Privacy policy

About this policy

This policy explains how Kora 212, a football and fantasy service operated from Morocco, handles personal information across its website and mobile applications. It covers account access, fantasy competitions, images, notifications and any community features made available to you.

You can browse public content without an account. Account information is needed to save a team and use account features; profile images and push notifications are optional. This policy does not replace your statutory rights or make consent a condition of using unrelated features.

Information we process

• Account information: email, display name, account identifiers, authentication records and the credentials needed to sign in. If you choose Google sign-in, we receive identifiers and profile information supplied by Google, such as your email, name and profile image; we do not receive your Google password.
• Fantasy activity: team name and logo, squad selections, transfers, captain choices, points, leagues, rankings and saved preferences, including language and favourite club.
• Content you provide: profile photos, selected uploads, support messages and, where enabled, creator applications, posts, comments, reactions and reports.
• Technical and usage information: IP address, browser and device characteristics, app version, visited pages, interactions, timestamps, error and security records, and identifiers stored by the app or its service providers.
• Notifications: permission status, preferences, device registration tokens or browser push subscriptions, delivery status and notification interactions.

Why we use it

We use information to authenticate accounts, save your team, calculate competitions and rankings, deliver requested notifications, display your chosen content, answer support requests and maintain service reliability. We also investigate abuse, protect accounts, enforce fair-play rules and establish, exercise or defend legal claims when necessary and lawful.

Where applicable law requires a legal basis, processing is based on providing the service you request, legal obligations, legitimate security and operational interests where permitted, or consent where required. Optional permissions can be refused or withdrawn without preventing unrelated features from working.

What other people can see

Your display name, profile image, fantasy team identity, points and ranking may appear in competition or community views. Content you deliberately publish or share is visible to its audience. Your sign-in email and password are not intended for public display.

Uploaded profile photos and team logos are served through public image links. Do not upload confidential documents or another person's information without permission. Other people may retain copies of content you make public; removing it from Kora 212 cannot erase copies outside our control.

Service providers and disclosures

We work with service providers to operate the app, host and store information, manage sign-in, measure usage, protect the service and deliver notifications. Depending on the feature you use, these providers may process account details, uploaded content, technical and usage information, or notification identifiers for the relevant service.

Providers processing information on our behalf must use it for the relevant service under appropriate confidentiality, security and data-protection obligations. Google sign-in and device platforms also process information under their own policies. We do not sell your personal information. We may disclose necessary information in response to lawful requests, to protect rights and safety, or in a business transfer subject to applicable safeguards and notice.

Storage, analytics and permissions

Cookies and local device storage maintain sessions, preferences and fantasy drafts. Where enabled, analytics tools record page visits and interactions and may use browser storage and technical identifiers. The analytics integration respects browser Do Not Track settings. Blocking storage can affect sign-in and saved preferences.

You can change notification preferences in the app and revoke notification or photo permissions in device or browser settings. Selecting an image shares the file you choose. Any optional session recording or other processing requiring consent must be explained and separately authorised before it starts; reading this policy is not consent.

Retention and security

Account and fantasy information is retained while needed to provide your account and competition history. Support, security, delivery and audit records are retained according to their purpose, applicable obligations and the need to investigate incidents or resolve disputes, rather than indefinitely for unrelated uses.

Deletion requests cover account information and associated personal data, including uploaded images. Limited records may need to be retained for a legal obligation, fraud prevention or a specific dispute; where applicable, we will explain the reason and retention period. Backup copies may remain until their retention cycle ends and must not be used for ordinary account activity after deletion.

We use encrypted connections, authentication and access restrictions to help protect information. No online service can guarantee absolute security. Please protect your credentials and report suspected unauthorised access.

Your choices and account deletion

You can edit your profile and remove its photo or your team logo in Profile → Edit. To delete your account, use Profile → Delete account and complete the identity check. Uninstalling the app does not delete your account.

You can also request deletion without installing the app: use the email link below with the subject ‘Kora 212 — account deletion’ and include the email associated with your account. Do not send a password. We may ask for proportionate verification to protect you against unauthorised requests.

You may request access, correction or objection under Moroccan Law 09-08 and other applicable rights, including deletion, restriction or portability where provided by law. You can withdraw consent for processing based on consent without affecting earlier lawful processing. You may raise a concern with Morocco's CNDP or another competent supervisory authority.

For deletion or other privacy requests: support@kora212.app.

International processing

Service providers may process or store information outside Morocco and your country of residence. International processing is subject to the safeguards and formalities required by applicable law, including Moroccan transfer requirements where relevant. Contact us for information about the safeguards applicable to your data.

Young users

If you are not old enough to manage an online account under the law that applies to you, do not provide personal information without the authorisation required from a parent or legal guardian. Parents or guardians can contact us about a child's information or request its deletion.

Updates and contact

We will update this policy when our practices change and provide appropriate notice of material changes. A policy update does not waive your rights or authorise a new use that requires your consent.

For questions about Kora 212 and your personal information: support@kora212.app.