Mamba is a sports highlights app. You can browse highlights, scores, and available Rooms without an account. Signing in saves your liked clips and reactions across devices. When public Room discussions are enabled, commenting and liking comments require sign-in, acceptance of the current Community Rules, and a declaration that you are 18 or older. This page explains how we handle your data.
Your in-app preferences (such as which leagues you've added to your lineup) are saved locally on your device only. This information stays on your device and is removed if you delete the app.
When you like a highlight or add an emoji reaction to a play, the app uses a random, non-personal identifier generated on your device. This lets us count reactions accurately (for example, so a single like isn't counted twice) without knowing who you are. On its own it is not linked to your name or any personal profile, is not shared with third parties, and is not used to track you across other apps or websites. If you later sign in, the anonymous activity from that device is re-associated with your account so your liked clips follow you between devices.
You may sign in with Sign in with Apple or Google. We never see or handle your password — the provider verifies you and returns a secure token. When you sign in:
When discussions are enabled, we also store your rules acceptance, adult declaration, comments, comment likes, reports, blocks, and moderation history as described below. We do not sell profiles.
When you like or react to content, the app sends the device identifier described above together with the identifier of the item you reacted to, so we can maintain aggregate counts. If you are signed in, your account identifier is attached as well so the activity can appear on your profile. We also receive standard, non-identifying technical request information (such as a request timestamp) that any web server logs to operate the service.
Rooms contain public, text-only comments about games and moments. Approved comments show the author fields listed above. We store discussion eligibility, comments, likes, reports, blocks, and moderation actions in a private database. Reports and their evidence are available to operators for review, not to other readers. Reporting hides the comment for the reporter; blocking hides a blocked author's comments from that viewer. Your own comment can be deleted in the app.
Before publication, comments pass local checks and a hosted text classifier. We send comment text to OpenAI's moderation service for classification; we do not send your account ID, email, or adult declaration in that request. The moderation API may process the text under its data handling terms. If classification is unavailable, the text remains private and unpublished while a same-key retry is possible. Automated checks cannot guarantee that every harmful comment is caught. Reports enter a private review queue rather than generating an automatic support email.
We use Supabase to host our database and to provide authentication. Sign-in itself is provided by Apple and Google. These providers process the account data described above to operate the service. For Room comment classification we also use the text moderation service described above.
Mamba displays sports schedules, scores, and highlight videos sourced from third parties, including the official accounts of leagues, teams, and broadcasters (for example, the NBA and MLS) on platforms such as X (Twitter) and YouTube, as well as sports data providers such as Highlightly. When a highlight video plays, it may be delivered directly by, or embedded from, those third-party platforms, and your interaction with that content is subject to the relevant provider's own privacy policy. We do not control these services.
Mamba does not track you, so the app does not request permission to track and does not access the device advertising identifier.
Mamba is a general-audience sports app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us using the details below and we will delete it.
Aggregate, non-personal reaction counts are retained to operate the service. If you sign in, your profile, authentication record, and any Apple authorization token are retained until your account is deleted (see below). Apple refresh tokens, including credentials awaiting disconnection after a rejected sign-in registration, are encrypted on our server and removed after revocation or confirmed manual disconnection. Data in transit is protected with HTTPS. Completed deletion receipts, received Apple notification records, and hashed revocation-event markers are eligible for removal after 30 days and are cleared by daily cleanup. Unresolved requests remain blocked and retained until they are handled.
When discussions are enabled, public comments stop appearing in Room reads after 90 days. Rejected, removed, and self-deleted comment bodies are erased from the live discussion database immediately. Unpublished pending text is eligible for cleanup after 24 hours; a scheduled cleanup removes it. Private report evidence expires after 30 days, and operator audit records after 90 days, with scheduled cleanup. Deleting an account also removes its comments, reports, likes, blocks, and structured mention references from the live discussion database. These periods describe app database handling; backups and service providers may retain data under their own schedules.
Already uninstalled Mamba? Request account and data deletion by email without reinstalling the app. We verify account ownership before accepting a request.
If you have signed in, open your profile (the member icon at the top of any tab) and tap Delete Account. We save the request, block further account activity, and sign you out. The app shows a receipt while background processing revokes any stored Apple authorization, removes your member profile and authentication record (including your email), removes associated discussion records, and unlinks your highlight likes and reactions. The underlying anonymous reaction counts remain but are no longer associated with you. Older Apple accounts may be asked to authorize again so we can disconnect Apple; canceling that step does not stop deletion, and the app provides instructions to disconnect Apple manually. You can check the deletion status after signing out; if processing needs help, the receipt shows that status while account access stays blocked.
Apple may also notify us that you revoked Sign in with Apple consent or deleted your Apple Account. We then delete the entire linked Mamba account and its data, even if you also used Google to sign in. Changes to Apple's private email relay alone do not delete your account. You can remove local preferences at any time by deleting the app. If you have questions about your privacy, contact us below.
If we change how the app handles data, we will update this page and revise the "Last updated" date above.
Questions about this Privacy Policy? Email tkabbani.spor@gmail.com.