CFB Social ("The Gridiron," "we," "us," or "our") is operated by Donkey Ideas. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services.

1. Information We Collect

Account Information

When you create an account, we collect your email address, username, display name, and school affiliation. If you sign in with Google or Apple, we receive your name and email from those providers.

Profile Information

You may optionally provide a profile photo, bio, and banner image. This information is publicly visible to other users.

User Content

We collect posts, replies, predictions, votes, and other content you create on the platform. This content is publicly visible unless removed by moderation.

Usage Data

We automatically collect device type, browser, operating system, and general usage patterns to improve the experience.

Push Notification Tokens

If you enable push notifications on the mobile app, we store your device push token to deliver notifications. You can disable notifications at any time in Settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the platform
• Create and manage your account
• Display your profile and content to other users
• Send push notifications (with your consent)
• Moderate content and enforce community guidelines
• Calculate dynasty rankings, XP, and achievements
• Improve the platform and develop new features
• Respond to support requests and inquiries

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Public content: Posts, profiles, and votes are publicly visible
• Service providers: We use Supabase for data storage and authentication, and Expo for push notifications
• Legal requirements: We may disclose information if required by law or to protect our rights
• With your consent: We may share information with your explicit permission

4. Data Storage and Security

Your data is stored securely using Supabase (powered by PostgreSQL) with row-level security policies. Authentication tokens are stored securely on your device. We use industry-standard security measures to protect your information, but no method of transmission over the internet is 100% secure.

5. Your Rights and Choices

You have the right to:

• Access and update your profile information in Settings
• Delete your account and associated data
• Disable push notifications
• Control notification preferences
• Request a copy of your data by contacting us

6. Account Deletion

You can delete your account at any time from the Account Deletion page. When you delete your account, we will delete your profile and personal information and disassociate your content. Some anonymized content may remain for the integrity of community discussions. Account deletion is permanent and cannot be undone.

7. Children's Privacy

CFB Social is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

8. Third-Party Services

Our platform integrates with the following third-party services:

• Supabase (authentication and data storage)
• Google Sign-In (optional authentication)
• Apple Sign-In (optional authentication)
• ESPN (public sports data for live scores)
• Expo (push notifications and mobile app infrastructure)

Each service has its own privacy policy governing how they handle your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the platform or via email. Continued use of CFB Social after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

info@donkeyideas.com