Privacy Policy for H-I-M Basketball App

Version 1.0
Last updated: April 11, 2026

This Privacy Policy describes how H-I-M Basketball App ("H-I-M", "the App", "we", "us", or "our") collects, uses, discloses, stores, and protects your personal information when you use our mobile application. H-I-M is a basketball community platform that connects players, teams, coaches, agents, and sports professionals.

By creating an account or using the App, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the App.

Data Protection Officer: Yaniv Yeruham
Contact: himbasketballapp@gmail.com

1. Definitions

• Personal Data — Any information that relates to an identified or identifiable individual, including name, email, date of birth, photographs, and any other information you provide.
• Minor — Any user under the age of 18.
• User or You — Any person who accesses or uses the App. Users may register as a Player, Team, Coach, Agent, or Professional.
• Account — A unique account created for you to access the App and its features.
• Application or App — H-I-M, the mobile application available on iOS and Android.
• Company (referred to as "the Company", "we", "us", or "our") — H-I-M Basketball App, Hatapuz 41, Tel Mond, Israel.
• Country — Israel.
• Device — Any mobile phone, tablet, or computer used to access the App.
• Service — The Application and all features, content, and functionality provided within it.
• Service Provider — Any third-party company or individual that processes data on our behalf to facilitate the Service.
• Usage Data — Data collected automatically during your use of the App, including device information, access logs, and diagnostic data.

2. Age Requirements and Parental Consent

2.1 Minimum Age: The App is intended for users aged 10 and older. Users under the age of 10 are strictly prohibited from creating an account. If we discover that a user is under 10, we will immediately terminate the account and delete all associated data.

2.2 Minor Users (Ages 10-17): Users between the ages of 10 and 17 are considered "Minor Users." The legal basis for processing Minor User data is parental consent. Minors cannot provide binding consent on their own behalf. During registration, the following information is collected from the parent or guardian:

• Parent or guardian full name
• Parent or guardian email address
• Relationship to the minor (Mother, Father, or Legal Guardian)
• Explicit consent acknowledgment via checkbox
• Timestamp of when consent was provided

2.3 Parental Consent Verification: Parental consent is collected through a declaration form during registration. We may require additional documentation to verify the parental relationship if we have reason to believe consent is invalid or fraudulent.

2.4 Minor Account Identification: Minor accounts are flagged internally with an "isMinor" marker so that we can identify and appropriately manage accounts belonging to users under 18.

2.5 Existing Users: All users who registered before the age verification feature was introduced are required to complete age verification upon their next login.

2.6 Interactions Between Minors and Adults: Minor Users may interact with adult users through public profiles, chat and messaging, posts and comments, and the follow system. Parents and guardians should be aware of these interactions and are encouraged to actively monitor their child's use of the App.

2.7 Parental and Guardian Rights: Parents and legal guardians of Minor Users have the right to:

• Request access to all Personal Data collected about their child
• Request correction of inaccurate data about their child
• Request deletion of their child's account and all associated data
• Withdraw parental consent at any time, which will result in account termination
• Receive information about what data is collected and how it is used

To exercise these rights, contact himbasketballapp@gmail.com with proof of your relationship to the minor. We will process your request within 30 days.

3. Legal Basis for Data Processing

We process your Personal Data based on the following legal grounds:

• Consent: Registration and account creation, parental consent for minors, push notification delivery.
• Contractual Necessity: Providing the App's core features (profiles, chat, feed, search), account management and authentication.
• Legitimate Interest: App stability monitoring and crash reporting, safety and moderation, preventing fraud and unauthorized access.
• Legal Obligation: Responding to lawful requests from authorities, retaining records as required by applicable law.

4. Data We Collect

4.1 Data You Provide During Registration

The data we collect depends on the role you select:

Player accounts: Full name, date of birth, age, height, dominant hand, playing position, current league/team, league region, player status, team history, agency name, bio/description, basketball statistics, profile photograph, gender league preference.

Team accounts: Team name, league, arena city/location, head coach name, team logo image, team roster, gender league preference.

Coach accounts: Full name, coaching status and role, current league/team, coaching history, profile photograph, "Open to Offers" preference, gender league preference.

Agent accounts: Agency name, agency description, profile photograph, gender league preference.

Professional accounts (sports photographers, videographers, scouts, doctors, trainers, etc.): Full name or company name, profession/category, description of services, profile photograph, gender league preference.

All account types: Email address (via Google or Apple Sign-In), Terms & Conditions acceptance timestamp, age verification status and timestamp, parental consent data (for minors).

4.2 Data Generated Through App Usage

• Posts (text, photos, videos, thumbnails)
• Comments on posts
• Chat messages (text content and timestamps, private between two participants)
• Likes, bookmarks, and votes (including Best Play competitions)
• Follow relationships (names, roles, profile images)
• Profile views (viewer name, role, image, timestamp — visible to profile owner)
• Professional ad interactions (likes, views, service requests with user info)
• Daily routines (media uploads with activity type and expiration)
• Profile boost activity (timestamps, duration; may auto-create a post)
• Best Play submissions (videos with name, image, role, league)
• Reports filed against users or content
• Blocked users list
• Service requests to Professionals (your name, image, role shared)

4.3 Data Collected Automatically

Even before account creation, the following may be collected:

• Device type, model, and operating system
• Device platform (Android/iOS)
• Push notification token (unique device identifier for notifications)
• IP address (collected by Firebase infrastructure)
• Crash reports and error logs (via Firebase Crashlytics)
• App version and build number
• App configuration data (via Firebase Remote Config)

4.4 Data Stored Locally on Your Device

Stored via SharedPreferences (deleted when you uninstall):

• Gender league preference
• Terms version accepted
• Feed filter preferences
• Viewed daily routines history
• Opportunities you have applied to

4.5 Permissions We Request

• Camera — for profile photos and video recording
• Photo Library — to select existing photos/videos
• Microphone — for audio in video recordings only (never activated without your action)
• Notifications — for push notifications
• Internet — required for all functionality
• Vibration — for notification feedback

We do NOT access your contacts, calendar, location, biometric data, or any other device sensors.

5. How We Use Your Data

• Account management: Create, maintain, and manage your account and authenticate your identity.
• Profile display: Display your profile to other authenticated users.
• Communication: Enable in-app chat and messaging between users.
• Push notifications: Deliver notifications about messages, follows, service requests, and other activity. Previews may show sender name and message on your lock screen.
• Content delivery: Display posts, comments, routines, and Best Play competitions filtered by gender and league.
• Community features: Enable follows, profile views, likes, comments, bookmarks, voting, and profile boosting.
• Professional services: Operate Professional advertisements (likes, views, service requests).
• League standings: Display basketball standings from publicly available data (ibasketball.co.il). No personal data collected from this source.
• Profile boost: Enable boosting features; an automatic post may be created on your behalf.
• Safety and moderation: Process reports and enforce community guidelines.
• Age verification: Verify user ages and collect parental consent for minors.
• App stability: Monitor performance and fix crashes via Firebase Crashlytics.
• Legal compliance: Enforce Terms & Conditions and comply with applicable laws.

6. Third-Party Services

We use the following services, all with appropriate data protection agreements:

6.1 Firebase (by Google)

• Authentication — sign-in via Google and Apple
• Cloud Firestore — stores all app data
• Firebase Storage — stores uploaded media (20MB image / 500MB video limits)
• Cloud Messaging — delivers push notifications
• Crashlytics — crash reports (mobile only, disabled in debug builds)
• Remote Config — app configuration management
• App Check — API abuse protection

Google Privacy Policy: https://policies.google.com/privacy
Firebase Data Processing Terms: https://firebase.google.com/terms/data-processing-terms

6.2 Google Sign-In

We receive your email and display name. Google Privacy Policy.

6.3 Apple Sign-In

We receive your email (or relay email if you use Hide My Email). Apple Privacy Policy.

6.4 External Data Sources

We retrieve publicly available league standings from ibasketball.co.il. No personal user data is collected from this source.

We do not use any advertising SDKs, behavioral analytics, or tracking services.

7. Data Sharing and Disclosure

7.1 With Other Users

• Your profile information is visible to all authenticated users
• Posts, comments, and daily routines are visible to other users
• Chat messages are private (only the two participants)
• If you view a profile, your name/role/image may appear in their views list
• Professional ad interactions are visible to the ad owner

7.2 With Service Providers

We share data with Firebase/Google as described in Section 6. We do NOT sell, rent, or trade your data to any third party.

7.3 For Legal Reasons

• When required by law, court order, or government request
• To protect our rights, safety, or property
• To prevent or investigate wrongdoing
• To protect the personal safety of users or the public

7.4 Business Transfers

If the Company is involved in a merger or acquisition, your data may be transferred with prior notice.

8. Data Retention

While Active: Data retained as long as your account is active.

Specific Retention Periods:

• Profile data — deleted within 30 days of account deletion
• Posts, media, chat messages, notifications — deleted immediately upon account deletion
• Push notification tokens — deleted immediately
• Follower relationships — deleted and removed from connected users
• Daily routines — expire after 24h visibility; media deleted on account deletion
• Crash reports — retained up to 90 days by Firebase Crashlytics
• Server logs (IP addresses) — retained up to 90 days in encrypted logs
• Parental consent records — retained for account duration + 24 months

Account Deletion (Settings > Delete Account): We permanently delete your profile, posts, media, comments, chats, messages, notifications, tokens, followers, profile views, routines, blocked list, reports, Professional ad data, boost history, Best Play submissions, and stored images.

Note: other users may have saved or screenshot your content. We cannot control deletion from their devices.

Backups: Residual copies may remain in encrypted backups for up to 90 days.

Anonymized Data: Aggregated data that cannot identify you may be retained indefinitely for analytics.

9. Data Security

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (Google standard encryption)
• Firebase App Check (API abuse protection)
• Firestore Security Rules (users can only access authorized data)
• Storage Security Rules (file ownership enforcement)
• File size limits (20MB images, 500MB videos)
• Account deletion requires typing "DELETE" to confirm
• Parental consent includes timestamped audit trail

No method of electronic storage is 100% secure. We use commercially reasonable measures but cannot guarantee absolute security. If you suspect unauthorized access, contact himbasketballapp@gmail.com immediately.

10. Data Breach Notification

In the event of a data breach that poses risk to your rights:

• We will notify affected users within 30 days of discovery
• We will notify the Israeli Privacy Protection Authority where required
• We will notify EU supervisory authorities within 72 hours where required by GDPR
• We will provide details about the breach, data affected, consequences, and measures taken
• All breaches are documented internally

11. Children's Privacy

11.1 Users under 10 are blocked from registration. If discovered, accounts are immediately terminated and all data deleted.

11.2 Users aged 10-17 require parental consent (Section 2). The legal basis for processing minor data is exclusively parental consent.

11.3 Parents may exercise rights in Section 2.7 at any time. Withdrawal of consent results in account termination within 30 days.

11.4 Parents should be aware that minors can interact with adults via profiles, messaging, posts, comments, and follows. We encourage parents to review their child's profile, discuss safe online behavior, monitor chat conversations, and report concerning behavior.

11.5 COPPA Compliance (United States): We require parental consent for all users under 18, exceeding COPPA's under-13 requirements. US parents may contact us to review, delete, or refuse further collection of their child's data.

12. Your Rights

• Access — view your data in your profile or request a full copy
• Rectification — correct data by editing your profile
• Deletion — delete your account via Settings > Delete Account or contact us
• Restriction — request restricted processing in certain circumstances
• Data Portability — request your data in machine-readable format (JSON/CSV) within 30 days
• Object — object to processing based on legitimate interests
• Withdraw Consent — withdraw at any time; takes effect immediately (up to 7 days to purge). For minors, parents may withdraw consent.
• Non-Discrimination — we will not discriminate against you for exercising your rights

Contact himbasketballapp@gmail.com to exercise any right. We respond within 30 days.

13. Your Rights Under Israeli Law

Under the Israeli Protection of Privacy Law (5741-1981), you have the right to:

• Know whether Personal Data about you is held in our databases
• Access your data in an intelligible form
• Know the source of your data
• Know the purpose of collection and use
• Know who receives your data
• Request correction of inaccurate data
• Request deletion if data is no longer necessary

You may lodge a complaint with the Israeli Privacy Protection Authority (Ministry of Justice).

14. GDPR Rights (European Users)

For users subject to the General Data Protection Regulation:

• All rights in Section 12 are guaranteed under GDPR Articles 15-22
• International transfers are protected by Standard Contractual Clauses (Section 16)
• You may lodge a complaint with your local Data Protection Authority
• Processing is based on the legal grounds in Section 3
• You have the right not to be subject to automated decision-making (Section 17)

15. CCPA Rights (California Users)

Under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know what data is collected
• Right to Delete your data
• Right to Correct inaccurate data
• Right to Opt-Out of Sale/Sharing — We do NOT sell or share your data for advertising. There is nothing to opt out of.
• Right to Non-Discrimination

16. International Data Transfers

Your data is processed on Google (Firebase) servers located in the United States, Ireland, and other countries. We ensure transfers are protected by:

• EU-approved Standard Contractual Clauses
• Google's Data Processing Agreements
• SOC 2 and ISO 27001 certified infrastructure
• EU-US Data Privacy Framework where applicable

17. Automated Decision-Making

• Feed ranking — based on recency, gender preference, and league filters. No machine learning or behavioral profiling.
• Profile boost — boosted profiles receive increased visibility equally.
• Content moderation — reports are flagged for manual review. No automated content removal.

You may request manual review of any automated decision by contacting himbasketballapp@gmail.com.

18. Do Not Track / Analytics

• The App does not use cookies or web tracking
• We do not engage in cross-app tracking or behavioral advertising
• We do NOT use Firebase Analytics, Google Analytics, or behavioral analytics SDKs
• We do NOT serve advertisements
• Firebase Crashlytics collects only crash/error data for stability

19. Local Storage

The App stores preferences locally on your device using SharedPreferences:

• Gender league preference
• Terms version accepted
• Feed/league filter preferences
• Viewed routines history
• Applied opportunities records

This data is stored only on your device and deleted when you uninstall. We do not use cookies or web storage.

20. Links to Other Services

The App may contain links to third-party websites or services not operated by us. We have no control over and assume no responsibility for their content, privacy policies, or practices.

21. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will post the updated policy in the App
• We will update the date and version number
• For significant changes, we may require re-acceptance
• We may notify you via push notification

Continued use after changes constitutes acceptance. Previous versions available upon request.

22. Accessibility

We are committed to making our privacy practices accessible to all users. If you need this policy in an alternative format, contact himbasketballapp@gmail.com.

23. Contact Us

Data Protection Officer: Yaniv Yeruham
Email: himbasketballapp@gmail.com

We respond within 30 days.

For complaints:

• Israeli Privacy Protection Authority (Ministry of Justice)
• Your local Data Protection Authority (EU/EEA residents)
• California Attorney General's office (California residents)

By using HIM Basketball App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein.