1. Introduction
OpenLab ("we," "us," "our," or the "Developer") operates the mobile application True Calendar – World Football 2026 (the "App"), an unofficial fan companion that displays match schedules, scores, group standings, brackets, and tournament information for the 2026 international football tournament.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have. By downloading, installing, accessing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not use the App.
2. Important Disclaimer - Not Affiliated with FIFA
All names, logos, marks, trophies, emblems, and identifiers related to "FIFA," "World Football," "FIFA World Football," official team kits, and tournament branding are the property of FIFA and their respective rights holders. We use only generic football vocabulary, country flag emojis (Unicode), and licensed third-party sports data - no FIFA trademarks or copyrighted imagery are reproduced inside the App.
Any reference to the name of the 2026 international football tournament is used solely in its descriptive, nominative sense to identify the publicly available match information displayed, and is not intended to suggest any sponsorship, endorsement, or affiliation. If you are a rights holder and believe content within the App infringes your rights, contact us at support@truecalendar.app and we will respond promptly.
3. Information We Collect
We have deliberately designed the App to minimize data collection. You do not need to create an account or provide personal contact details to use the App.
3.1 Information You Provide Voluntarily
| Category | Examples | Storage |
|---|---|---|
| Preferences | Language (EN, VI, JA, ES, etc.), country/region, time zone, appearance (Light/Dark) | Local device + iCloud Key-Value Store |
| Favorite teams | Up to 5 national teams you pin (e.g., 🇧🇷 Brazil, 🇯🇵 Japan) | Local device + iCloud |
| Notification preferences | Granular toggles for kickoff, 15-min reminder, goals, line-ups, half-time, full-time | Local device |
| Calendar/Wallet integration | When you opt-in to "Add to Calendar" or "Add to Apple Wallet" | Apple EventKit / PassKit only |
3.2 Information Collected Automatically
| Category | Examples | Purpose |
|---|---|---|
| Device & technical | Device model, iOS version, screen size, language settings, time zone | Compatibility, layout |
| Diagnostic | Crash logs, performance metrics, error traces | Stability, debugging |
| Usage analytics | Events such as app_open, team_added, match_view, push_received, push_opened, iap_view, iap_purchase; screens viewed | Product improvement |
| Advertising identifiers | IDFA - only with your explicit consent via Apple's App Tracking Transparency (ATT) prompt | Personalized ads |
| Push token | Apple Push Notification service (APNs) token | Delivering match alerts |
| Purchase data | Apple-issued transaction receipt for the "Remove Ads" in-app purchase | Validating entitlement |
3.3 Information We Do NOT Collect
- Your full name, email address, phone number, or postal address
- Precise GPS location (we use your time zone, not coordinates)
- Photos, contacts, microphone, camera, or health data
- Social media accounts or login credentials
- Payment card details (handled entirely by Apple)
- Data from children under 13 (or 16 in the EEA/UK)
4. How We Use Your Information
We use the information we collect to:
- Provide core functionality - display fixtures in your local time zone, pin favorite teams, deliver match alerts you opted into, sync favorites via iCloud.
- Process in-app purchases - validate your "Remove Ads" entitlement through Apple StoreKit and RevenueCat.
- Display advertising - serve ads in the free version (Google AdMob), measured in a privacy-preserving way unless you consent to tracking.
- Analyze app performance - identify crashes, improve responsiveness, fix bugs (Firebase Crashlytics).
- Understand product usage - anonymous and pseudonymous analytics (Firebase Analytics, Amplitude) to decide which features to build next.
- Comply with legal obligations - tax records for purchases, responding to lawful requests.
5. Legal Bases for Processing
Applies to: GDPR · UK GDPR · Swiss FADP · Brazil LGPD · Vietnam PDPD. If you are located in the European Economic Area, the United Kingdom, Switzerland, Brazil, or Vietnam, the legal bases we rely on are:
- Consent (Art. 6(1)(a) GDPR · Art. 7, I LGPD · Articles 11–12 of Vietnam's PDPL No. 91/2025/QH15 and Decree 356/2025/ND-CP) - for IDFA-based tracking (ATT prompt), push notifications, calendar/wallet access, non-essential SDKs, and analytics/crash diagnostics for users in Vietnam.
- Performance of a contract (Art. 6(1)(b) GDPR · Art. 7, V LGPD · Art. 17(2) Decree 13/2023/ND-CP) - to provide the App features you requested (fixtures, scores, favorite team sync, IAP).
- Legitimate interests (Art. 6(1)(f) GDPR · Art. 7, IX LGPD) - analytics, crash diagnostics, fraud prevention, security, and aggregate ad measurement (balanced against your rights).
- Legal obligation (Art. 6(1)(c) GDPR · Art. 7, II LGPD · Art. 17 Decree 13/2023/ND-CP) - tax, accounting, and response to lawful requests.
You may withdraw any consent at any time from your iOS Settings or in the App's Settings without affecting the lawfulness of prior processing.
6. Third-Party Services (Processors and Partners)
We use carefully selected third-party services. Each has their own privacy policy that we encourage you to review.
| Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Google AdMob | Advertising (free tier) | IDFA (only with ATT consent), IP, ad interactions, device info | policies.google.com |
| Firebase Analytics | Usage analytics | Pseudonymous Firebase Instance ID, events, device model | firebase.google.com |
| Firebase Crashlytics | Crash reporting | Stack traces, device state at crash, anonymous installation UUID | firebase.google.com |
| Amplitude | Product analytics | Pseudonymous device ID, event properties | amplitude.com |
| RevenueCat | IAP entitlement management | Anonymous app user ID, purchase status | revenuecat.com |
| Apple Inc. | StoreKit, APNs, ActivityKit, EventKit, PassKit, iCloud | Per Apple's Privacy Policy; we do not see your Apple ID | apple.com |
| Sports data providers | Match fixtures, scores, statistics | No personal data sent; we only fetch public match information | Provider's website |
7. Advertising and App Tracking Transparency (ATT)
The App is free and supported by advertising delivered by Google AdMob.
- On your first launch (and any time you reset iOS tracking settings), iOS will prompt you with a system dialog to Allow Tracking or Ask App Not to Track.
- If you choose "Ask App Not to Track": the App and AdMob will operate exclusively under Apple SKAdNetwork (SKAN), which provides aggregate, privacy-preserving attribution without using your IDFA. Ads will still appear, but they will be contextual rather than personalized.
- If you choose "Allow Tracking": AdMob may use your IDFA to serve personalized ads and measure ad performance across apps.
- You can change your choice at any time in Settings → Privacy & Security → Tracking on iOS.
- You can remove ads entirely with a one-time in-app purchase of USD $2.99 (regional pricing applies in select territories).
8. Push Notifications
If you grant permission, we send push notifications via Apple Push Notification service (APNs) for events you opted into (kickoff alerts, 15-min reminders, goals, line-ups, half-time, full-time). You can adjust granular preferences in the App's Settings or revoke permission entirely in iOS Settings → Notifications → True Calendar.
For live matches, the App uses Apple ActivityKit to display Live Activities on the Lock Screen and Dynamic Island. These run only when a match is live or about to start.
9. Children's Privacy
The App is not directed to children under 13 (or 16 in the EEA/UK, or the equivalent age of digital consent in your jurisdiction). We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided data to us, please contact us using the details in Section 15 and we will delete the information promptly. Parents and guardians can use Apple Family Sharing and Screen Time to manage and restrict their child's use of the App.
10. International Data Transfers
Because the App is offered globally, your data may be transferred to and processed in countries other than your country of residence, including the United States (where Google, Amplitude, RevenueCat, and Apple operate). Some of these countries may have data-protection laws different from those in your country.
Where personal data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- UK International Data Transfer Addendum;
- Provider participation in approved certification frameworks (where applicable).
For users in Vietnam, where personal data is transferred abroad we maintain a cross-border data transfer impact assessment dossier and complete the notification to the Ministry of Public Security as required under the PDPL (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP. You may request a copy of the relevant safeguards by contacting us.
11. Data Retention
| Data | Retention period |
|---|---|
| Analytics events (Firebase Analytics, Amplitude) | Up to 14 months (Firebase default), then automatically deleted or aggregated |
| Crash logs (Crashlytics) | Up to 90 days |
| Purchase receipts | As required by tax/accounting law (typically 7 years) |
| Local preferences and favorites | Stored on your device + iCloud until you delete them, uninstall, or sign out |
| Push tokens | Until you revoke notification permission or uninstall the App |
When data is no longer needed, it is deleted or fully anonymized.
12. Your Rights
Depending on your jurisdiction, you may have some or all of the following rights:
- Right to access - request a copy of personal data we hold about you.
- Right to rectification - correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") - request deletion of your data.
- Right to restriction - limit how we process your data.
- Right to data portability - receive your data in a structured, commonly used, machine-readable format.
- Right to object - object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent - at any time, for consent-based processing.
- Right to lodge a complaint - with your local data protection authority.
- Right not to be discriminated against - for exercising privacy rights (CCPA/CPRA).
- Right to opt-out of sale or sharing - we do not sell, but California residents may still submit a Do Not Sell or Share request.
- Right to limit use of Sensitive Personal Information (California).
13. Security
We apply industry-standard safeguards including TLS 1.2+ encryption in transit, encrypted storage at rest where applicable, need-to-know access restrictions, regular security reviews, and Apple platform security (Keychain, sandboxing, App Transport Security).
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do:
- The "Last Updated" date at the top of this document will change.
- For material changes, we will display an in-app notice and may require you to acknowledge the new Policy.
- Continued use of the App after changes constitutes acceptance of the updated Policy.
Previous versions are available upon request.
15. Contact Us
For privacy questions, requests, or complaints: