1. Who we are
Leagon is a mobile application for organising amateur tournaments among friends, together with this website. It is operated from Tashkent, Uzbekistan.
For any question about this policy or your data, write to privacy@leagon.online. We answer within 30 days.
2. What we collect
Account data. When you sign up we store your email address or Telegram identifier, a username you choose, and an encrypted authentication token. We never see or store your password in readable form.
Profile data. Your display name, profile photo, short bio, chosen frame, city and interface language. All of this is optional except the username, and you can change or clear it at any time.
Game data. Communities you belong to, teams, tournaments, match results, confirmations, ratings and the head-to-head history that follows from them.
Content you post. Posts, comments, likes and join-request messages inside a community.
Technical data. Device model and operating system version, app version, a push notification token, and error diagnostics. We do not collect your location, contacts, photos beyond the images you deliberately upload, or advertising identifiers.
Purchases. If you buy a subscription, the store tells us that a purchase happened, which plan it was and when it expires. We never receive your card details.
3. Why we use it
To run the service: create your account, show your communities, generate schedules, calculate tables and rankings, and keep the history of what was played.
To notify you: match reminders, results awaiting your confirmation, join requests and community announcements. You can switch these off in Settings.
To keep the service safe: detect abuse, enforce community moderation decisions and investigate disputes about results.
To honour purchases: recognise an active subscription and unlock the features it pays for.
We do not sell your data, and we do not use it for advertising or profiling.
4. Who processes data on our behalf
Supabase — database, authentication and file storage. Data is held on servers operated by Supabase and its infrastructure providers.
Google Firebase Cloud Messaging — delivery of push notifications. Firebase receives a device token and the notification text.
Resend — transactional email, such as password reset codes.
Google Play and the Apple App Store — payment processing for subscriptions. They act as the seller of record.
Telegram — if you choose to sign in with Telegram, we receive the identifier and name you have made available there.
Each of these acts only on our instructions. We do not share your data with anyone else except where the law requires it.
5. What other people can see
Your username, display name, photo and frame are visible to members of the communities you join, and on the public page of a community that has enabled one.
Match results, tables and rankings are visible to members of the community where they were played. A tournament result is not private information inside that circle — that is the point of the app.
Posts and comments are visible to members of the community. Community admins and moderators can delete them.
6. How long we keep it
Account and profile data are kept while your account exists.
Match results, tables and tournament history are kept indefinitely, because they belong to the whole community and not only to you.
Push tokens are removed when you sign out or uninstall.
Error diagnostics are kept for up to 90 days.
7. Deleting your account
You can delete your account from Settings. When you do, your display name, username, photo, bio, contact details and notification settings are erased, your community memberships and join requests are removed, and your device tokens are deleted.
Match results you took part in are retained, but they are no longer connected to a named person. This is deliberate: deleting a player from a finished league would rewrite the tables and history of everyone else who played in it.
If you want the underlying result rows removed as well, write to privacy@leagon.online and we will consider it together with the community owner.
8. Your rights
You can access, correct or export your data, object to processing, or ask us to delete it. Most of this is available directly in the app; for the rest, write to privacy@leagon.online.
If you believe we have handled your data wrongly, you may complain to the data protection authority of Uzbekistan.
9. Children
Leagon is not intended for children under 13. If we learn that an account belongs to a child under 13, we delete it.
10. Security
Data is transmitted over encrypted connections and stored with row-level access rules, so a request can only reach the data the signed-in account is entitled to. No system is perfectly secure; if a breach affects you, we will tell you.
11. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top always shows the current version.