Privacy Policy

This Privacy Policy explains what zPickem collects, how we use it, who processes it, and how to delete your account.

Data we collect

Account: a username, plus an optional email address used for account recovery. Native-app signup also requires your date of birth, which we use to confirm you are 18 or older, and records that you accepted these terms. Profile: an optional display name, bio, and profile photo. Content you create: videos you record, including their audio, questions, picks, chat and direct messages, trivia, league details, and any photos you upload (to chat, DMs, questions, profiles, or leagues). Usage: gameplay activity, token balances and the token ledger, leaderboard stats, which videos you have seen and interacted with, session information, and basic logs needed to run and secure the service. If you turn on notifications we store a push token for your device so we can send them.

How we use it

To operate the app (leagues, picks, scoring, messaging, leaderboards), to keep it safe (moderation of reported and flagged content, blocking, abuse prevention), to provide support, and to improve the product. We do not sell your personal information. Tokens are in-app score only and have no cash value, so we do not process financial payouts.

Processors & third parties

We use a small number of service providers, each of which processes data only on our instructions: Supabase (database and sign-in — account data, content, and the token ledger), Cloudflare Stream (storing and delivering your videos), Resend (sending account-recovery email), Expo (delivering push notifications to your device), and Vercel (hosting). We do not use any advertising, attribution, or analytics SDK, and we do not track you across other companies' apps or websites. zPickem is free to use, so we take no payments and store no payment information. Each processor handles data under its own terms and our data-processing agreements.

User-generated content & moderation

Content you post may be visible to other users (publicly, if you post to the public feed, or within your leagues). You can report any content and block any user. We review reports and system-flagged content and may remove, hide, or hold content and act on accounts. See our Community Guidelines.

Deleting your account

You can delete your account any time in Settings → Delete my account. Because your tokens, bets, and ledger entries are interwoven with other users' league history, we anonymize rather than hard-delete: your email, date of birth, username and profile are scrubbed (replaced with an anonymous identifier), your sessions are revoked, and your personal profile is removed, while the historical ledger that other members rely on is preserved in de-identified form. This is irreversible.

Data retention & security

We retain data while your account is active and as needed to run the service and meet legal obligations. Access is restricted and secured. No system is perfectly secure, but we take reasonable measures to protect your data.

Contact

Privacy questions or data requests: see Support.