PRIVACY POLICY

PRIVACY POLICY - GAMORA

Effective Date: April 9, 2026 Last Updated: April 9, 2026

1. Introduction

Gamora ("we", "our", "us", "the App") is a pickup sports game finder application. We are currently available in Pakistan and expanding globally. This Privacy Policy applies to all users worldwide and explains how we collect, use, store, share, and protect your personal data when you use the Gamora mobile application.

By downloading or using Gamora, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Who We Are (Data Controller)

App Name: Gamora Developer: Gamora Contact Email: startup.start001@gmail.com

For all privacy-related requests, questions, or concerns, contact us at: startup.start001@gmail.com We will respond to all requests within 30 days.

3. Information We Collect

We collect the following categories of personal and sensitive data:

3.1 Account and Identity Data

• Full name

• Email address

• Profile photo (optional)

• Username

• Encrypted password

3.2 Location Data

• Precise GPS location (used while the app is in use to find nearby games and players)

3.3 Device and Technical Data

• Device model, brand, and manufacturer

• Operating system and version

• App version number

• Device Instance ID

• IP address (collected automatically by Firebase)

• User agent string

3.4 Usage and Activity Data

• Sports games you create, join, or browse

• Sport type preferences

• In-app interactions and activity logs

• Session duration and frequency

3.5 Communications Data

• Push notification tokens (via Firebase Cloud Messaging)

We collect only data that is strictly necessary for the core functionality of the App.

4. Legal Basis for Processing (GDPR - EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as required by GDPR:

• Contractual Necessity - to provide you with the services you signed up for (account creation, game matching, notifications)

• Legitimate Interests - to improve app performance, fix crashes, and ensure security

• Consent - for optional features such as profile photo upload and marketing communications, where we ask for your explicit consent before collecting

• Legal Obligation - where we are required to retain or disclose data by applicable law

You have the right to withdraw your consent at any time by contacting us at startup.start001@gmail.com

5. How We Use Your Information

We use the data we collect strictly for the following purposes:

• To create, authenticate, and manage your user account

• To find and display nearby pickup sports games based on your location

• To display your profile to other players on the platform

• To send you game alerts and push notifications

• To monitor app stability and fix crashes (Firebase Crashlytics)

• To improve overall app performance and user experience

• To prevent fraud, abuse, and ensure platform security

• To comply with applicable legal obligations

We do not use your data for advertising, profiling, or any purpose unrelated to the core functionality of the App.

6. Third-Party Services and SDKs - Firebase Disclosure

Gamora is built on Google Firebase. The following Firebase services are integrated and may collect data automatically:

Firebase Authentication - collects email address, encrypted password, IP address, and user agent for account login and security

Firebase Cloud Firestore - stores user-generated content including game listings, profile data, and activity records

Firebase Cloud Messaging - collects device Instance ID to deliver push notifications to your device

Firebase Crashlytics - collects crash reports, installation UUID, and IP address to identify and fix app errors

Firebase Performance Monitoring - collects Instance ID and IP address to measure app loading and response performance

Google Analytics for Firebase - collects app usage events, device information, and OS version to help us understand how the app is used

All Firebase services are operated by Google LLC. Google's Privacy Policy is available at: https://policies.google.com/privacy

Firebase Data Processing and Security Terms apply to our use of Firebase: https://firebase.google.com/terms/data-processing-terms

We are solely responsible for ensuring all third-party SDKs used in the App comply with Google Play Developer Program policies and applicable privacy laws.

7. Data Sharing

We do not sell, rent, or trade your personal data under any circumstances.

We share your data only in the following limited cases:

With Google Firebase / Google LLC - as described in Section 6 above, for core app functionality

With other Gamora users - your display name, profile photo, sport preferences, and game activity are visible to other users within the App

For legal compliance - we may disclose your data if required by applicable law, court order, government authority, or to protect the rights and safety of our users

With service providers - if we engage third-party service providers in the future, we will update this policy and ensure they are bound by data protection agreements

We do not share personal data with advertisers, marketing companies, data brokers, or any unrelated third parties.

8. Location Data

Gamora requests access to your device's precise GPS location while the App is in use. This data is transmitted to our servers solely to match you with nearby sports games and players. We do not track your location in the background when the App is closed or minimized. You may revoke location permission at any time through your device settings, though this will significantly limit core app functionality.

9. App Permissions

Gamora may request the following device permissions:

• Precise Location - required to find nearby games and players

• Camera - optional, for updating your profile photo

• Push Notifications - to send game alerts and updates

• Internet Access - required for all app features to function

Each permission is requested only when needed and only for purposes directly related to the App's functionality as described in this policy.

10. Data Security

We take the security of your personal data seriously. All data transmitted through Gamora is encrypted in transit using HTTPS and TLS (Transport Layer Security). Your stored data is protected by Google Firebase's industry-standard security infrastructure, including encryption at rest. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Gamora operates globally. Your personal data may be transferred to and stored on servers located outside your country of residence, including in the United States where Google Firebase infrastructure operates. When we transfer personal data from the EU/EEA, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as Standard Contractual Clauses (SCCs) adopted by the European Commission. By using the App, you consent to this transfer.

12. Data Retention and Deletion

We retain your personal data only for as long as your account remains active or as required to provide our services. When your account is deleted, all associated personal data is permanently removed, unless retention is legally required for security, fraud prevention, or regulatory compliance.

To delete your account and all associated data:

• Use the Delete Account option within the App settings, OR

• Send a deletion request to startup.start001@gmail.com

We will process all deletion requests within 30 days.

13. Your Rights

Depending on your location, you have the following rights regarding your personal data:

All Users (Global)

• Right to Access - request a copy of the personal data we hold about you

• Right to Correction - request that inaccurate or incomplete data be corrected

• Right to Deletion - request that your personal data be permanently deleted

• Right to Withdraw Consent - withdraw your consent to data processing at any time

• Right to Object - object to how we are using your personal data

EU / EEA Users (GDPR)

• Right to Data Portability - receive your data in a structured, machine-readable format

• Right to Restrict Processing - request that we limit how we use your data

• Right to Lodge a Complaint - with your local data protection authority (DPA)

California Users (CCPA / CPRA)

• Right to Know - what personal information we collect, use, disclose, and sell

• Right to Delete - request deletion of your personal information

• Right to Opt-Out - we do not sell your personal data, but you may opt out of any future sharing

• Right to Non-Discrimination - we will not discriminate against you for exercising your privacy rights

• Right to Correct - request correction of inaccurate personal information we hold about you

Canadian Users (PIPEDA)

• Right to access and correct your personal information held by us

Brazilian Users (LGPD)

• Right to confirmation of data processing, access, correction, deletion, and portability

To exercise any of these rights, contact us at startup.start001@gmail.com and we will respond within 30 days.

14. Children's Privacy (COPPA Compliance)

Gamora is not intended for children under the age of 13. We do not knowingly collect, store, or process personal data from children under 13. If we become aware that a child under 13 has created an account or submitted personal data, we will delete that data immediately. If you are a parent or guardian and believe your child has provided data to us, please contact us immediately at startup.start001@gmail.com

For users in jurisdictions where the minimum age is higher (e.g., 16 in some EU member states), the same protections apply.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our App, services, legal requirements, or business practices. When we make material changes, we will update the Effective Date at the top of this page and notify users through the App or via email. We review and update this policy at least once every 12 months in line with CCPA requirements. Recording Law Your continued use of Gamora after any changes constitutes your acceptance of the updated Privacy Policy.

16. Governing Law

This Privacy Policy is governed by the laws of Pakistan for users based in Pakistan. For users in the EU/EEA, GDPR applies. For users in California, CCPA/CPRA applies. We comply with all applicable local and international data protection laws in every jurisdiction where our App is available.

17. Contact Us

For any questions, concerns, requests, or complaints regarding this Privacy Policy or how we handle your personal data:

📧 Email: startup.start001@gmail.com

We are committed to resolving all privacy-related concerns and will respond within 30 days of receiving your request.