Scope: This International Privacy Policy applies to users of Soccer Laws Dojo who reside outside Japan. It applies regardless of the language in which you read it. Sections that refer specifically to the EEA or the United Kingdom apply only to users who reside in the European Economic Area (EEA) or the United Kingdom.
Version: Version 2.0
Effective date: 2026-08-11
Last updated: 2026-08-11
If you reside in Japan, please read the Japanese Privacy Policy.
This Privacy Policy explains how the operator of the Soccer Laws Dojo mobile application (the “App,” “we,” “us,” or “our”) collects, uses, shares, stores, and protects personal data. It also explains the choices and rights available to users.
The App is operated from Japan by:
We collect only the data needed for the purposes described below. The exact data depends on the features you use and the choices you make.
| Data | Source | Main purpose |
|---|---|---|
| Email address, nickname, account identifier, authentication status, and related account information | You and Amazon Cognito | Account registration, authentication, and account management |
| Answer history, scores, learning progress, rankings, and other learning records | Your use of the App | Providing learning features, saving progress, and improving the service |
| Subscription status and in-app purchase or contract information | Apple, Google, RevenueCat, and your use of the App | Providing paid features and managing subscriptions |
| App User ID and purchase events | RevenueCat | Managing subscription status |
| FCM device token | Firebase Cloud Messaging | Delivering push notifications |
| Notification delivery and opening status | Firebase Cloud Messaging | Operating and improving notification features |
| App instance ID, usage events, device and app information, and diagnostic data | Firebase Analytics and the App | Analyzing use and improving the service, where consent is required and has been given |
| Advertising identifiers available to AdMob and advertising interactions. At present, this may include the AAID on Android where the user has consented, but it does not include the IDFA on iOS. | Google AdMob and the device | Delivering and measuring advertising, only where the user has consented when consent is required |
| IP address, request time, device or browser information, error information, and server access logs | Your device and our systems | Operating the service, troubleshooting, security, and fraud prevention |
| Your name, email address, message, and related correspondence | You | Answering inquiries and handling requests |
We use personal data to:
We use Firebase Analytics to understand how the App is used, Google AdMob to provide advertising, and Firebase Cloud Messaging to deliver push notifications. Where applicable law requires consent, these purposes are enabled only in accordance with the user’s consent choices.
iOS: The App does not currently request permission under Apple’s App Tracking Transparency framework and does not use the Identifier for Advertisers (IDFA). If we implement App Tracking Transparency in the future, we will use the IDFA only after the user has granted the required permission and any other legally required consent.
Android: The Android Advertising ID (AAID) is used for advertising purposes only when the user has consented where consent is required.
This Policy applies to the App. For information about the use of cookies and similar technologies on our website, please refer to the applicable notice on the website.
We do not sell personal data. We share personal data only as needed for the purposes in this Policy, with the following categories of recipients:
| Recipient or category | Role | Data involved |
|---|---|---|
| Amazon Web Services (AWS), including Cognito, hosting, databases, and related infrastructure | Hosting, authentication, database operation, security, and service infrastructure | Account data, learning data, purchase or contract data, and logs as needed to operate the service |
| Google, including Firebase Analytics, Firebase Cloud Messaging, and Google AdMob | Analytics, advertising, and push notifications | App instance and usage data, device tokens, notification status, advertising data, and interactions, depending on consent choices |
| RevenueCat | Subscription management | App User ID, subscription status, and purchase events |
| Apple and Google | App-store distribution and payment processing | Purchase and subscription information provided through the relevant store |
| Professional advisers, public authorities, courts, or law enforcement | Legal advice, compliance with legal obligations, and protection of rights and security | Only the data reasonably necessary for the relevant matter |
Service providers process data under their applicable agreements, instructions, and privacy terms. We may also disclose data where required by applicable law or a valid legal process.
Our main application servers are located in Japan and use the AWS Tokyo Region. For users in the EEA, transfers of personal data from the EEA to Japan may rely on the European Commission’s adequacy decision for Japan adopted in January 2019 where the transfer and recipient fall within its applicable scope and the relevant requirements are met. For users in the United Kingdom, transfers to Japan may rely on the applicable UK adequacy regulations where their requirements are met.
Some data may also be processed in the United States or other countries through services such as Firebase, Google AdMob, and RevenueCat. Depending on the provider, destination, and circumstances, transfers may be subject to safeguards such as standard contractual clauses or other lawful transfer mechanisms. Firebase data may be processed or stored globally depending on the service. Personal data is therefore not necessarily processed only in the AWS Tokyo Region.
To ask for further information about the safeguards relevant to your data, contact us at contact@soccer-laws-dojo.com.
| Data | Retention period |
|---|---|
| Account information, including email address and nickname | Until the account is deleted. It is then retained in backup for 30 days and permanently erased after that period. |
| Learning history, including answer history and scores | Until the account is deleted. It is then retained in backup for 30 days and permanently erased after that period. |
| Purchase and contract information stored in the App | Until the account is deleted. It is then retained in backup for 30 days and permanently erased after that period. |
| Server logs in the production environment | 90 days |
| Server logs in the development environment | 30 days |
| Inquiry emails | One year after the inquiry has been resolved |
| FCM device token | Until the token becomes invalid or the account is deleted, whichever occurs first |
For tax filing and similar tax purposes, we retain payment statements supplied by Apple or Google. These statements contain aggregated payment data and do not identify individual users. We do not retain user-level purchase records for an extended period for tax purposes.
You can delete your account and associated data by using the account deletion feature in the App. You may also request deletion by emailing contact@soccer-laws-dojo.com. We may ask for information needed to verify your identity and protect the account. Deletion is subject to the retention periods above and any applicable legal obligation.
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. No method of transmission or storage is completely secure.
The App is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have collected personal data from a child under 13, we will take reasonable steps to delete it.
In the EEA, where we rely on a child’s consent as the legal basis for processing personal data in connection with an information society service offered directly to the child, the age at which the child may give that consent varies by Member State from 13 to 16 years. If a user is below the applicable age in their country, consent must be given or authorized by a parent or legal guardian. Users outside the EEA must meet the age and parental-consent requirements that apply where they live.
If you believe that we have processed a child’s personal data without the consent required by applicable law, please contact us so that we can investigate and take appropriate action.
We may update this Policy when our services, data practices, or legal obligations change. We will show the new version number, effective date, and last-updated date. Where required, we will provide notice or ask for consent before the change takes effect.
For questions about this Policy, requests concerning personal data, or account and data deletion requests, contact us by email at contact@soccer-laws-dojo.com. Our postal address and other details are set out in Section 1.
This Annex applies only to users who reside in the EEA or the United Kingdom.
The controller responsible for the processing described in this Policy is the operator identified in Section 1.
We rely on the following legal bases for the purposes shown.
| Purpose | Legal basis | Details |
|---|---|---|
| Account registration, authentication, and account management | Performance of a contract | The processing is needed to create and operate the user’s account. |
| Saving learning records and providing quizzes, scores, rankings, and related features | Performance of a contract | The processing is needed to provide the core service requested by the user. |
| Providing paid features and managing subscriptions | Performance of a contract | The processing is needed to provide and maintain the purchased subscription. |
| Fraud prevention, abuse detection, troubleshooting, and security | Legitimate interests | Our legitimate interests are to protect users, prevent misuse, secure the App and systems, and maintain a reliable service. |
| Service improvement that does not rely on consent-based analytics | Legitimate interests | Our legitimate interests are to understand and fix operational problems and improve the safety, performance, and usability of the service. We consider the effect on users before relying on this basis. |
| Personalized advertising and advertising-related access to device information | Consent | The user may accept or refuse this purpose through the CMP. |
| Analytics that requires access to device information or otherwise requires consent | Consent | The user may accept or refuse this purpose through the CMP. |
| Push notifications | Consent | The user chooses whether to allow notifications and may change the choice in the App or device settings. |
| Disclosure required by law or a valid order | Compliance with a legal obligation | We process or disclose only the data needed to comply with the applicable obligation. |
Subject to the conditions and exceptions in applicable law, you have:
To exercise a right, email contact@soccer-laws-dojo.com. We may ask for information needed to verify your identity. We will respond without undue delay and within one month after receiving your request. Where applicable law permits an extension, we will tell you the reason and expected response time within the first month.
You may withdraw consent at any time. For advertising and analytics, open the in-App settings and display the CMP again. For push notifications, use the in-App notification settings or your device settings.
Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.
Before we access or use information stored on a device for advertising or analytics purposes, we ask for consent through a Google-certified consent management platform (CMP). Users can make separate choices by purpose. Refusing consent requires the same number of steps as accepting consent.
You can change or withdraw your choices at any time by opening the in-App settings and displaying the CMP again. If you do not consent, personalized advertising and consent-based analytics will not be used. Non-personalized advertising may still be displayed where permitted by law.
An email address, nickname, and the authentication information requested during registration are required to create and maintain an account. If you do not provide this information, you cannot register an account or use account-based features, including saving learning data across sessions. Data needed to confirm and manage a subscription is required to provide paid features. Other data, including consent-based advertising, analytics, and push-notification data, is optional. Refusing optional processing does not prevent account registration or use of the core service.
We do not use personal data for solely automated decision-making, including profiling, that produces legal effects or similarly significant effects on users.
You have the right to lodge a complaint with the data protection supervisory authority in the country where you live, work, or believe an infringement occurred. Examples include the CNIL in France, the competent state data protection authority in Germany, and the AEPD in Spain. UK users may contact the UK Information Commissioner’s Office.