Privacy Policy

1. Who this policy covers

This Privacy Policy explains how KROO ("KROO", "we", "us") collects, uses, shares, and protects information when you use the KROO mobile app or the playkroo.com website (together, the "Service"). By using the Service, you agree to the collection and use of information as described here.

2. Information we collect

2.1 Account & sign-in

To create an account you provide a phone number or email address, and you may sign in using your Google or Apple account. When you use Google or Apple sign-in, we receive the account identifier and basic profile details (name, email) that Google or Apple share with us — we never see your Google or Apple password.

2.2 Profile information

Your name, an optional date of birth, and an optional avatar photo that you choose to upload.

2.3 Location

KROO uses your device's precise location to find nearby pitches and events, and to record your route while you are actively tracking a run or ride with the app open. Location is collected only while you are using the app; KROO does not access your location in the background.

2.4 Photos

Photos you choose to upload — for your profile avatar, or to document a pitch.

2.5 Push notification tokens

A device token used to deliver push notifications (event reminders, rating requests, chat messages). You can disable notifications in your device settings at any time.

2.6 In-app activity

Events you create or join, RSVPs, match results and stats, the ratings you give and receive, group and team membership, chat messages within the app, and the XP, level, and streak progress this activity generates.

2.7 Diagnostics

Crash reports, performance data, and general usage diagnostics collected via Azure Application Insights, so we can find and fix bugs.

3. What we don't collect

• Payment and card data. KROO is currently free and processes no payments. We do not collect, receive, or store card numbers, bank details, or billing addresses. Payment features are switched off, and while a payment provider's software library is still bundled in the app, it is inactive and no payment or card information is sent to it or to us. If we introduce paid features later, we will update this policy first and tell you what changes before any of it applies to you.
• Background location. We only read your location while the app is open and you are using a feature that needs it. We never track your location in the background.
• Contacts, microphone, calendar, and health data. The app does not request or collect any of these.
• Advertising identifiers. We run no ads and use no ad-tracking SDKs.

4. How we use your information

• To operate the Service: create your account, run events, build and balance squads, and calculate ratings and stats.
• To communicate with you: event reminders, rating requests, and service updates.
• To keep the Service safe and working: abuse prevention, debugging, and diagnostics.
• To improve the Service based on how it's actually used.
• To comply with legal obligations, and to establish or defend legal claims where necessary.

We do not use your data to serve third-party ads, we do not profile you for advertising, and we do not sell your personal data to anyone.

5. Peer ratings are blind

After a match, players rate their teammates' performance. These ratings are blind by design: the identity of the rater is write-only at the database level and is never exposed to anyone through the app or through any KROO-controlled interface — not even to KROO staff through normal product tooling. Only the resulting aggregate rating (a Bayesian average of the scores you've received) is shown on your player card.

6. Who we share data with

We share information only as needed to run the Service:

We may also disclose information where we're legally required to — for example in response to a valid legal request — or where we reasonably believe it's necessary to protect someone's safety, or to establish, exercise, or defend a legal claim. If KROO is ever involved in a merger, acquisition, or sale of assets, account data may transfer as part of that; we'd tell you first.

We do not work with advertising networks, and we do not sell or rent your personal data to data brokers or any other third party.

7. What other players can see

KROO is a social app, so some of your information is visible to other users by design: your name and avatar, your city, your age, your aggregate rating, level, and attributes, your group and team memberships, your attendance and RSVPs, and the match results and statistics from games you played in. Messages you send in a group chat are visible to that group.

Your phone number, email address, and full date of birth are never shown to other players — only your age in years is derived from it. Who rated you, and the individual scores they gave, are never shown to anyone, as described in the section above.

8. Data retention

We keep your account data for as long as your account exists. If you delete your account (see the next section), we delete or anonymize your personal identifiers and profile information. Anonymized match history and aggregate statistics that no longer identify you may be retained, since they describe the outcome of a shared event involving other players, not you individually.

Diagnostic and crash data is kept for a limited period for debugging. Backups are rotated on a regular cycle, so deleted data can persist in backup copies for a short time before being overwritten. We may keep information for longer where we're required to by law or where it's needed to establish or defend a legal claim.

9. Your rights & account deletion

You can delete your account and data directly from Settings → Account → Delete Account inside the app. Deleting your account removes your sign-in identifiers, profile details, and personally identifying information from our systems. Match history and stats that are shared with other players (such as a completed event's score) are anonymized rather than deleted outright, so we don't erase other players' shared records of a game that happened.

Depending on where you live, you may also have the right to access a copy of your data, correct it, object to or restrict how we use it, withdraw consent, ask for it in a portable format, or complain to your local data-protection authority. To exercise any of these, email us at the address below — we'll respond within the time your law requires, and within 30 days where no specific period applies. We may need to verify your identity first.

10. Children

KROO is not directed at children under 13, and you must be at least 13 to hold an account. We ask for a date of birth as part of your profile. We do not knowingly collect personal information from children under 13; if we learn we have, we delete it. If you believe a child has provided us with personal information without appropriate consent, contact us and we will remove it promptly.

11. Security

We use industry-standard measures — encryption in transit, access controls, and reputable infrastructure providers (Azure, Firebase) — to protect your data. No system is perfectly secure, and we can't guarantee absolute security. Keep your device and your sign-in method secure, and tell us straight away if you think someone else has access to your account.

12. International data transfers

KROO's infrastructure is hosted with providers that may process data in Israel and the European Union. Where data is transferred internationally, we rely on our providers' standard safeguards for cross-border data transfer, such as the European Commission's standard contractual clauses and adequacy decisions where they apply.

13. Changes to this policy

We may update this policy as the Service changes. We'll update the effective date above and, for material changes, let you know in the app before they take effect. If you don't agree with a change, you can delete your account.

14. Governing law

This policy is governed by the laws of the State of Israel, without regard to conflict-of-laws principles. Nothing here removes any right you have under mandatory data-protection law in your own country.

15. Contact us

Questions about this policy or your data? Email [email protected]. This policy is also published in Hebrew at playkroo.com/he/privacy; the translation is provided for convenience and this English version governs where they conflict, except where mandatory law provides otherwise.