Privacy Policy

1. Introduction

Welcome to Turf ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real-time prediction game and related services (collectively, the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Username, email address, profile picture, and authentication data
• Contact Information: Phone numbers for SMS/voice communication features
• Profile Data: Game preferences, statistics, achievements, and social connections
• Communication Data: Messages, chat logs, and other communications within the platform

2.2 Automatically Collected Information

• Usage Data: Game activity, session duration, feature usage, and interaction patterns
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Location Data: Approximate location information (city/region level) for game matching and analytics. We never use location data for real-time tracking.
• Analytics Data: Performance metrics, crash reports, and user behavior analytics

2.3 Third-Party Information

We may collect information from third-party services when you connect your accounts:

• Social Media: Profile information from Google, Apple, and other connected accounts
• Sports Data: Publicly available sports statistics and game information

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To operate, maintain, and improve our real-time prediction game
• Account Management: To create and manage user accounts, authenticate users, and provide customer support
• Communication: To send notifications, updates, and promotional messages via SMS, email, or push notifications
• Game Features: To enable real-time gaming, matchmaking, leaderboards, and social features
• Analytics: To analyze usage patterns, improve user experience, and develop new features
• Security: To detect fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

No Real Money Wagering: Turf is a free-to-play platform. We do not support or facilitate real-money betting or gambling. Any prizes or rewards offered are promotional in nature and not redeemable for cash unless explicitly stated.

3.1 AI Features

AI Features: Turf includes AI-powered tools that analyze public data and user behavior to offer prediction suggestions, insights, and content recommendations. These features are intended for entertainment purposes and are not a substitute for human judgment.

4. Third-Party Services and Data Sharing

We use various third-party services to operate our platform. Your information may be shared with:

4.1 Essential Service Providers

• Twilio: For SMS messaging, voice communications, and phone number verification
• Ably: For real-time messaging and live game updates
• Vercel: For application hosting and content delivery
• Supabase/PostgreSQL: For secure data storage and database management
• Inngest: For background job processing and automation

4.2 Analytics and Performance

• PostHog: For product analytics and user behavior tracking
• Sentry: For error monitoring and performance tracking

4.3 Authentication Providers

• Google: For Google Sign-In authentication
• Apple: For Apple Sign-In authentication
• Better Auth: For secure authentication management

4.4 Legal and Compliance Sharing

We may disclose your information:

• To comply with legal obligations, court orders, or regulatory requirements
• To protect our rights, property, or safety, or that of our users or others
• In connection with law enforcement requests or investigations
• For fraud prevention and security purposes

5. Business Transfers and Data Portability

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or third party. We will provide notice of such transfer and any choices you may have regarding your information.

Data Portability: You have the right to request a copy of your personal data in a structured, commonly used format. We will provide this data within 30 days of your request, subject to identity verification.

6. Data Security and Retention

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure hosting infrastructure and backup systems

6.2 Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Maintain security and prevent fraud
• Improve our services through analytics (in aggregated, anonymized form)

Account data is typically retained for 3 years after account deletion. Communication data may be retained for up to 1 year for safety and compliance purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Control

• Access: Request information about the personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive a copy of your data in a portable format

7.2 Communication Preferences

• SMS/Voice: Opt out of SMS and voice communications by replying "STOP" or contacting support
• Email: Unsubscribe from marketing emails using the unsubscribe link
• Push Notifications: Disable through your device settings or app preferences

7.3 Account Management

You can:

• Update your profile information and privacy settings
• Manage connected social media accounts
• Delete your account and associated data
• Export your data before account deletion

When you register or use our app, we log your consent to this Privacy Policy and our Terms of Service. This includes timestamps, IP address, and acceptance state, so we can demonstrate your agreement if required by law.

8. International Data Transfers

Our services are hosted in the United States, and your information may be processed and stored in the US or other countries where our service providers operate. By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session and preferences
• Analyze usage patterns and improve our services
• Provide personalized content and features
• Detect and prevent security threats

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit the functionality of our Service.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification (if you have provided an email address)
• Providing an in-app notification

Your continued use of our Service after the effective date of the updated Privacy Policy constitutes acceptance of the revised policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days. For urgent privacy concerns, please mark your communication as "URGENT - Privacy Request."

14. Consent and Agreement

By using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You also consent to our collection, use, and disclosure of your information as described herein.

For SMS/Voice Services: By providing your phone number, you expressly consent to receive SMS messages and voice calls from Turf for account verification, game notifications, and service-related communications. Message and data rates may apply. You can opt out at any time by replying "STOP" to any SMS message.