Privacy Policy

1. Introduction

Kwincast is operated by an individual based in the United Kingdom.

Kwincast ("we", "our", or "us") operates the sports prediction platform available at kwincast.app. We are the data controller for personal information described in this Privacy Policy. This policy explains what personal information we collect, how we use it, and the choices you have.

2. Information We Collect

Account information. When you sign in with Google through our authentication provider (Clerk), we receive your name, email address, and profile picture. We store these to identify you inside the platform.

Prediction and activity data. We store the scoreline predictions you submit, the groups you belong to, and your competition standings.

Technical data. Our hosting providers may automatically log IP addresses, browser type, and request timestamps for security and performance purposes. We do not use this data to build advertising profiles.

3. How We Use Your Information

We use your information to:

• Create and maintain your account.
• Display predictions, standings, and group activity.
• Diagnose bugs and improve the platform.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Legal Basis for Processing

Where UK GDPR or EU GDPR applies, we process personal data on the following bases:

• Performance of a contract — to create your account, run predictions, and display standings and group activity.
• Legitimate interests — to keep the Service secure, prevent abuse, and fix bugs, balanced against your rights.
• Consent — only where we ask for it explicitly (e.g., optional marketing emails, if we offer them in future).

5. Third-Party Services

Kwincast relies on the following sub-processors that may handle your personal data:

• Clerk — authentication and session management. Processes your Google OAuth credentials. Clerk Privacy Policy.
• Vercel — frontend hosting. May log request metadata. Vercel Privacy Policy.
• Railway — backend and database hosting. Railway Privacy Policy.
• TheSportsDB — sports data provider. No personal data is shared with TheSportsDB.

6. International Data Transfers

Your personal data may be processed in the United Kingdom and the United States, where our hosting and authentication providers operate. When data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement and standard contractual clauses built into our sub-processors' agreements.

7. Cookies and Session Storage

Kwincast uses essential cookies and local storage through Clerk to keep you signed in and to protect your account. We do not use advertising or analytics cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

8. Data Retention

When you delete your account, we remove your personal information and prediction activity within 30 days. Groups, seasons, or tournaments you created may remain so other members can continue using them; your name will appear as "Deleted user" where your creator identity would otherwise be shown.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

United Kingdom and EEA. You may have the right to access, correct, delete, or export your data; restrict or object to certain processing; and lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

California (CCPA/CPRA). You may have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising.

All users. To exercise any of these rights, email support@kwincast.app. We will respond within 30 days.

If you are unhappy with how we handle your personal data, you may complain to us at support@kwincast.app. Under UK law (including the Data Use and Access Act 2025, in force from 19 June 2026), you also have the right to raise certain complaints directly with us as the data controller before or instead of contacting the ICO.

10. Children

Kwincast is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us their information, contact us at support@kwincast.app and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of Kwincast after a change constitutes acceptance of the updated policy.

12. Contact

Kwincast is operated by an individual based in the United Kingdom.

Questions about this Privacy Policy or a data request? Email us at support@kwincast.app.