Privacy Policy

This draft Privacy Policy explains what zPickem collects, how we use it, who processes it, and how to delete your account. Prepared for legal review.

Data we collect

Account: a username, plus an optional email address and/or phone number used for login and account recovery. Native-app signup also requires your date of birth, which we use to confirm age eligibility. Profile: an optional display name, bio, and profile photo. Content you create: questions, picks, chat and direct messages, trivia, league details, and any photos you upload (to chat, DMs, questions, profiles, or leagues). Usage: gameplay activity, token balances and the token ledger, leaderboard stats, device/session information, and basic logs needed to run and secure the service.

How we use it

To operate the app (leagues, picks, scoring, messaging, leaderboards), to keep it safe (moderation of reported and flagged content, blocking, abuse prevention), to provide support, and to improve the product. We do not sell your personal information. Tokens are in-app score only and have no cash value, so we do not process financial payouts.

Processors & third parties

Supabase is our database and authentication provider and processes account data, content, and the token ledger on our behalf. Google Vertex AI (Gemini) is used only to generate draft trivia and league questions from a host's prompt; prompts are sent to generate content and we do not send it your personal identifiers. Paid subscriptions are processed by Stripe. Each processor handles data under its own terms and our data-processing agreements.

User-generated content & moderation

Content you post may be visible to other users (publicly, if you post to the public feed, or within your leagues). You can report any content and block any user. We review reports and system-flagged content and may remove, hide, or hold content and act on accounts. See our Community Guidelines.

Deleting your account

You can delete your account any time in Settings → Delete my account. Because your tokens, bets, and ledger entries are interwoven with other users' league history, we anonymize rather than hard-delete: your email, phone, and username are scrubbed (replaced with an anonymous identifier), your sessions are revoked, and your personal profile is removed, while the historical ledger that other members rely on is preserved in de-identified form. This is irreversible.

Data retention & security

We retain data while your account is active and as needed to run the service and meet legal obligations. Access is restricted and secured. No system is perfectly secure, but we take reasonable measures to protect your data.

Contact

Privacy questions or data requests: see Support.