Privacy Policy

Effective Date: February 27, 2026

CrossClub ("we", "our", "us") operates the CrossClub mobile application. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

• Account Information: Name, email address, and username when you create an account.
• Social Login Data: If you sign in with Google, Apple, Facebook, X, or Instagram, we receive your name, email, and provider-specific user ID. We do not receive or store your social media passwords.
• Gameplay Data: Puzzle completion times, scores, hints used, streaks, and reward points.
• Contacts: If you choose to find friends via contacts, we temporarily process email addresses and phone numbers to match existing users. We do not sell or share contact data with third parties.
• Push Notification Tokens: Device tokens for delivering notifications you opt into.
• Purchase History: Records of subscription purchases for account management.

2. How We Use Your Information

• Provide, maintain, and improve the CrossClub service
• Display leaderboards and friend activity
• Send notifications you have opted into (daily puzzles, challenges, streaks, friend requests)
• Process subscription purchases
• Detect and prevent fraud or abuse

3. Data Sharing

We do not sell your personal information. We share data only with:

• Service Providers: Cloud hosting (Supabase, Fly.io), push notifications (Expo), analytics
• Other Users: Your username, display name, and gameplay stats are visible on leaderboards and to friends
• Legal Requirements: When required by law or to protect our rights

4. Data Retention

We retain your account data as long as your account is active. You can request deletion of your account and associated data by contacting us at michael.charlebois@gmail.com.

5. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure database hosting, and row-level security policies to protect your data.

6. Children's Privacy

CrossClub is not directed at children under 13. We do not knowingly collect personal information from children under 13.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting michael.charlebois@gmail.com. Users in the EU/EEA have additional rights under GDPR, including data portability and the right to lodge a complaint with a supervisory authority.

8. Third-Party Advertising

Free-tier users may see ads served by Google AdMob. AdMob may use device identifiers for ad personalization. You can opt out of personalized ads in your device settings.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via the app or email.

10. Contact Us

If you have questions about this Privacy Policy, contact us at michael.charlebois@gmail.com.