CrossClub ("we", "our", "us") is published by Tiburon Labs LLC. This Privacy Policy explains how we collect, use, and protect your information when you use the CrossClub mobile application.
1. Information We Collect
Account Information: Name, email address, and username when you create an account.
Social Login Data: If you sign in with Google, Apple, or Facebook, we receive your name, email, and provider-specific user ID. We do not receive or store your social media passwords.
Contacts: If you choose to find friends via contacts, we temporarily process email addresses and phone numbers to match existing users. We do not sell or share contact data with third parties.
Push Notification Tokens: Device tokens for delivering notifications you opt into.
Purchase History: Records of subscription purchases for account management.
2. How We Use Your Information
Provide, maintain, and improve the CrossClub service
Display leaderboards and friend activity
Send notifications you have opted into (daily puzzles, challenges, streaks, friend requests)
Process subscription purchases
Detect and prevent fraud or abuse
3. Data Sharing
We do not sell your personal information. We share data only with:
Service Providers: Cloud hosting (Supabase, Fly.io), push notifications (Expo), analytics
Other Users: Your username, display name, and gameplay stats are visible on leaderboards and to friends
Legal Requirements: When required by law or to protect our rights
4. Data Retention
We retain your account data as long as your account is active. You can request deletion of your account and associated data by contacting us at contact@tiburonlab.com.
5. Security
We use industry-standard security measures including encrypted connections (HTTPS), secure database hosting, and row-level security policies to protect your data.
6. Children's Privacy
CrossClub is not directed at children under 13. We do not knowingly collect personal information from children under 13.
7. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting contact@tiburonlab.com. Users in the EU/EEA have additional rights under GDPR, including data portability and the right to lodge a complaint with a supervisory authority.
8. Third-Party Advertising
Free-tier users may see ads served by Google AdMob. AdMob may use device identifiers for ad personalization. You can opt out of personalized ads in your device settings.
9. Changes to This Policy
We may update this policy from time to time. We will notify users of material changes via the app or email.