Privacy
Policy

1. Overview

Phủi League is TinyWorld's community-football organizer. No account is required to create a league or record results. TinyWorld does not sell or rent league data or use it for behavioural advertising.

2. Data on your device

League, organizer, venue, team and player names, fixtures, scores, timers and weekly history stay on the device. iOS device backups may include them according to Apple settings. Android disables automatic cloud backup of app data and encrypts management records using Android Keystore. Manual backups use a password you choose. Deleting a league removes its local record after confirmation.

League funds

The fund feature records income, expenses, balances and notes; it does not process payments. Fund records remain on-device and in encrypted manual backups, without synchronization between administrators. They are excluded from public links, league-server payloads and advertising requests. You decide who receives any exported CSV or backup and are responsible for protecting those files.

3. League sharing

When an admin taps Share, the app sends league information to TinyWorld's server to create a live viewer link. This may include the league, organizer, venue, date, teams, players, fixtures and results. Anyone with the link can view it but cannot edit; administrative credentials are not included in the public data.

Do not publish a link if team or player names contain information you do not want to share. The admin is responsible for obtaining appropriate permission before entering and sharing other people's names.

4. Maps, calendars and notifications

Venue search sends your search terms to Apple Maps on iOS or the operating system's Geocoder on Android. Android saves the selected address and can open an external maps app to preview it. Phủi League does not request GPS/current location. Calendar events are reviewed in your device's event editor; the app does not read your calendar.

Match-end and upcoming reminders are scheduled when enabled with permission. If you opt into remote updates, TinyWorld stores your APNs (iOS) or FCM (Android) device token and followed league to send messages through Apple/Google when configured. Android does not automatically obtain an FCM token before opting in. Unsubscribe in League tools or disable notifications in device settings. Server unsubscribe requests are retried after connectivity returns; Android immediately stops displaying updates for locally disabled subscriptions.

Collaboration, profiles and backups

Private invitations use secret capability tokens stored in Keychain on iOS or Android Keystore-encrypted records on Android, and hashed on the server. Do not forward administrative invitations. Organizers can revoke permissions; player attendance invitations are limited to the invited week. Registration requests and announcements are stored on the server for organizers to manage.

Shared data may include names, shirt numbers, attendance, goals, assists, cards and MVP awards. Public profiles are separately enabled by the organizer. Obtain players' permission before sharing their data or posters.

Manual backups are password-encrypted and may contain administrative credentials. Do not share a backup together with its password. Browser follow lists store league IDs/names in that browser, without creating an account.

5. Retention and deletion

On-device data remains until you delete a league, delete the app or manage its backups. Server copies may remain available so shared links continue working. Email [email protected] with the viewer link to request deletion of a server copy; do not send an admin token or other sensitive information.

Shared pages and hosting

TinyWorld websites and APIs are hosted on Cloudflare. Infrastructure may process IP addresses, browser information and request logs for delivery, security and diagnostics. Shared pages save a light/dark preference in browser storage when available. Copies saved, captured or forwarded by recipients are not automatically removed when a server copy is deleted.

Online features depend on the app version and service configuration. Only viewer links should be shared publicly; editing invitations must remain private. Fund records and custom voice alerts are excluded from the public viewer.

Weekly championship photos

Selected photos are resized and re-encoded as JPEG with EXIF/location metadata removed before saving. Photos are stored per week, so starting a new week does not overwrite earlier pictures. Local photos may be included in encrypted backups.

Only when an organizer taps Publish photo to shared link is the image sent to TinyWorld and visible to anyone with the league link. Obtain consent from people appearing in the photo. Replacing an image replaces the server copy; email [email protected] with the league link to request server-photo deletion.

6. Advertising, analytics and tracking

Ad-enabled iOS and Android builds use Google AdMob and UMP privacy choices where applicable. The app checks permission to request ads before initializing AdMob; banners appear on Home. Google may process IP/approximate location, device or app identifiers, ad interactions, performance and crash data to deliver, measure and protect advertising services. Revisit privacy choices in Settings when available. League and fund contents are excluded from advertising requests. Android does not integrate Firebase Analytics or Crashlytics. See https://policies.google.com/privacy.

7. Support

If you email support, TinyWorld receives your email address and the content you choose to provide in order to respond. Do not send passwords, administrative tokens or sensitive information. You may request deletion of support correspondence through the same address.

8. Policy changes

If data handling changes, TinyWorld will update this page and its effective date. Material changes will be communicated in the app or on the website when appropriate.

9. Contact and Apple services

[email protected]

Apple’s privacy policy