Cardem™ is a real-time fan engagement platform for football. We are
privacy-first by design: you do not need an account, you do not give us
your name, and we do not run third-party advertising. This policy explains
the small amount of data we do process and why.
1. What we collect
Anonymous session ID (UUID) — to enforce vote rate-limits (1 yellow + 1 red per match, every 1 minute).
Match votes (yellow / red, match ID, timestamp, match minute, match period) — to compute live fan verdicts.
Onboarding flag and competition filter preference — on your device only.
Device timezone / locale — to display match kickoff times correctly.
Feedback you choose to send — if you use the in-app “Report an issue” form, we receive the details you type and, only if you add it, an optional email address so we can reply. Leaving the email blank keeps your report anonymous.
We do not collect: your name, phone number, GPS location, contacts,
photos, microphone audio, advertising ID, or any biometric information.
We never ask for your email — the only email we hold is one you optionally
provide in a feedback report.
2. Third-party data sources
Match fixtures, scores, and (when our data plan is upgraded) referee
bookings come from our football data provider. We send their service the
match IDs we want to retrieve — never your session ID, votes, or any other
user data.
3. How we use your data
Prevent vote spam within the 1-minute cooldown.
Compute and display real-time fan verdicts (e.g. “67% Yellow”).
Compile anonymous, aggregate statistics about match sentiment.
4. How long we keep data
Votes — up to 24 months for historical fan-sentiment research, then permanently deleted.
Session ID — until you uninstall the app or clear app data.
5. Sharing & disclosure
We do not sell or rent any data. We may disclose anonymous aggregate
figures in marketing, press, and social posts.
6. Your rights (GDPR / UK GDPR / CCPA)
You can ask us at any time to delete every vote tied to your session ID,
export them, or restrict further processing. Email
privacy@cardem.football with
the session ID printed inside the app's Settings → About screen.
7. Children
Cardem is rated for ages 4+ but is targeted at football fans of all ages.
We do not knowingly collect data from children under 13 (US) or under 16
(EU/UK).
8. Security
All traffic is encrypted using TLS 1.2+.
Database access is restricted to our backend service and audited.
We follow OWASP MASVS guidance for mobile app security.
9. Changes to this policy
We will notify users of material changes via an in-app banner on the next
app launch. The latest version is always available at this page.