Privacy Policy

• Account information. When you sign up (by email and password, or with Google or Apple) we collect your email address and the display name, username, and profile photo you provide or that the provider shares. We never receive your Google or Apple password. If you use Sign in with Apple and choose Hide My Email, we receive a private relay email address rather than your real one.
• Content you create. Your score predictions, the private leagues you create or join, and related activity (e.g. league membership and standings). Your display name, username, and profile photo are visible to other members of the leagues you create or join, including on standings.
• Usage and device data. Basic technical information such as your device or browser type, approximate location from your IP address, and the pages or screens you visit, used to operate and secure the service.
• Analytics. We measure how the product is used (screens viewed and key actions such as creating a league or making predictions) to improve it, using Google Analytics on the web and in the mobile app. So we can understand your usage across your devices, this may be associated with an internal account identifier (never your email or name). We do not use analytics for advertising or to track you across other apps or websites.
• Diagnostics. When the app errors or crashes we collect diagnostic information (such as device model, operating system version, and the error itself) so we can fix problems. In the mobile app this is processed by Sentry.
• Notifications. If you turn on notifications in the mobile app, we store a push notification token for your device so we can send alerts about your leagues. You can turn them off any time on your profile.

• To create and manage your account and authenticate you.
• To run the core product: scoring your predictions, computing standings, and operating leagues.
• To maintain security, prevent abuse, and debug problems.
• To send notifications you have turned on, such as deadline reminders.
• To communicate with you about your account or important service changes.

We do not sell your personal information, and we do not use your data for advertising or cross-app tracking.

We use cookies that are strictly necessary to keep you signed in (your authentication session) and to remember preferences such as your theme and language. We do not use advertising cookies.

We share data only with service providers that help us run Punditz, and only as needed:

• Supabase: authentication and database hosting (stores your account and content).
• Google: if you choose to sign in with Google; and Google Analytics (web, only with your consent) and Google Analytics for Firebase (mobile app) to understand usage.
• Apple: if you choose to sign in with Apple.
• Sentry: crash reporting and diagnostics, to help us find and fix problems.
• Apple and Google push services: to deliver the notifications you turn on in the mobile app.
• Hosting providers: Vercel (web) and Render (API) host the application.

We may also disclose information if required by law, or to protect the rights, safety, and security of Punditz and its users.

We keep your information for as long as your account is active. You can delete your account at any time: in the mobile app under Profile, or on the web at punditz.app/delete-account. Deletion takes effect after a 14-day grace period; logging back in during that time reactivates your account, and we send you no communications while a deletion is pending. Once the grace period ends, we delete or anonymize your personal data, except where we must retain it to comply with legal obligations or resolve disputes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected].

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Punditz is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.

Questions about this policy or your data? Email us at [email protected].