This Privacy Policy describes how SportKen (“we”, “us”, “our”) collects, uses, and shares information about you when you use our website and services at sportken.com.au.
Who We Are
SportKen is an independent sports analytics and data intelligence platform. We are the data controller for personal information collected through the Service.
What Information We Collect
2.1 Information You Provide Directly
- Account information: Email address, name, and password when you register.
- Payment information: Billing details processed by Stripe (we do not store card numbers).
- Communications: Messages you send to our support team.
- Profile preferences: Sport preferences, notification settings, and dashboard configurations.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, and interaction patterns.
- Device information: Browser type, operating system, device type, and screen resolution.
- IP address: Used for security, fraud prevention, and approximate location.
- Cookies and tracking: As described in our Cookie Policy.
2.3 Information from Third Parties
- Authentication providers (if you sign in via a third-party service).
- Payment processors (transaction confirmation and fraud signals from Stripe).
How We Use Your Information
- Create and manage your account and provide access to the Service.
- Process subscription payments and manage billing.
- Personalise your dashboard and deliver relevant sports intelligence.
- Send transactional emails (account confirmation, password reset, billing receipts).
- Send service updates and (where opted in) marketing communications.
- Improve the Service through analytics and user feedback.
- Detect, prevent, and respond to fraud, abuse, and security incidents.
- Comply with legal obligations under Australian law.
Legal Basis for Processing
Under the Australian Privacy Act 1988, we collect and use personal information only where it is reasonably necessary for our functions, you have consented, or it is required by law.
For users in the EU/EEA, our legal bases under GDPR include:
Third-Party Services
Data Retention
Data Security
- TLS/HTTPS encryption for all data in transit.
- AES-256 encryption for data at rest via Supabase.
- Row-level security (RLS) policies ensuring users can only access their own data.
- Bcrypt password hashing — we never store plaintext passwords.
- PCI-DSS compliant payment processing via Stripe.
- Regular security reviews and dependency updates.
Your Rights
To exercise any of these rights, contact us at privacy@sportken.com.au. We will respond within 30 days.
Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us at privacy@sportken.com.au.
International Transfers
Your data is primarily stored in Australia (AWS Sydney via Supabase). Some service providers (including Vercel and Stripe) may process data in the United States and other countries. Where data is transferred outside Australia, we ensure appropriate safeguards are in place in accordance with the Australian Privacy Principles.
Changes to This Policy
We will notify you of material changes by email or prominent notice on the Service at least 14 days before changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
Contact & Complaints
Australian Privacy Commissioner