Privacy policy

Who we are

Fan Battle is made by Upsystems Technologies ("we", "us"). This policy explains what we collect when you use the app, why, and the choices you have. Questions: [email protected].

What we collect

We only collect what the app needs to work:

• Account: your email address and password. Passwords are stored as a secure hash; we can never see them.
• Profile: the display name, username and bio you choose.
• What you post: battles (titles, names and the two photos you upload) and comments.
• Votes: which side you picked in each battle. Other people only ever see the totals, never how you voted.
• Safety: reports you send and people you block.
• Notifications: if you turn them on, a device token so we can send them.

What we don't do

We don't sell your data or use third-party tracking or advertising tools. We don't read your contacts or your location. The app only sees the photos you choose to upload.

How we use it

Our legal basis is providing the service you signed up for and, for safety work, our legitimate interest in keeping the app safe.

• To run your account and show your battles, comments and profile to other users.
• To count votes fairly (one per person per battle).
• To keep the community safe: reviewing reports, removing content that breaks the rules, and hiding people you block.
• To send notifications you asked for.

Who can see what

Battles, photos, comments, your display name, username and bio are visible to other Fan Battle users. Uploaded photos are stored at public web addresses, so anyone with the link can open them. Leaderboards show how many votes your battles received and how many votes you cast. Your email address and which side you voted for are never shown to other users.

Where it is stored

Your data is stored by our hosting provider, Supabase, on servers in the United Kingdom. Supabase processes it only on our instructions.

When the app crashes or hits an error, it sends a technical report to Sentry, on servers in the European Union, so we can fix it. Reports contain the error, the screen it happened on, your device model and operating system, and an anonymous account number. They never contain your email address, your posts or your votes.

Push notifications are delivered through Expo and Google Firebase Cloud Messaging (on Android) or Apple Push Notification service (on iPhone). They receive your device's notification token and the text of the notification, nothing else.

If we add other providers (for example for subscriptions) we will list them here.

How long we keep it

We keep your data while your account exists. When you delete your account we immediately delete your profile, battles, photos, comments, votes, reports, blocks and notification tokens. Vote totals on other people's battles stay as plain numbers that can't be traced back to you. Backups held by our hosting provider are overwritten within their normal backup cycle.

Your rights

You can view and edit your profile in the app at any time, and delete your account from Profile → Delete account (or the account deletion page on our website). You can also ask us for a copy of your data, or to correct or delete it, by emailing [email protected]. If you are in the UK or EU you can complain to your data protection authority (in the UK, the ICO).

Children

Fan Battle is not for children under 13. If you are under the age of digital consent where you live, you need a parent's permission. If you think a child has signed up, contact us and we will delete the account.

Changes

If we change this policy we will update the date at the top and, for important changes, tell you in the app before they take effect.