Privacy Policy
Effective: April 10, 2026 · Last updated: April 10, 2026
1. Who We Are
Called It ("we", "us", "our") is a social prediction game operated by Even Kildal ("the Operator"). Our app is available on iOS and Android. Our website is calledit.one.
For questions about this policy or your data, contact us at hello@calledit.one.
2. What Data We Collect
2.1 Data you provide directly
| Data | Purpose |
|---|---|
| Name | Display name in the app, visible to your group members |
| Email address | Account creation, login, and essential service communications |
| Password (if email signup) | Account authentication — stored as a salted hash, never in plain text |
| Profile photo (optional) | Avatar displayed to group members |
| Bets, votes, and group content | Core app functionality — predictions you create and participate in |
2.2 Data collected automatically
| Data | Purpose |
|---|---|
| Device push token | Sending you notifications about bet results, group activity, etc. |
| Device type and OS version | Ensuring the app works correctly on your device |
| App usage data | Understanding how features are used so we can improve the app |
| Crash reports | Identifying and fixing bugs |
| IP address | Security, fraud prevention, and approximate location for ad delivery |
| Advertising identifier (IDFA/GAID) | Serving relevant ads — only with your explicit consent (iOS ATT) |
2.3 Data we do NOT collect
- We do not collect your contacts or address book
- We do not collect your location (GPS)
- We do not collect financial information (no real money is used in the app)
- We do not read your messages, emails, or any content outside the app
3. How We Use Your Data
We use your data for these purposes and no others:
- Providing the service: Creating your account, joining groups, making predictions, tracking leaderboards, and delivering notifications
- AI features: Generating bet suggestions based on your group's activity (processed via Anthropic's Claude API — see Section 5)
- Advertising: Displaying ads via Google AdMob to non-Pro users
- Payments: Processing Pro subscriptions via RevenueCat and Apple/Google's payment systems
- Improving the app: Analyzing usage patterns and crash reports to fix bugs and build better features
- Communications: Sending essential service emails (account verification, password reset) — we will never send marketing emails without your opt-in consent
4. Virtual Currency (Cred)
Called It uses a virtual currency called "Cred" for in-app predictions. To be clear:
- Cred has no real-world monetary value
- Cred cannot be exchanged, transferred, sold, or converted to real currency
- Cred cannot be withdrawn or cashed out in any way
- Called It is not gambling — no real money is wagered, won, or lost
- We do not collect any financial or banking information from users
5. Third-Party Services
We use the following third-party services to operate Called It. Each has their own privacy policy:
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, and backend infrastructure | All account and app data | Link |
| Google AdMob | Advertising (free users only) | Device ID, IP address, ad interaction data | Link |
| RevenueCat | Subscription management (Pro users) | User ID, purchase history, subscription status | Link |
| Anthropic (Claude API) | AI bet suggestions | Group names, member first names, bet questions and outcomes (no email, no identifiers) | Link |
| Expo / EAS | Push notifications and app distribution | Push token, device type | Link |
| Sentry | Error tracking and crash reporting | Device info, crash logs, user ID | Link |
6. Advertising
Free users see ads served by Google AdMob. These ads may be personalized based on your interests and activity, but only if you grant permission via Apple's App Tracking Transparency (ATT) prompt on iOS.
- If you allow tracking: you will see ads tailored to your interests
- If you deny tracking: you will see non-personalized ads
- Pro subscribers see no ads at all
You can change your tracking preference at any time in your device's Settings → Privacy → Tracking.
7. Data Storage and Security
- Your data is stored on Supabase servers (AWS infrastructure) with encryption at rest and in transit
- Passwords are hashed using bcrypt — we cannot read your password
- All connections use HTTPS/TLS encryption
- We implement Row Level Security (RLS) to ensure users can only access data they are authorized to see
- Anonymous bet votes are stored with technical safeguards to prevent identification of voters
8. Data Retention
- Active accounts: We retain your data for as long as your account is active
- Deleted accounts: When you delete your account, we permanently delete all personal data within 30 days. Anonymized, aggregated data (such as total app statistics) may be retained
- Inactive accounts: Accounts inactive for more than 24 months may be deleted after a notification email
9. Your Rights
9.1 All users
Regardless of where you live, you have the right to:
- Access your personal data — request a copy of all data we hold about you
- Correct inaccurate data — update your name, email, or profile in-app
- Delete your account and all associated data — available in Settings → Delete Account
- Opt out of personalized ads — via iOS Settings → Privacy → Tracking
- Opt out of push notifications — via device Settings or in-app notification preferences
9.2 European users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal basis for processing: We process your data based on (a) your consent, (b) performance of a contract (providing the app service), and (c) legitimate interests (security, analytics, improving the service)
- Right to portability: Request your data in a machine-readable format
- Right to restrict processing: Ask us to limit how we use your data
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing
- Right to lodge a complaint: File a complaint with your local data protection authority
To exercise any of these rights, email hello@calledit.one. We will respond within 30 days.
9.3 California users (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:
- Right to know: What personal information we collect and how it is used
- Right to delete: Request deletion of your personal information
- Right to opt out of sale: We do not sell personal information, so this right does not apply
- Non-discrimination: We will not treat you differently for exercising your rights
10. Children's Privacy
Called It is rated 12+ (Apple App Store) and Teen (Google Play) and is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13.
If we become aware that we have collected data from a child under 13, we will delete that data immediately. If you believe a child under 13 has provided us with personal data, please contact us at hello@calledit.one.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including the United States (where our infrastructure providers operate). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last updated" date at the top of this page
- Notify you via in-app notification or email for significant changes
- Give you the opportunity to review changes before they take effect
Continued use of Called It after changes become effective constitutes acceptance of the updated policy.
13. Contact
For any questions, requests, or concerns about this Privacy Policy or your data:
- Email: hello@calledit.one
- Website: calledit.one