Privacy Policy
Last updated: 13 September 2026
This policy explains what information the Zaleak family of apps handles and why. It covers Al Nassr - Nassrawi Fans and the other apps in the same family (Alaves Baskonia Zaleak Gare!, Athletic Bilbao Zaleak Gara!, Erreala Zaleak Gara!, Barcelona - Som Blaugranes, Hala Madrid - Somos merengues, Osasuna - Somos rojillos!, Atlético - Somos colchoneros, and future apps in the family), referred to below as "the app". The app is an unofficial, non-commercial project made by a fan, and it is designed to handle as little data as possible.
1. Who is responsible
hegonax is the data controller for this app. Contact: [email protected].
2. What we collect
The app requires no sign-up and no user account. We never ask for your name, your email or any identifying detail. Specifically:
- Language and notification settings (which language you read the app in, which alerts you want): stored on your device only, never sent to any server together with your identity.
- Push notification token: if you turn notifications on, your device receives an anonymous identifier from Firebase Cloud Messaging (Google), and the app subscribes it to the alerts you chose. This identifier is not linked to your name or to any other personal detail about you.
- Usage measurements: the app uses Firebase Analytics to count a handful of anonymous events — app opens, whether the notification permission was accepted, which alerts are opened. They tell us whether the app is useful. They are counters, not a profile, and they carry no identifying data.
- Advertising identifier: the app shows a banner ad through Google AdMob to cover the cost of the sports data (API-Football). On iOS you are asked, through Apple's own dialog, whether you allow tracking; in the European Economic Area you are also asked for advertising consent through Google's form. If you say no to either, you still get the app in full — only the ads stop being personalised.
- Store technical data (App Store / Google Play): Apple and Google collect basic install and performance statistics under their own policies, outside this app.
We do not collect location, contacts or photos, and there is nothing you can post or share: the app has no user-generated content.
3. What we use it for
- To send you the push alerts you chose (goals, red cards, penalties, kick-off and full time, line-ups, transfers), in the language you selected.
- To show sports content (results, fixtures, standings, squad) — this content is public and needs nothing from you in order to be displayed.
- To understand whether the app is worth keeping: how many people open it, and whether the alerts are used.
4. Who we share it with
We do not sell your data to anyone. The only third parties involved are:
- Firebase Cloud Messaging and Firebase Analytics (Google): delivery of push notifications and the anonymous usage counters. Google handles the device token under its own privacy policy.
- API-Football (API-Sports): the source of the sports data the app shows. It receives nothing about you — the app queries this source from its own server, never from your device.
- Google AdMob: the ads that pay for the sports data. It may handle your device's advertising identifier under its own privacy policy, and show you personalised ads if you allowed tracking.
5. How long we keep it
The push token lives for as long as you keep the app installed with notifications on. Uninstalling the app, or turning notifications off, stops it being used and Firebase invalidates it. We keep no history of personal data on our servers, because none ever reaches them.
6. Your rights
If you have any question about how your data is handled, write to [email protected]. Because we collect no identifying data, there is no "profile" of you to look at, correct or delete beyond the push token (see Delete my data). You can also withdraw the tracking and advertising permissions at any time from your device's privacy settings.
The app is run from Spain, so it follows the EU General Data Protection Regulation. If you believe your rights are not being respected you may complain to your national data protection authority, or to the Spanish Data Protection Agency (AEPD).
7. Children
The app shows sports content of general interest and is not aimed specifically at children, although it collects no data that would let us verify anyone's age. Since no identifying data is collected, the risk to a child is the same as to any other user.
8. Changes to this policy
If this policy changes we will update the "Last updated" date at the top of this page. It is worth checking now and then.
9. Contact
For any privacy question: [email protected].