Privacy Policy

1. Introduction

Magic Spark Builders, LLC ("Pitlandia," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Pitlandia mobile application and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use the Service.

2.1 Information You Provide

• Phone Number: We collect your mobile phone number for SMS-based authentication and account security purposes.
• Display Name/Username: You may provide a display name or username to identify yourself on leaderboards and within the Service.
• Race Picks and Predictions: We collect the race picks, predictions, and selections you submit through the Service.
• Communications: If you contact us directly, we may receive additional information such as the contents of your message and any attachments you send.

2.2 Automatically Collected Information

• Device Information: We collect information about your mobile device, including device type, operating system version, unique device identifiers, and mobile network information.
• Usage Data: We collect information about how you interact with the Service, including features used, pages viewed, time spent in the app, and other analytics data.
• Location Information: We may collect general location information (such as country or region) based on your IP address or device settings. We do not collect precise geolocation data.
• Cookies and Similar Technologies: We use essential cookies for authentication and session management, and analytics cookies to understand how users interact with the Service. You may disable analytics cookies through your device or browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To create and manage your account, authenticate your identity, process race picks, generate leaderboards, and deliver core Service functionality.
• Improve and Optimize: To understand how users interact with the Service, identify bugs and issues, analyze usage patterns, and improve features and performance.
• Communications: To send you authentication codes via SMS, important Service updates, technical notices, and customer support responses.
• Security and Fraud Prevention: To detect, prevent, and address security incidents, fraudulent activity, and violations of our Terms of Service.
• Compliance: To comply with legal obligations, respond to lawful requests from authorities, and enforce our agreements.
• Analytics: To track product usage, measure feature adoption, and understand user behavior through analytics tools.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following limited circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting, authentication, and backend infrastructure
• Vercel: Web hosting and content delivery
• PostHog: Product analytics and usage tracking
• RevenueCat: Subscription management and payment processing
• OneSignal: Push notifications and messaging

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

4.3 Business Transfers

If Pitlandia is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you, such as overall leaderboard statistics, aggregate usage metrics, or demographic trends.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Deletion: When you delete your account, we will immediately delete your personal data (phone number, display name, and other identifying information). However, your race picks may be retained in anonymized form to maintain the integrity of historical leaderboards and statistical data. Anonymized picks cannot be traced back to you.

Legal Retention: We may retain certain information for longer periods if required by law, such as transaction records for tax purposes or data needed to resolve disputes.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

6.1 General Rights

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You have the right to correct inaccurate or incomplete personal data.
• Deletion: You have the right to request deletion of your personal data (right to be forgotten), subject to certain legal exceptions.
• Objection: You have the right to object to certain processing of your personal data.
• Withdraw Consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time.

6.2 European Union Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Restriction of Processing: You have the right to request restriction of processing of your personal data under certain circumstances.
• Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country.

Legal Basis for Processing (GDPR): We process your personal data based on the following legal grounds:

• Performance of a contract (to provide the Service to you)
• Legitimate interests (to improve and secure the Service)
• Consent (for analytics cookies and optional features)
• Legal obligations (to comply with applicable laws)

6.3 California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal data we have collected about you.
• Right to Delete: You have the right to request deletion of your personal data, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the "sale" of your personal data. Note: We do not sell personal data.
• Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

6.4 Exercising Your Rights

To exercise any of these rights, please contact us at legal@pitlandia.com or use the account deletion feature in the Service. We will respond to your request within the time period required by applicable law (typically 30 days).

We may ask you to verify your identity before processing your request to ensure the security of your personal data.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and monitoring
• Access controls and authentication mechanisms
• Secure infrastructure provided by trusted service providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that differ from those in your country.

For users in the European Economic Area (EEA), UK, or Switzerland: We ensure that such transfers comply with applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

9. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at legal@pitlandia.com. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information.

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your information.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service.

11.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, session management, and core Service functionality. These cookies cannot be disabled without affecting the Service.
• Analytics Cookies: Used by PostHog to collect information about how you use the Service, including pages visited, features used, and time spent in the app. These cookies help us improve the Service.

11.2 Managing Cookies

You can manage your cookie preferences using the tool below. Changes take effect immediately and are saved to your browser.

You can also manage cookie preferences through your device or browser settings. However, disabling essential cookies may prevent you from using certain features of the Service.

12. Do Not Track Signals

Some web browsers and devices permit you to broadcast a preference that you not be "tracked" online. At this time, the Service does not respond to Do Not Track (DNT) signals due to the lack of industry standards for DNT interpretation.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify you by email (if you have provided one) or by posting a prominent notice in the Service before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For EU/EEA Users: If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to lodge a complaint with your local data protection authority.