Privacy Policy

This notice describes how we process the personal data of users who visit the website timescore.app and who use the Timescore mobile application (jointly, the “Service”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the Italian “Privacy Code”).

The controller of your personal data is:

Timescore Live by Lorenzo Balsano
Registered office: Via Chiesazza Sperone 3 SNC, 90010 Altavilla Milicia (PA), Italy
VAT number: IT06627200824 · REA: PA-404219
Email: hello@timescore.app · Certified email (PEC): lorenzobalsano@pec.it

For any request concerning the processing of your personal data you can contact us at: hello@timescore.app.

Depending on the features you use, Timescore may process the following categories of data:

Your data is processed for the following purposes:

To provide you with the Service we rely on selected third-party providers that process data as Data Processors, under agreements compliant with Art. 28 GDPR:

Other users of the Service. If you choose to publish a slip in the Community, that slip becomes visible to other users together with the nickname and avatar of your public profile, including to those who browse the Community without an account. Together with published slips, the data derived from them is visible: how many you have published, their outcome and the related win percentage, the stars and copies received, the number of followers. Publishers may appear in the areas of the Community that highlight authors and slips (for example those with the highest win percentage or the most followers): these are calculated automatically on the same public data, without any assessment of the person. Your email, contact details, amounts staked and all slips you do not publish remain private.

You can withdraw a slip from publication, from the app, until the kick-off of its first match. From that moment it remains visible: this prevents users from withdrawing only losing slips, which would distort the percentages shown to other users. Deleting your account in any case removes all your published slips, your nickname and your avatar.

Your data is not sold, nor transferred to third parties for marketing purposes. We may be required to disclose it to public authorities in response to lawful requests.

Some of our providers are based in the United States. Transfers take place on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission under Art. 46(2)(c) GDPR, or where adequacy decisions exist (e.g. the EU-US Data Privacy Framework), and with supplementary technical measures (encryption in transit, TLS 1.2+).

• Account, profile and slip data: retained for the entire duration of the relationship. You can delete your account at any time from the app settings; in that case the data will be deleted within 30 days, unless otherwise required by law.
• Community data: retained to allow the display of published content, the management of Free/Premium limits and the proper functioning of notifications and copies to Home. Slips you withdraw from publication (possible until the kick-off of the first match) stop being visible to other users; the others remain visible until you delete your account.
• Slip images: deleted immediately after OCR processing (a few seconds).
• AnalyX chat: conversations remain available in the app until you delete them. When you delete a conversation it disappears from the app immediately; within 30 days we delete its text, that is the questions and answers, and we keep only technical data without content (date, number of messages, estimated cost) for counting daily limits and controlling the costs of the service. When you delete your account they are deleted together with the other data.
• Premium trial included with the account: the account creation date, from which the end of the trial is calculated, is kept for the entire life of the account, so that the trial is received only once per account; it is deleted when the account is deleted.
• Premium subscription data: retained for the duration of the subscription and for up to 24 months after expiry, to handle purchase restores and disputes; deleted earlier if the account is deleted, unless otherwise required by law.
• Scan samples (only with consent): photo, extracted text and corrections deleted automatically within 90 days of upload, or immediately if the account is deleted. Withdrawal of consent stops future uploads; data collected previously is in any case deleted within the 90-day period.
• Support tickets and attachments: retained for the time needed to handle the request and for any subsequent checks, unless you request deletion or the law requires otherwise.
• App usage events: retained in pseudonymous form for internal technical and product analysis, for the time needed to assess stability, feature adoption and abuse prevention.
• Technical logs, IP and diagnostics: retained for up to 90 days for security and error-fixing purposes, unless longer retention is needed to investigate specific abuse or incidents.
• Data subject to legal obligations: retained for the period required by applicable law.

As a data subject you have the right, at any time, to exercise against us the rights provided for by Articles 15 to 22 GDPR:

• Access to your personal data (Art. 15);
• Rectification of inaccurate data (Art. 16);
• Erasure (“right to be forgotten”, Art. 17);
• Restriction of processing (Art. 18);
• Portability of data in a structured format (Art. 20);
• Objection to processing based on legitimate interest (Art. 21);
• Withdrawal of consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3)).

To exercise your rights write to hello@timescore.app. We will reply within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority: in Italy, the Garante per la protezione dei dati personali (Italian Data Protection Authority, garanteprivacy.it).

We adopt appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including: encryption of data in transit (TLS), role-based access controls (Row Level Security on Supabase), segregation of environments, token-based device authentication. However, no system is 100% secure: we encourage you to use strong passwords and not to share your account credentials.

The Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us: we will delete it.

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR. Optical recognition of slips is an information extraction process and does not produce legal effects on the user. AnalyX chat answers are also generated automatically, but they are informational texts that you read and assess yourself: they do not make decisions concerning you.

For information on the use of cookies please see our Cookie Policy.

We may update this notice to reflect changes to the Service or to applicable law. The “last updated” date shown at the top reflects the version currently in force. We will inform you of material changes through the Service or by email (if registered).