App Annex · The Whistle
Privacy Policy — The Whistle
Effective · June 16, 2026
Summary
The Whistle is a football scores information app. It shows no ads, performs no tracking, and uses no third-party analytics or advertising SDKs. The only data sent is an anonymous notification token (if you enable alerts). Your favourite teams are stored on your device.
1. Data We Do Not Collect
The app does not collect:
- Name, email, or phone number
- Precise location (GPS)
- Contacts, photos, personal files, or microphone
- Advertising identifiers (AAID) — there are no ads and no tracking
- Browsing history outside the app
2. Backend API (match data)
The app fetches scores, fixtures, lineups, stats, and standings from our backend livescore-api.pewaris.dev (sourced in turn from API-Football). Requests only send:
- The match parameters you're viewing (e.g. date, fixture id, search query)
- Standard HTTP headers — including your IP address and device User-Agent (standard information every internet connection sends)
The backend receives no personal identity, no unique device identifier, and no precise location. Access logs are kept for at most 90 days for security diagnostics.
3. Push Notifications
To send kickoff and full-time alerts, the app uses a push service (Google Firebase Cloud Messaging, via Expo). The data involved:
- Device token: a unique anonymous identifier generated by the push service, used only to deliver notifications to your device
- Notification status: whether alerts are enabled
The token contains no personal information and cannot identify you outside this service. You can disable notifications any time in the app (Settings → Match alerts) or in Android settings — the token is then removed.
4. Favourite Teams
The teams you follow are stored locally on your device. This list is not sent to our servers for personal identification.
5. Third-Party Data Sources
Match data (scores, fixtures, stats) is provided by API-Football (API-Sports). Notifications are delivered via Expo Push (Google FCM). These providers process data on servers outside Indonesia; per Article 56 of the PDP Law, we ensure equivalent data protection.
6. Permissions Requested
- Internet: to load scores and deliver notifications
- Notifications: to show kickoff & full-time alerts (optional)
- The app does not request location, contacts, camera, microphone, or external storage
7. Data Storage & Deletion
- Notification token: until the app is uninstalled or notifications are disabled
- Favourites & cache: on your device, removed when the app is uninstalled
To request deletion of a collected token, email [email protected] with the subject "The Whistle Data Deletion Request".
8. Your Rights
You have all the rights described in the Pewarisgroup master Privacy Policy, including access, correction, deletion, and withdrawal of consent.
9. Contact Us
Privacy questions about The Whistle: [email protected]