Privacy Policy

This Privacy Policy explains how Clutch ("we", "us", or "our") collects, uses, and protects your personal information when you use the Clutch mobile application and website (playclutch.app).

1. Information We Collect

We collect the following types of information:

• Account information: your email address, username, and authentication information. Password authentication is handled by our authentication provider.
• Usage data: your predictions, group memberships, scores, and in-app activity.
• Payment and purchase data: in-app purchases are processed by Apple App Store or Google Play, as applicable. We use RevenueCat to manage purchase status, purchase events, and app user identifiers. We do not collect or store full payment card details.
• Device information: device type, operating system, and push notification tokens for sending alerts.

2. How We Use Your Information

• To provide and operate the Clutch service
• To process payments and manage your access
• To send you matchday reminders, results, and important account notifications
• To calculate and display prediction scores and leaderboard rankings
• To improve the app and fix issues

3. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase: our database and authentication provider
• Apple App Store and Google Play: payment processing and refund handling for in-app purchases, where applicable
• RevenueCat: our in-app purchase management provider
• Resend: our email delivery provider
• API-Football: we use this service to retrieve match fixtures and results. No personal data is shared with them.
• Cloudflare: we use Cloudflare to host and secure parts of our website, web pages, and routing.
• Expo / EAS: we use Expo services for app builds, updates, and push notification tooling where applicable.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal, security, fraud-prevention, payment, refund, tax, accounting, or transaction-record purposes.

5. Account Deletion

You may request deletion of your Clutch account and associated app data at any time by emailing hello@playclutch.app from the email address linked to your Clutch account.

To request deletion, use the subject line Account deletion request and include your Clutch username if available. We may ask you to verify ownership of the account before processing the request.

When your deletion request is processed, we will delete or anonymize your account, profile information, username, group memberships, predictions, leaderboard records, push notification tokens, and related app data associated with your account.

We may retain limited information where required for legal, security, fraud-prevention, payment, refund, tax, accounting, or transaction-record purposes. Any retained data will be kept only for as long as reasonably necessary for those purposes.

Account deletion requests are usually processed within 30 days after we verify the request. You may also email hello@playclutch.app to request deletion of specific personal data where technically and legally possible, without deleting your full account.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at hello@playclutch.app.

7. Cookies and Tracking

The Clutch mobile app does not use cookies. Our website (playclutch.app) may use minimal cookies for functionality purposes only. We do not use advertising or tracking cookies.

8. Children's Privacy

Clutch is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

9. Security

We use reasonable technical and organizational security measures, including encrypted connections (TLS), secure authentication via Supabase, and access controls designed to protect personal information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Clutch after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us at hello@playclutch.app.