Privacy Policy
This is a translation. The Greek version is authoritative.
PAO Hub is an unofficial news and fixtures app for Panathinaikos supporters. This page says exactly what is stored, where, for how long, and how you delete it.
There are no analytics and no tracking beyond advertising. The app integrates no behavioural measurement SDK and does not sell your data. It does contain Google's advertising SDK, and when ads are enabled the Advertising section applies — with your consent first.
Who is responsible
The data controller is Nikolaos Rentzilas, an individual developer, who builds and maintains the app. For any request about your data: support@paohub.rentzilas.dev.
What is stored
The app works without an account. On first launch an anonymous session is created so that your settings and saved articles persist; it is not linked to your name or email unless you create an account.
| Data | Created when | Why |
|---|---|---|
| Anonymous session identifier | On first launch | So settings and saved articles work without an account |
| Settings — sports and publishers you follow, notification switches | The first time you change something in Settings | So they survive a restart or a new phone |
| Saved articles | When you tap the bookmark | For the reading list |
| Notification token and device language | Only if you enable notifications | So the notification can reach your device, in the language you read the app in |
| Email address | Only if you create an account | One of the two sign-in methods, alongside Google — there is no newsletter |
| Name, photo, language and account id from Google | Only if you sign in with Google | Google sends these when you sign in; the app never displays them |
| Chat display name and messages | Only if you post in the chat | So other readers can see them |
| Reports, blocks and chat bans | Only if you report or block someone, or are banned | For chat moderation |
| Reactions to messages | Only if you tap a reaction | So other readers can see the count |
| When you were last here | When you open the app, unless you switch it off in Settings | So your profile can show whether you were around recently — see below |
Not collected: location, contacts, photos, browsing history outside the app, or anything from other apps on your device. The advertising identifier is read only by Google and only while ads are enabled — see Advertising.
When you were last here
If you have posted in the chat, your profile can show other readers how recently you were here. We never show an exact time — only one of four answers: "now", "today", "this week", or nothing at all. The exact time never leaves the server; it is turned into one of those four words there, and only the word reaches the app.
The switch is in Settings → Privacy and it starts on. When you switch it off, nothing is recorded — this is not a stored value being hidden — and the last value is deleted the moment you move the switch. A reader who has switched it off and a reader who has never opened the app look identical.
Separately from that, while you have a chat room open the app shows the number of people in it right then. Nothing about that is stored: it lasts as long as the connection and is gone the moment you close the app. It does not show who they are — only how many.
What stays on your device only
These never leave the phone and are removed when you uninstall: your session token, your recent searches, and a local copy of the feed, fixtures and tables so the app is readable offline.
On Android the app allows the system's automatic backup, so this local data may be included in your device's Google Drive backup. That is under your control in Android's settings.
Where it is stored, and who sees it
| Provider | What reaches them |
|---|---|
| Supabase — Stockholm, EU | The database: everything above, plus your email address and sign-in code, and — if you sign in with Google — your name, photo, language and Google account id |
| Resend — EU | Your email address and the six-digit code, to deliver the sign-in message |
| Google (Sign-in) | Only if you choose to sign in with Google: it confirms your identity through the Google account already on your device. We send it nothing else |
| Expo | The notification token and the notification text. No email, no name |
| Google Firebase Cloud Messaging | On Android, final delivery of the notification to your device |
| Discord | Moderation only: when a message is reported, an alert is sent to the maintainer containing the display name and the first 120 characters of the message |
| Google (AdMob) | Only while ads are enabled and after your consent: the advertising identifier, IP address and basic device details, to select and measure ads — see Advertising |
Article images
Article images load directly from each publisher's own website, not from us. This means your device's IP address reaches the publisher when an image is shown, exactly as it would if you visited their site. The same applies when you tap an article and it opens on their page. No other information about you is sent to them.
Advertising
The app contains Google's advertising SDK (AdMob) and may show a small number of unobtrusive ads: one styled as an article row inside the news feed, labelled ΔΙΑΦΗΜΙΣΗ ("advertisement"), and one banner at the end of an article. Ads may also be switched off entirely — the app ships with ads disabled, and while they are disabled the SDK is never initialised and reads nothing.
When ads are enabled, Google receives the device's advertising identifier, IP address and basic device details, and uses them to select and measure ads. How Google uses this data is described on its own partners page.
- You are asked first. In Greece (and throughout the EEA) a consent form is shown before any ad, and no measurement starts before you answer.
- You can change your mind at any time. Your choice can be reopened from the app's Settings — About → "Privacy options (ads)".
- No gambling ads. Ad content is capped at a maturity level that excludes gambling and betting, and the category is additionally blocked in the ad account's settings.
- No content leaks. We do not send Google what you read, your settings, your email or anything from your account — the SDK simply asks for "one ad" and passes the technical details above.
For how long
- Settings, saved articles and your account: until you delete them.
- Messages in a match room: deleted 7 days after the room closes. The room itself is deleted at 14 days.
- Messages in the general room: deleted at 30 days.
- Reactions: they go with the message they were left on, on the same 7- and 30-day limits.
- When you were last here: one value is kept, the most recent, and it is overwritten each time. No history is kept, so there is nothing from which a routine could be worked out.
- Anonymous sessions that left nothing behind are deleted automatically after 30 days. If you changed even one setting or saved one article, the session persists.
- Deleting your account removes all of the above immediately.
The 7- and 30-day limits exist to stop the chat growing without reason — they are not a privacy commitment. If you want your messages gone, delete your account.
Your rights
Under the GDPR you may request a copy, correction, restriction or deletion of your data, and you may lodge a complaint with the Hellenic Data Protection Authority.
Deletion is immediate and self-service, from inside the app — see the account deletion page. For anything else, email support@paohub.rentzilas.dev.
Children
The app is not directed at children under 13 and does not knowingly collect data from them.
Changes
If something material changes here, the date at the top changes and the change is announced inside the app.