1. Who We Are

Pitchside Audio ("we", "us", "our") operates the Pitchside Audio website (the "Service"). The Service provides live audio and video streaming of sports events from our publishers to our subscribers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. Information We Collect

2.1 Information You Provide

• Account information: your email address, display name, role (publisher or subscriber), and password (stored only as a secure hash via Firebase Authentication).
• Content you send us: messages you send through contact or chat features.

2.2 Information Collected Automatically

• Usage analytics: when you join a stream, we record your IP address, device type (mobile/tablet/desktop), approximate geographic location (derived from IP), and watch duration. This is used to operate and secure the Service.
• Device information: an anonymous device identifier stored on your device to distinguish your installs.
• App attestation: a cryptographic attestation from your device (Firebase App Check / Google Play Integrity) verifying that requests come from the genuine app. This does not expose your device identity to us.

2.3 Audio & Video

Live audio and video are transmitted through Agora's real-time communication network. We do not record or store live stream content.

3. How We Use Information

• To create and manage your account and enforce one active session per account.
• To deliver the live streams you are entitled to and bill accordingly.
• To detect and prevent unauthorized access, account sharing, and stream restreaming.
• To provide administrators with analytics about stream viewership.
• To respond to support requests.

4. Legal Basis (EEA/UK)

Where the GDPR or UK GDPR applies, we process your data on the bases of: contract performance (delivering the streaming service you signed up for), legitimate interests (security, fraud and abuse prevention), and consent where explicitly requested.

5. Sharing With Third Parties

We do not sell your personal information. We use these service providers:

• Google Firebase — authentication, database, and app integrity (Google's privacy policy applies).
• Agora — real-time audio/video transport.
• Vercel — application hosting.

We may also disclose information if required by law or to protect our rights.

6. Data Retention

Account data is retained while your account is active. Usage analytics are retained for billing and security purposes and deleted when no longer needed. You may request deletion of your account and associated data at any time (see Section 8).

7. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and personal data.
• Withdraw consent or object to processing.
• Data portability.

California residents: we do not sell or share personal information as defined under CCPA/CPRA, and you may exercise the rights above free of charge.

8. Contact Us

To exercise your rights or ask privacy questions, contact us through the in-app Contact feature or the contact form. We respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app, and the "Last updated" date above will always reflect the current version.