Privacy Policy

1.1 Authentication Information

When you create an account using our supported authentication providers (Google or Twitter), we collect:

• Email address - Used for account creation, communication, and account recovery
• Name - Your display name from the authentication provider
• Profile image/avatar - Your profile picture from the authentication provider
• Provider account ID - Unique identifier from Google or Twitter
• Authentication tokens - OAuth access tokens, refresh tokens, and related authentication data required for secure login

1.2 Account Information

• Username - Automatically generated unique username
• User ID - Unique identifier for your account in our system
• Account creation and update timestamps

1.3 Prediction and Activity Data

• Prediction submissions - Your forecasts and choices on various events
• Prediction scores - Accuracy scores based on your prediction performance
• Event interactions - Which events you view, participate in, or bookmark
• Category preferences - Types of events you frequently engage with
• Submission timestamps - When you make or update predictions

1.4 Usage and Technical Information

• Device information - Browser type, operating system, device identifiers
• Usage patterns - How you navigate and interact with the Service
• Performance data - Page load times, errors, and technical diagnostics
• IP address - For security, fraud prevention, and analytics
• Session data - Login sessions, duration of use, and activity patterns

1.5 Automatically Collected Data

• Cookies and similar technologies - For authentication, preferences, and analytics
• Log files - Server logs containing access times, pages viewed, and errors
• Analytics data - Aggregated usage statistics and performance metrics

2.1 Service Provision

• Account management - Creating, maintaining, and authenticating your account
• Prediction platform - Enabling you to make and track predictions
• Scoring and statistics - Calculating accuracy scores and providing analytics
• Content personalization - Showing relevant events and categories based on your interests

2.2 Service Improvement

• Performance optimization - Improving Service speed, reliability, and functionality
• Feature development - Creating new features and enhancing existing ones
• Bug fixes - Identifying and resolving technical issues
• User experience - Analyzing usage patterns to improve interface and features

2.3 Communication

• Service updates - Notifying you about important changes or new features
• Security alerts - Informing you about account security matters
• Support - Responding to your questions and providing assistance

2.4 Security and Legal Compliance

• Fraud prevention - Detecting and preventing unauthorized access or misuse
• Security monitoring - Protecting against threats and maintaining Service integrity
• Legal compliance - Meeting legal obligations and enforcing our Terms of Use

3.1 Authentication Providers

• OAuth data exchange - Sharing minimal required data with Google or Twitter for authentication purposes only
• Account verification - Confirming your identity through the authentication provider

3.2 Service Providers

• Technical infrastructure - Database hosting, server management, and technical maintenance
• Analytics services - Aggregated, anonymized usage statistics for Service improvement
• Security services - Fraud detection and prevention tools

3.3 Legal Requirements

• Legal compliance - When required by law, regulation, or valid legal process
• Safety protection - To protect the safety and rights of users, ourselves, or others
• Enforcement - To enforce our Terms of Use or investigate violations

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring organization, subject to equivalent privacy protections.

4.1 Technical Safeguards

• Encryption - All data is encrypted in transit and at rest using industry-standard protocols
• Secure authentication - Secure session management
• Access controls - Strict limitations on who can access user data within our organization
• Regular security audits - Ongoing monitoring and testing of our security systems

4.2 Operational Security

• Employee training - Regular privacy and security training for all staff
• Data minimization - Collecting only necessary information for Service functionality
• Secure development - Security-first approach to software development and deployment

4.3 Incident Response

• Monitoring - Continuous monitoring for security threats and breaches
• Response procedures - Established protocols for handling security incidents
• User notification - Prompt notification of users in case of any data breaches

5.1 Retention Periods

• Account data - Retained while your account is active and for up to 1 year after account deletion
• Prediction data - Retained for historical accuracy tracking and Service improvement
• Authentication tokens - Refreshed regularly and expired tokens are deleted immediately
• Usage logs - Retained for up to 2 years for security and analytics purposes

5.2 Account Deletion

You have the right to delete your account and associated data at any time:

• Email request - Contact us directly to request account deletion
• Complete removal - We will delete all your personal information within 30 days of your request
• Legal retention - Some data may be retained longer if required by law or for legitimate business purposes

5.3 Data Portability

• Data export - You may request a copy of your data in a portable format
• Processing time - Data export requests are processed within 30 days

6.1 Access and Control

• View your data - Access all personal information we have about you
• Download data - Obtain a copy of your data in a machine-readable format

6.2 Correction and Deletion

• Data correction - Request correction of inaccurate personal information
• Account deletion - Permanently delete your account and associated data
• Selective deletion - Request deletion of specific data categories where applicable

6.3 Objection and Restriction

• Processing objection - Object to certain types of data processing
• Restriction requests - Request limitations on how your data is used
• Withdrawal of consent - Withdraw consent for data processing where consent is the legal basis

7.1 Types of Cookies

• Essential cookies - Required for basic Service functionality and security
• Authentication cookies - For maintaining your login session
• Preference cookies - Remembering your settings and customizations
• Analytics cookies - Understanding how users interact with the Service

7.2 Cookie Management

• Cookie settings - Control cookie settings through your browser
• Third-party cookies - We do not use third-party advertising cookies

8.1 Age Requirements

The Service is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13.

8.2 Parental Consent

Users under 18 must have parental or guardian consent to use the Service.

8.3 Child Data Protection

If we become aware that we have collected data from a child under 13 without proper consent, we will promptly delete such information.

9.1 Data Location

Your information may be processed and stored in various countries where our service providers operate.

9.2 Transfer Safeguards

We ensure that any international transfers of personal data are protected by appropriate safeguards, including standard contractual clauses and adequacy decisions.

10.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.

10.2 Notification of Changes

• Material changes - We will notify you through the Service before significant changes take effect
• Minor updates - Non-material changes will be posted with an updated "last modified" date
• Continued use - Your continued use of the Service after changes indicates acceptance of the updated policy

10.3 Version History

Previous versions of this Privacy Policy are available upon request.

11.1 Authentication Providers

We integrate with Google and Twitter for authentication. Their privacy policies govern how they handle your information:

• Google Privacy Policy - https://policies.google.com/privacy
• Twitter Privacy Policy - https://twitter.com/privacy

11.2 External Links

Our Service may contain links to external websites. We are not responsible for the privacy practices of these third-party websites.

15.1 Payment Processors

• Apple App Store - For iOS devices, all payment transactions are processed by Apple through the App Store. We do not receive or store your credit card information, billing address, or other payment details.
• Google Play Store - For Android devices, all payment transactions are processed by Google through the Google Play Store. We do not receive or store your credit card information, billing address, or other payment details.
• Payment security - Your payment information is handled securely by Apple and Google in accordance with their respective privacy policies and PCI-DSS compliance standards.

15.2 RevenueCat Integration

We use RevenueCat, a third-party service, to manage in-app subscriptions and transactions. RevenueCat collects and processes:

• User identifier - Your unique Tahminn user ID to link subscription entitlements to your account
• Transaction data - Subscription receipts, product IDs, transaction IDs, and purchase timestamps
• Device information - Device type, operating system, and app version for subscription validation
• Purchase platform - Whether the subscription was purchased through Apple App Store or Google Play Store

For more information, please review RevenueCat's Privacy Policy at https://www.revenuecat.com/privacy

15.3 Subscription Data We Collect

When you start, renew, or change a Tahminn Pro subscription, we receive and store the following information from RevenueCat webhooks:

• Subscription status - Active, cancelled, expired, or past due — used to determine whether Pro features are unlocked for your account
• Subscription product - Which Tahminn Pro tier was purchased (Weekly or Monthly) and the associated entitlement identifier
• Subscription dates - Start date, current period end date, and (if cancelled) the cancellation date
• Price and currency - The amount paid and currency used (for record-keeping only)
• Subscription event history - Records of initial purchase, renewals, cancellations, billing issues, and refunds

15.4 How Subscription Data Is Used

• Entitlement validation - Determining whether your account has access to Pro features such as creating prediction events, joining private prediction groups, and the PRO profile badge
• Renewal management - Tracking renewal dates and updating your account when the subscription auto-renews or expires
• Fraud prevention - Detecting and preventing fraudulent transactions, refund abuse, or unauthorized entitlement claims
• Service analytics - Aggregated, anonymized metrics about subscription performance (conversion rates, churn, plan mix) used to improve the Service
• Customer support - Resolving subscription-related issues and responding to inquiries about renewals, cancellations, or refunds

15.5 Subscription Cancellation and Refunds

• You can cancel your Tahminn Pro subscription at any time through your device's account settings (App Store for iOS, Google Play Store for Android). Cancellation takes effect at the end of your current billing period; your Pro entitlement remains active until that date. We do not process subscription cancellations directly through the Tahminn app.
• All refund requests must be submitted through the platform where you purchased the subscription (Apple App Store or Google Play Store). If a refund is approved, your Pro entitlement will be revoked.
• We receive notification of cancellations, refunds, and billing events through RevenueCat webhooks to keep your subscription state accurate in real time.

15.6 Data Retention for Subscriptions

• Subscription transaction records - Retained for the lifetime of your account plus 7 years for tax and legal compliance purposes
• Subscription status history - Past entitlement periods and event history retained as part of your account records
• Transaction IDs - Stored permanently for fraud prevention and dispute resolution

15.7 Children and Subscriptions

• If you are under 18, you must have permission from a parent or guardian before purchasing a Tahminn Pro subscription.
• Apple and Google provide parental controls to manage and restrict in-app subscriptions for minors.