Last updated: 9 August 2026
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Sportron mobile application (the “App”). We operate this App in the Islamic Republic of Pakistan and process your information in accordance with the laws applicable to Pakistan, including the Prevention of Electronic Crimes Act, 2016, and the Consumer Protection guidelines of the Pakistan Telecommunication Authority, as well as generally accepted data protection principles.
By creating an account, signing in, or using any feature of the App, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.
1. Who We Are
The App is developed and operated by Zoro Labs (“we”, “us”, “our”, or the “Publisher”). For any privacy-related matter, you may contact us at:
- Email: zorozlabs@gmail.com
We collect only the information necessary to operate the App (a multi-sport social networking application for communities, sessions, and match tracking) and to provide you with the features you choose to use.
- Google account profile: When you sign in using Google, we obtain your Google account name and email address and use it to create your account. We do not access your Google password.
- Profile information: Your chosen username, bio, and optional photo, which you provide and manage yourself.
- Profile photo / community cover photos: Photos you upload. These are stored and served by our image-processing provider (Cloudinary) and displayed to other users where relevant.
- Community content: Community names, descriptions, and the sport each community is linked to.
- User-generated content: Details you post and share — including recording a match, creating a session, posting a ping, writing comments, and adding likes. Depending on the feature, this content may be visible to other members of the relevant community or to the public.
- Match and session content: Details you enter when recording a match or creating a session, including sport(s) played, scores, team, versus/opponent names, and participating members.
- Messages and pings: Text you send when pinging a community and your “Coming”/”Busy” responses.
- Venue/location text: When you create a session, you may type the name or location of a place. We do not access your device’s GPS or location services, and we do not track your physical location.
- Registration tokens (device token): To deliver push notifications, we receive a unique token assigned to your device by the notification service (Firebase Cloud Messaging) and store it under our profile record.
- Transactional metadata: System-generated timestamps (e.g., when you joined a community, recorded a match, or performed an action), which are stored in our database.
- Usage logs: We do not deploy third-party advertising or, at this time, dedicated analytics SDKs. Our cloud infrastructure providers may maintain standard operational logs for security and availability with their services.
- We do not collect your device’s real-time location or GPS coordinates.
- We do not request access to your contacts, SMS, microphone, camera roll (files are uploaded only when you explicitly select a photo), or files.
- We do not sell or rent your personal data.
We use the information we collect only for the following purposes:
- Provide the service: Create and manage your account, authenticate you via Google.
- Communities & sessions: Administer communities, membership, join requests, invites, sessions, and match records you participate in.
- Matches & social features: Record matches, display scores and standings, process likes and comments, and generate per-community statistics that you ask for.
- Notifications: Send you in-app and push notifications for actions (e.g., session requests, join requests, match approvals, pings, invites). You can disable them at any time in the Settings.
- Security & integrity: Detect, prevent, and respond to fraud, abuse, security incidents, and prohibited content—consistent with our Terms of Service.
- Legal compliance: Respond to lawful requests and comply with applicable legal obligations.
Lawful bases
Where required, we rely on the following bases under applicable law:
- Consent, where you have explicitly agreed (e.g., push notifications and contributing content).
- Performance of a contract/service, to operate the features you have signed up for.
- Legitimate interests, such as service integrity and security, that do not override your rights.
We do not sell your information. We share it only with the categories of recipients outlined below, and only as necessary to operate the features you use.
- Service providers (data processors):
- Supabase — cloud database and authentication provider that stores the App’s records and hosts its data.
- Google / Firebase Cloud Messaging (FCM) – delivering push notifications.
- Cloudinary – storage, optimisation, and delivery of the photos you upload (profile pictures and community covers).
These providers process data only in accordance with our instructions and are bound by appropriate confidentiality and processing terms.
-
Authorities and regulators: Where we are legally required to disclose information (e.g., in response to a court order, law enforcement request, or in compliance with the Prevention of Electronic Crimes Act, 2016), we will disclose only the minimum necessary and solely for the stated purpose.
- Other users: By the nature of the App, certain content you choose to share is visible to other users (e.g., your username, community membership, community match feed, pings, and comments).
- In public communities, your community profile and public content may be visible to anyone who joins or browses.
- In Restricted (invite/approval-only) communities, interactions are limited to other approved members only. Members must be invited or approved by an administrator, and you can limit your community accordingly.
- We do not make user-generated content available for public viewing on any website or third-party platform outside the App.
We will never sell, rent, or trade your personal information to any third party for advertising, marketing, or any other commercial purpose.
5. International Data Transfer
We store data using cloud service providers that may host data on servers outside Pakistan; processing facilities may be located abroad (including through Supabase and Google). By using the App, you acknowledge that your data may be transferred to and processed on servers located outside Pakistan for the purposes described above, with safeguards consistent with applicable law.
6. Data Retention
We retain your information only as long as necessary to:
- Provide you with the App and its features.
- Preserve your community memberships, session and match history, and statistics that you wish to keep.
- Comply with legal, regulatory, tax, accounting, or security requirements.
If you delete your account: You may delete your account at any time from Profile → Settings → “Delete Account”. On deletion, we will erase your account credentials, stored content you contributed, and personal profile data under our control, subject to any legal obligations or backup retention. Content you posted in shared spaces (such as comments or matches) may be retained where other members rely on it or where legally required.
7. Your Rights
You have the following rights, subject to the legal grounds:
- Access and portability: Receive a copy of the information we hold about you.
- Correction: Update or correct inaccurate personal information (you can edit your username, bio, and photo in Profile).
- Deletion: Request that we delete your account and associated records (see Section 6).
- Restriction / objection: Request that we limit how we process your data in certain circumstances.
- Withdrawal of consent: Withdraw consent provided for specific processing (e.g., push notifications) at any time in Settings; this does not affect the lawfulness of processing based on consent before its withdrawal.
- Erasure: Where processing is based solely on your consent, request that we erase your data.
To exercise any of these rights, contact us at the contact details in Section 1. We will respond without reasonable delay, and in any event within the timelines applicable under Pakistani law. We may request you to verify your identity before undertaking any request.
Residents of Pakistan: You may also lodge a complaint with the competent authorities (including the Federal Investigation Agency’s Cybercrime Wing / relevant data-protection body) if you believe your rights have been violated.
8. Children’s Privacy
The App is intended for use by users 16 years of age or older. If you are younger than the applicable age of consent in your jurisdiction, you may only use the App with the permission and involvement of a parent or legal guardian.
We do not knowingly collect personal information from children under the age of consent. If you become aware that a child has provided us with personal information without parental consent, please contact us and we will take reasonable steps to remove the information and delete the child’s account.
9. Security
We take commercially reasonable steps to protect your information:
- All sign-in flows use Google OAuth (we never receive or store your Google password).
- Data is transmitted in encrypted form (TLS/HTTPS) between your device and our servers.
- Access control policies (including role-based permissions) are applied to our database to limit what each authenticated user can view or modify.
- We keep our infrastructure up to date and review access to production.
However, no method of transmission over the Internet, or method of electronic storage, is 100% safe. While we strive to use reasonable means to protect your information, we cannot guarantee its absolute security in connection with any breach or abuse.
10. Third-Party Links & Content
The App may include links to external websites or services (e.g., Google, Cloudinary, Firebase) that we do not operate. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you interact with before sharing information otherwise.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect new features, technologies, changes in law, or other operational requirements. We will not reduce your rights under this Policy without your consent. When we make material changes, we will notify you by reasonably prominent notice (for example, by showing an updated Policy within the App), and the revised Policy will be effective as indicated in the notice or as required by law.
The “Last updated” date at the top of this Policy reflects the date of the most recent revision, and applies to all changes or disputes arising from the App.
If you have any questions, concerns, or requests about this Privacy Policy or your data, please contact us:
- Email: zorozlabs@gmail.com
- In-App: Profile → Settings → About
We will respond to your request as quickly as possible and in accordance with applicable law.
This Privacy Policy was prepared in accordance with applicable law and the App’s described data practices. Please review it carefully and note that you are authorised to use the App only if you agree to the terms of this Policy.
© 2026 Muhammad Murtaza. All rights reserved.