VolePlay - Volleyball AI

Privacy Policy

Effective date: April 29, 2026

This policy explains how VolePlay handles data with a minimal-data philosophy: only what is needed to run the app experience.

1) Data Controller

VolePlay - Volleyball AI is operated by VPN Cardiff LTD (Developer: Adel Amin). For privacy matters, contact mail@vpn-cardiff.com.

2) Privacy-by-design commitment

VolePlay is built with a minimal-data approach. We do not run a social feed, we do not provide direct user-to-user messaging, and we do not collect high-risk personal categories such as biometric, health, financial account, government ID, or contact book data.

3) Categories of data we may process

Depending on how you use the app, the following categories may be processed:

a) Technical identifiers: installation-level IDs, push token, device/app diagnostics, and approximate technical metadata (for stability and delivery).

b) Usage events: feature interaction events (screen opens, taps, session activity) used for analytics and product improvement.

c) AI request text: text prompts you submit in AI chat and related context needed to generate a response.

d) Profile visuals provided by you: avatar image or profile preferences if you choose to set them.

4) Why we process data (purposes)

We process limited data to:

- provide the app and requested functionality (AI answers, club and league browsing);

- deliver and manage push notifications;

- detect abuse, maintain security, and troubleshoot errors;

- measure performance and improve product quality.

5) Legal bases (where applicable)

If your jurisdiction requires legal bases (such as GDPR regions), processing may rely on:

- contract/necessary performance (to provide app features you request),

- legitimate interests (service reliability, security, analytics with proportional safeguards),

- consent where required (for example, push or tracking permissions).

6) Third-party services and limited sharing

We use the following service providers to operate core features:

- OpenAI GPT mini with search to generate AI chat responses. Only text required for response generation is transmitted.

- OneSignal for push notification delivery.

- Singular for attribution and performance measurement.

We do not sell personal data and do not share data for unrelated advertising brokerage.

7) AI-specific disclosure

AI responses are generated by third-party infrastructure and may be imperfect. Please avoid entering highly sensitive personal data in chat prompts. The app is informational and does not replace professional advice.

8) Tracking, analytics, and permission controls

Where applicable, tracking identifiers (including IDFA) are used only after required platform permission. On Apple devices, this is subject to App Tracking Transparency rules. You can deny or revoke permissions in device settings at any time.

9) Retention periods

We keep data only as long as needed for the purposes described:

- technical and diagnostics data: typically short-term operational windows;

- analytics/attribution events: retained for reporting and anti-fraud windows;

- support or legal records: retained as required by law or dispute resolution needs.

Exact retention can vary by provider and legal obligations.

10) International data transfers

Service providers may process data in countries other than your own. When required, we rely on appropriate safeguards and vendor commitments for international transfers.

11) Children’s privacy

VolePlay is not directed to children under 13 (or a higher age threshold required by local law). If you believe a child provided personal data, contact us and we will take reasonable deletion steps.

12) Your rights and requests

Depending on your location, you may have rights to access, correct, delete, restrict, object, or receive a copy of relevant personal data, and to withdraw consent where processing is consent-based.

To submit a request, email mail@vpn-cardiff.com. We may verify request authenticity before acting.

13) Security practices

We apply reasonable technical and organizational measures designed to protect data against unauthorized access, alteration, disclosure, or destruction. No method of storage or transmission is absolutely secure, but we continuously improve safeguards.

14) Do Not Sell / Share statement

We do not sell personal data. We also do not share personal data for cross-context behavioral advertising in a way intended as a standalone data business model.

15) Changes to this policy

We may update this Privacy Policy when features, legal requirements, or provider relationships change. The "Effective date" above reflects the latest version.