This Privacy Policy describes how WC 2026 ("the App"), developed by Mark Gravely ("we", "us", or "our"), collects, uses, and protects your information when you use the App during the 2026 football tournament.

1. Data We Collect

You can use the live score, bracket, and match detail screens entirely as a guest, in which case we collect nothing from you. If you sign in to make predictions and join the leaderboard, we collect:

• Account info: a stable user ID, email address, and display name from Apple Sign In or Google Sign In.
• Predictions and bracket picks: the match outcomes and tournament progressions you predict, with the timestamp.
• Leaderboard data: your points and correct-pick count, derived from your predictions.
• Followed teams and preferences: teams you follow, language, and notification settings.
• Push notification token: issued by Apple Push Notification Service so we can deliver kickoff reminders and live updates if you opt in.

We do not collect contacts, location, photos, browsing activity, or any data unrelated to running a football predictor.

2. How We Use Your Data

We use the data above to:

• Authenticate you and sync your predictions across devices.
• Score your predictions and rank you on the public leaderboard.
• Show your display name on the leaderboard so other players can see who they're competing against.
• Send transactional notifications you've opted in to (kickoff reminders, live score alerts).
• Diagnose crashes and keep the App stable during the tournament.

3. Service Providers We Share With

We rely on the following service providers, each of whom processes your data only on our instructions:

• Supabase — hosts our Postgres database and authentication. Stores your account, predictions, bracket picks, and leaderboard records.
• Apple Sign In and Google Sign In — authenticate your account using your Apple ID or Google credentials. We never see or store your password.
• Apple Push Notification Service — delivers any notifications you opt in to.
• RevenueCat — processes Tournament Pass entitlement verification. Receives an anonymous user ID and your purchase receipt from Apple. Governed by RevenueCat's Privacy Policy.
• Apple App Store — handles all Tournament Pass payments. We never see or store your payment card details.
• football-data.org — third-party source of fixtures, lineups, and live match scores. We send no personal data; only public match identifiers.
• Expo / EAS — application build infrastructure and over-the-air updates.

We do not sell your data to advertisers and we do not share it with third parties for their own marketing.

4. Public Information

Your display name and points total are visible on the in-app leaderboard to anyone using the App. You can change your display name from the Profile screen at any time. Your email address, predictions, and other account data are not shown to other users.

5. Tournament Pass Purchases

The Tournament Pass is a one-time, non-consumable in-app purchase processed by Apple. Apple collects the billing and payment information needed to complete the purchase. We receive only an entitlement record from RevenueCat — never your payment details. Apple's handling of your data is governed by Apple's Privacy Policy.

6. Data Security

All network requests between the App and our service providers go over HTTPS. Account credentials are managed by Apple Sign In and Google Sign In — we never see or store passwords. Database access is gated by row-level security so users can read and modify only their own predictions and picks.

7. Data Retention and Deletion

We retain your account, predictions, and leaderboard records for as long as your account is active. You can permanently delete your account at any time via Profile → Delete Account inside the app, or by emailing support@markg.app. In-app deletion is immediate; email requests are processed within 30 days of verification. See our account deletion page for details.

You can sign out at any time from the Profile screen without losing access to your data — sign back in to restore it.

8. Children's Privacy

WC 2026 is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent change. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or your data? Email support@markg.app.