Privacy Policy
Hooligan is made by MintyGum LLC ("we", "us"). This policy explains what the Hooligan app and the hooligan.football website handle, and what they do not.
No sign-up, no name
Hooligan does not ask who you are. The first time you open it, the app creates an anonymous account so your choices can be kept: an identifier and a session key, stored in your phone's keychain. There is no name, email address, phone number or password attached to it.
Signing in with Apple or Google
If you want to, you can sign in with Apple or with Google — in Profile → Account, or on the first page of the app — to reach your account, with what you follow and your choices, from another phone or after reinstalling the app. Nothing in the app requires it. Apple or Google then tells us an identifier for your account with them and its email address — with Apple, this can be a private relay address Apple makes for you. We keep both with your account and use them only to sign you in: we do not write to you, and we never receive your password. We do not ask for your name. Signing out leaves everything in your account for the next time; deleting your data removes the account and the sign-in with it.
What is kept with that account
- What you follow — the clubs, players and competitions you chose, in your order.
- Your club, if you said which one is yours.
- Your notification choices — which kinds of moments you want for each club, and the bells you put on individual matches. A match's bell is deleted three days after it kicks off.
- What you have already scrolled past in your feed, so it is not shown to you again as new. Kept for 21 days.
- What you open in your feed — a story, a picture or clip, a post's link — and, learned from it together with what you scroll past, how much each club, player, competition, country and kind of card tends to interest you. Your feed uses this to order itself a little more to your taste, slowly and within limits. It is not sent to anyone else. What you opened is kept for 180 days; the interests fade by half every month.
- Your language and time zone, so kick-off times and translations are right. With each feed request the app also sends your phone's region setting, so your country's league and national side count as yours; it is not stored.
- That the app is open. When it comes to the front, and every two minutes while it stays there, the app tells our servers so. With it we keep the country your connection comes from (as Cloudflare reads it from the network address, never anything finer), the app's language and version, and the days you opened it. This is how we count how many people use Hooligan, and in which countries.
- For notifications, the push token Apple gives your phone, the app and iOS version, and the phone's language and time zone. A record of each notification sent is kept for 30 days so the same one is never sent twice.
This data is stored for us by Supabase in the European Union (Frankfurt).
What Hooligan does not collect
- No precise location. Kick-off times use your time zone; weather at a ground uses the ground's city. The country your connection comes from is as close as we get.
- No contacts, photos, microphone or camera.
- No advertising identifier and no tracking across other companies' apps or websites, unless you allow it when your phone asks whether Hooligan may track you — and then only for the two uses described below: measuring our own ads, and the ads in the app.
- No sale of personal data, to anyone, ever.
How the app is used
To learn which parts of Hooligan work and which do not, the app tells PostHog, an analytics service with servers in the European Union, what happens in it: the screens opened, the steps of the first-run tour, when the Hooligan+ page is shown and whether a purchase is started or completed, and features used (following a club, a summary, a translation, a prediction). With these go your anonymous account identifier, the app's language and version, and the phone's model and system version; PostHog also reads an approximate country from the connection. PostHog receives no name, no contacts and no advertising identifier, and nothing it holds is sold or used for advertising.
Measuring our advertising
We advertise Hooligan on Facebook and Instagram. To learn which of those ads bring people to the app, the app uses Meta's software kit to tell Meta three things: that the app was opened, that the first-run tour was finished, and that Hooligan+ was bought, with its price and currency. With these go the app's version, the phone's model, system version, language and time zone, and an anonymous identifier the kit creates. Only if you allow it when your phone asks whether Hooligan may track you does Meta also receive your phone's advertising identifier; if you do not, Meta measures our ads in aggregate, without it. You can change your answer at any time in Settings › Privacy & Security › Tracking. Meta also processes this data under its own privacy policy. Nothing about what you read or follow in Hooligan is sent to Meta.
Ads in the app
Hooligan shows ads to readers who are not Hooligan+ members, starting after their first 24 hours with the app: an ad among the cards of the feed, marked "Ad", and a banner between the competitions in Fixtures. Hooligan+ members see none. The ads are served by Google AdMob. To choose, show and measure them, Google's software kit in the app receives the app's version, the phone's model, system version and language, your network address (from which Google reads an approximate location), and how you interact with the ads. Only if you allow it when your phone asks whether Hooligan may track you does Google also receive your phone's advertising identifier; you can change that answer at any time in Settings › Privacy & Security › Tracking.
In the European Economic Area, the United Kingdom and Switzerland, a message from Google asks first whether your data may be used for personalised ads, and ads are shown according to your answer. You can change it at any time in the app: Profile → Privacy → Ad choices. Google processes this data under its own privacy policy; how Google uses data from apps that use its services is explained here. We do not send Google anything about what you read or follow in Hooligan.
Stories, translations and summaries
Hooligan's stories are written on our servers from articles that publishers have made public, and translations and summaries are produced the same way. What is sent to the language models that do this work (OpenAI) is the published article and the language you read in — never your follows, your identifier or anything else about you. Links to a publisher's article open that publisher's own website, which has its own privacy policy.
Purchases
Payments for Hooligan+ are handled by Apple; we never see your payment details. We use RevenueCat to confirm whether your subscription is active. RevenueCat receives the App Store's purchase records and your anonymous account identifier, and nothing else about you.
Who processes data for us
| Provider | What for |
|---|---|
| Supabase (EU) | The database behind your account and choices. |
| Cloudflare | The network the app talks to, and storage for pictures. |
| Fly.io (EU) | The servers that gather scores and news. |
| Apple | Push notifications, in-app purchases, and Sign in with Apple if you use it. |
| RevenueCat | Subscription status. |
| PostHog (EU) | Product analytics: how the app is used, with your anonymous identifier. |
| Meta | Measuring our ads on Facebook and Instagram: app opened, tour finished, Hooligan+ bought; your advertising identifier only if you allow tracking. |
| Google (Sign-In) | Signing in with Google, if you choose to. |
| Google (AdMob) | The ads in the app for readers without Hooligan+: choosing, showing and measuring them; your advertising identifier only if you allow tracking. |
| OpenAI | Writing, translating and summarising published articles — no personal data. |
Each processes data only to provide its part of the service to us. Football data comes from API-Football; no personal data is sent to it.
This website
hooligan.football sets no cookies and loads no analytics or tracking scripts. Like any website, the servers that deliver it (Cloudflare) see your network address in order to answer your browser. Our server counts page visits and taps on the App Store button by day, page, country and the site that sent you there. To count a visitor once a day, it keeps a one-way code made from your network address, your browser and a random value that is discarded at the end of the day, so the code cannot be traced back to you afterwards; your address itself is never stored.
Deleting your data
You can delete everything stored with your account at any time, in the app: Profile → Delete my data. It removes your account, your follows, your notification choices, your devices and the record of when you used the app from our servers immediately. A subscription is billed by Apple and is cancelled in your App Store settings, not by deleting your data.
Depending on where you live, you may have the right to access, correct, move or delete your personal data, and to object to its processing. Write to us and we will help; deleting your data in the app is the fastest way.
Children
Hooligan is not directed at children under 13 and we do not knowingly collect their personal data.
Changes
If this policy changes in a way that matters, we will say so in the app or on this page before the change takes effect.
Contact
MintyGum LLC
8 The Green, Ste B, Dover, Delaware 19901, United States
support@hooligan.football