PureScores
Privacy policy
PureScores has no accounts, no analytics, and no advertising. The iPhone and Apple Watch apps contain no third-party software. The Android app contains only one third-party library that contacts anyone other than us. That library is Google's Firebase Cloud Messaging, which it needs to receive notifications (see below). This page lists every piece of data the app handles and where it goes.
What stays on your device
- Your favorite teams, your theme, your hide-scores setting, and the order of your leagues and which ones you hide. The app stores them on the phone in the app's own container so the widgets can read them.
- The iPhone copies your favorites, theme, hide-scores setting, and league order and hidden leagues to your Apple Watch over Apple's Watch Connectivity. That copy stays between your two devices.
- If you turn on iCloud sync in Settings (it is off until you do), the iPhone app copies your settings to your own iCloud account through Apple's key-value store so your other Apple devices match. Apple holds that copy under your Apple ID, and we never see it.
- A cache of recent scores and team logos, so the app and widgets open quickly.
- Your phone's own backup (iCloud Backup on iPhone, Google's backup on Android) can include your favorites and settings. That copy lives in your Apple or Google account, and we never see it. Since September 2026, the Android app leaves its push token out of that backup.
None of this reaches any server of ours. Deleting the app deletes all of it from your phone. A backup you keep with Apple or Google stays until you delete it there.
Requests the app makes
- Scores, standings, schedules, and box scores come from our server at
api.purescores.app, hosted by Railway. Like any web server, it sees your IP address and the time of the request in its logs, which Railway keeps for a limited period. The app sends no identifier with these requests. - Team logos and player headshots come from the same server. It downloads each image from ESPN's image servers (
a.espncdn.com) once and keeps a copy, so ESPN sees our server's address, never yours. The app makes no request to ESPN.
Notifications
The app keeps your notification choices on the phone. When you turn on a notification for a team, a league, or a game, the app also sends the following to our server, and the server stores it:
- the push token Apple (on iPhone) or Google (on Android) assigns to your device, a random string that lets them deliver notifications to that device and nothing else,
- on iPhone, while Live Activities are on in Settings, two more tokens from Apple. One lets the server start a Live Activity for a game you follow. The other, one per game, lets it update that activity on your Lock Screen,
- the teams, leagues, and games you asked about, and which events (start, score change, final) you want,
- whether the token came from Apple or Google, and whether it came from a test build or the store build,
- when the record was created and when you last updated it.
The server uses this to send the notification through Apple or Google when the event happens. It does not link the token to a name, an email, or anything else about you, because it never has any of those.
The app puts the push token in the address of each notification request it sends. Railway's request logs therefore record the token next to your IP address, for as long as Railway keeps those logs. On iPhone they also record the app's build number and the iOS version, which Apple's networking code adds to every request.
The server deletes the record and every token in it when you turn off your last notification in the app. It also deletes it when the last game you followed ends, is postponed, or is cancelled, and you follow no team or league. And it deletes it when Apple or Google reports the token dead, which happens after you delete the app.
On Android, the Firebase Cloud Messaging library talks to Google to obtain and keep that token. The app asks for the token only while at least one notification is on. Google sees your device's identifiers for that purpose, and Google's own privacy policy covers it.
What we never collect
- No name, email, phone number, or account of any kind.
- No location.
- No advertising identifier, and no tracking across apps or websites.
- No usage analytics and no crash reports from inside the app. Apple or Google may share aggregate crash data with us only if you opted into that in your phone's settings.
Children
The app collects no personal information from anyone, children included.
Changes
If the app starts handling new data, this page changes first and the effective date at the top moves.
Who we are
FairLine LLC makes PureScores and runs its server. Send questions about this policy to [email protected].