Legal

Privacy Policy

Effective: 2026-05-05 · Last updated: 2026-05-05

This Privacy Policy explains what HoopPicks (the "App") collects, how we use it, and the choices you have. We aim to keep this short, plain, and truthful. If anything is unclear, email support.hooppicks@simple-tech.app.

1. Who we are

HoopPicks is operated by simple-tech.app (the "data controller" under GDPR). You can reach us at support.hooppicks@simple-tech.app for any privacy question, data-subject request, or general support inquiry.

2. Data we collect

We collect only what is needed to make the App work. The categories below mirror what is declared in our App Store privacy manifest (PrivacyInfo.xcprivacy):

All three categories are linked to you (your account) and none are used for tracking. We do not collect contacts, photos, precise location, health data, financial data, or any biometric or sensitive information.

3. How we use it

• Authenticate you when you open the App.
• Save the picks you submit and compute your score against the day's target.
• Rank you on the leaderboard.
• Deliver the daily-question push notification (only if you opted in).
• Respond to support requests you send us.

We do not sell your data. We do not share it with advertisers. We do not use it to build profiles for targeting.

4. Third parties & sub-processors

We use the following service providers ("sub-processors") to run the App. They process data on our behalf and only as instructed:

• Supabase — database, authentication, edge functions, push-notification gateway. Hosts your account and gameplay rows.
• Apple — Sign in with Apple (auth) and Apple Push Notification service (APNs).
• Cloudflare — hosts this website and protects it from abuse. Cloudflare may receive request metadata (IP address, user agent) for security, retained per their default policy.
• Google AdMob and AppLovin — ad SDKs are present in the App. At launch they are configured with test ad units that do not serve real creatives and do not track. When we switch to production ad units, we will update this section and the App's privacy manifest, and the in-app App Tracking Transparency prompt will continue to govern any data those SDKs may collect.

5. Tracking & the ATT prompt

HoopPicks does not currently track you across apps and websites owned by other companies. Our App Store privacy manifest declares NSPrivacyTracking = false.

On first launch you may see the iOS App Tracking Transparency (ATT) prompt. If you decline, no tracking occurs. The prompt exists so that future ad-SDK upgrades that could track will respect your choice without a forced re-prompt; denial is fully honored either way, and you can change it later under Settings → Privacy & Security → Tracking on your device.

6. Push notifications

Push notifications are opt-in. They are used only for functional purposes — primarily to let you know the daily question has dropped, and optionally to remind you about your streak. They are not used for marketing.

You can disable them inside the App (Settings → Notifications) or at the OS level (iOS Settings → Notifications → HoopPicks).

7. Account deletion

You can delete your account at any time:

• In the App: Settings → Danger Zone → Delete Account. This calls our delete-account edge function which removes your authentication record and every row in the database tied to your user ID. The action cannot be undone.
• By email: send "delete my account" to support.hooppicks@simple-tech.app from the email associated with your account, and we will action it within 30 days.

8. Retention

We keep your account data for as long as your account exists. After account deletion the auth record and your gameplay rows are removed promptly. Aggregated, non-identifying records (for example, the average score on a given daily question across all players) may persist for product analytics; these cannot be tied back to you.

Backups of the production database are retained on a rolling schedule (typically 7–30 days) by our database provider and overwritten after that window.

9. Your rights

Depending on where you live, you have rights over your personal data. We honor these for everyone, regardless of jurisdiction.

If you are in the EEA, UK, or Switzerland (GDPR)

• Access — request a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — delete your data (see section 7).
• Portability — receive your data in a machine-readable format.
• Objection / restriction — object to or restrict our processing.
• Lodge a complaint — with your local data protection authority.

If you are in California (CCPA / CPRA)

• Know what we collect and how we use it (this policy).
• Delete your personal information.
• Correct inaccurate information.
• Opt out of sale or sharing — we do not sell or share your data; there is nothing to opt out of.
• Non-discrimination — exercising any of these rights will not affect the service you receive.

To exercise any of these rights, email support.hooppicks@simple-tech.app from the address tied to your account. We respond within 30 days.

10. Children

The App is rated 4+ on the App Store but is not directed at children under 13. We do not knowingly collect personal data from children under 13 in the United States (per COPPA) or under 16 in the EEA without verifiable parental consent. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

Our database and authentication are hosted on infrastructure located in the United States (AWS US-East). If you access the App from outside the US, your data is transferred to and stored there. Where required, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards through our sub-processors.

12. Changes to this policy

If we make a material change to this policy we will update the "Last updated" date at the top and surface a one-time notice in the App on next launch. Continuing to use the App after the change means you accept the new policy.

13. Contact

Questions, requests, or complaints:

support.hooppicks@simple-tech.app