spocap Privacy Policy

1. What we collect and why

Sign-in account (Kakao / Google / Apple): the account ID, email (if the provider shares it), name (nickname) and profile picture URL the provider returns. Used to keep you signed in and verify you. If you do not sign in, no account is created.

Profile: the name shown in the app, gender and birth year (both can be left as “prefer not to say”). Gender and birth year are visible only to you; teammates see only your name. Used for age-group comparisons and statistics.

Teams and matches: team name, sport, invite code, members and roles; match name, date, pitch size and the names of participating phones; player names set for each match (a member or a guest name only), side, bib colour and number. Used so teammates can record and watch matches together.

Motion records (track / scene): the joint positions of people and the position of the ball that each phone extracts from its own video, and the 3D scene combined from them. They contain no face images or video. Used for the 3D replay, finding highlights and computing stats.

Highlight clips: video of the moments a user chooses to upload (usually tens of seconds). Visible to teammates and to anyone holding a share link. People who played in the match may appear in them.

Usage records (after sign-in): event names and times such as screen views, opening or joining a recording room, replays and highlight plays; a random device ID made by the app; a session ID; OS type and app version. Used to improve usability and for statistics. Before you sign in, none of this is created or sent.

Abuse protection: to limit sign-in attempts to 30 per hour per IP, we keep a hash of the IP address only as an hourly counter and delete it within a day.

What we never collect

Full match video is never sent to our servers. Recording and detection of people and the ball happen on the phone; only motion numbers and the highlight clips you choose are uploaded. Sound used for time sync (whistle, clap) is processed on the phone only. No location, contacts, advertising ID or face recognition data. There are no payments yet.

2. Processors and overseas transfer

Cloudflare, Inc. (US / Asia data centers): servers, database (D1) and file storage (R2). Holds account, profile, team, match, player-name, motion, highlight and usage records. Cloudflare may keep access logs (time, URL, IP) for a limited period for operations. Retention follows section 4.

Google LLC (US): Google sign-in. Apple Inc. (US): Sign in with Apple. Kakao Corp. (Korea): Kakao sign-in. These three process the sign-in you chose under their own terms.

All records in section 1 are transferred abroad, at the time the app connects to the server (encrypted over HTTPS). If you do not want an overseas transfer, simply do not sign in (teams, match records and sharing will then be unavailable); information already transferred can be deleted under section 5. No third-party provision for marketing.

3. Who can see it (teams and share links)

A team’s matches, names, motion records and highlights can be seen and edited only by members of that team. Joining a team requires an invite code from a member.

When a member creates a share link, anyone with that link can view that one match’s names, 3D scene, motion records and highlights read-only, without signing in. A link stops working after its period (30 days by default, up to 1 year) and any member can revoke it at once. Shared pages are set not to appear in search.

If someone who appears in a match wants a record or clip removed, the team owner or the uploader can delete it in the app, or email contact@worldwidesomething.com and we remove it within 7 days after checking.

4. Retention

Account, profile and team membership: until you delete the account. A team’s matches, names, motion records and highlights: until a member deletes them or the team is deleted. Unfinished upload slots: deleted automatically after one day. Share links: deleted 30 days after they expire or are revoked. Usage records: automatically deleted after 2 years, and immediately when you delete your account. Sign-in attempt counter: within a day.

5. Deleting your account and data

In the app: Settings → Delete account. After you confirm, your server account, social sign-in link, profile, team memberships, player names tied to your account and usage records are deleted immediately. For Apple sign-in the link on Apple’s side is revoked too. This cannot be undone.

Teams you own where you are the only member are deleted with all their matches, motion records, highlights and share links. In teams with other members, the earliest-joined member becomes owner; the team’s match records stay with the team, but their link to your account (uploader, creator) is removed.

If you cannot use the app (for example after uninstalling): follow the web deletion page (/spocap/delete) and email contact@worldwidesomething.com with your sign-in method (Kakao / Google / Apple) and account email. We verify and delete within 7 days and confirm by email.

6. Your rights and children

Request access, correction, deletion or restriction through your profile and Delete account in the app or at contact@worldwidesomething.com. Under-14s may not sign up or use the app; accounts found to belong to under-14s are deleted promptly. When filming a match that includes under-14s, please get a guardian’s consent.

7. Security

All traffic is encrypted over HTTPS. Sign-in tokens are kept in the phone’s secure storage. The server opens a team’s records only to its members, and files are exchanged only through short-lived signed addresses (30 minutes to upload, 1 hour to download). Share-link tokens are stored only as hashes. Analytics are not accepted before sign-in.

8. Changes & contact

Changes are announced here and in the app 7 days before taking effect (30 days if adverse). Contact: contact@worldwidesomething.com / spocap · WorldWideSomething. Effective: Oct 24, 2026 · v1.0.