PRIVACY POLICY

What we keep,
and why.

Plain English version of how Call It handles your data. We collect the minimum to run a fantasy game. We never sell it. Coins have no value, so we don't need your wallet.

LAST UPDATED
May 25, 2026
CONTACT
iamarchon@proton.me

01

Who runs Call It

Call It is operated by an independent developer based in the United States. Questions about this policy or your data can be sent to iamarchon@proton.me.

02

Data we collect

Account data

Email address — collected when you sign in with Apple or Google, used to identify your account and contact you about ticket replies.
Display name — chosen during onboarding, shown on leaderboards and in leagues.
Authentication identifier — a Clerk-managed user identifier; no password is stored by us.

Device data

Anonymous device identifier — a random UUID generated locally and stored in your device's secure storage.
Push notification token — issued by Apple (APNs) via Expo Push, used solely to deliver in-app notifications you have opted into. Revocable from device settings.
IP address — observed for rate-limiting and abuse prevention. Not stored beyond standard hosting-provider request logs.

In-app activity

Fantasy team selections, captain/vice-captain picks, power-token assignments.
League memberships, including private join codes and public entries.
Coin balance history (daily login bonuses and other in-game rewards).
Screen-view + explicit-action analytics events (team saved, league joined) tied to your user identifier; no free-text content.
The body of any support ticket you submit, plus follow-up replies.

What we do NOT collect

Phone contacts, photos, location, microphone, or camera data.
Real-name identity documents — no KYC flow.
Payment instrument data — see Section 05.

03

How we use your data

To create and authenticate your account.
To run the fantasy game: score fantasy XIs against live cricket data and settle league rankings.
To deliver push notifications you opted into (lineup announced, match start, captain at the crease, rank change, ticket replies).
To diagnose crashes via Sentry and analyse aggregate usage via PostHog.
To answer support tickets, including via an AI triage system (Anthropic Claude) that suggests resolutions to a human reviewer.
To prevent abuse, fraud, and platform-policy violations.

04

Third-party services we share data with

Each receives only the data it needs to perform its function. We do not sell your data.

Clerk (auth) — email, sign-in events, session metadata.
Neon (Postgres in US) — account, fantasy teams, league memberships, coin transactions.
Vercel (API + admin hosting) — request logs incl. IP and user agent.
Railway (scoring worker) — reads from same database; no direct user requests.
Expo Push / APNs — push token + notification payload.
Sentry (crash) — stack traces (scrubbed) + hashed user identifier.
PostHog (analytics) — event names + user identifier; no ticket bodies.
Anthropic Claude — ticket body + structured snapshot of relevant in-app activity. No training; data discarded after response.
Resend (transactional email) — your address + email body.
SportMonks (cricket data provider) — receives no personal data from us.

05

Coins and in-app currency

Call It uses an in-app currency called “coins” — free promotional currency awarded for daily login, completing onboarding, winning leagues, and other in-game activities. Coins have no real-world monetary value, cannot be redeemed for cash or prizes, cannot be transferred between accounts, and are not purchasable. Coins exist only to provide a sense of progression across matches and seasons.

06

Data retention & account deletion

We retain your account data for as long as your account is active. You can delete your account from inside the app (Me tab → Delete account) — that hard-deletes your Clerk identity and your local user row, which cascades to teams, leagues, push tokens, and support tickets. Sentry error data is retained for 90 days. PostHog product analytics for 12 months.

07

Your rights

Access — view fantasy history and coin ledger inside the App.
Correction — update your display name from the Me tab.
Deletion — Me tab → Delete account. Or email iamarchon@proton.me from your account email if the in-app flow is unavailable; we action requests within 30 days. Some derived data (aggregate analytics, transaction audit trail) may persist in non-personally-identifying form.
Withdrawal of consent — revoke push permission from device settings; revoke analytics by deleting the App.

08

Children, security, transfers

Call It is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has registered, contact us at iamarchon@proton.me and we will delete the account.

Security: TLS in transit, encrypted databases at rest, per-user JWT auth, atomic balance updates to prevent fund-balance races, per-IP rate-limiting on sensitive endpoints. No system is perfectly secure; if we discover a breach affecting your data we will notify affected users and applicable regulators within legal timeframes.

Our infrastructure operates in the United States; certain sub-processors may operate in other countries (see Section 04). The App is available globally in markets where it is listed on the Apple App Store and Google Play. If you use the App from outside the United States, your personal and non-personal data is transferred to, stored in, and processed inside the United States, and may be processed in other countries where we engage service providers. Through your continued use of the App, you consent to this transfer and processing of your data outside your country of residence.

09

Third-party links

The App and our supporting websites (callitsoon.com and its subdomains) may contain links to third-party services — for example, when you tap a Terms / Privacy link inside the App, when we reference SportMonks as our cricket data provider, or when our sign-in flow opens Apple's or Google's authentication pages. This Privacy Policy does not apply to any third-party website, service, or property. We are not responsible for the privacy practices of those third parties, and your interaction with them is governed by their own privacy policies. Review them separately before disclosing personal information to any such third party.

10

California residents' rights

If you reside in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights with respect to your personal information:

Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months.
Right to delete — request deletion of your personal information, subject to limited legal exceptions (fraud prevention, security, regulatory obligations).
Right to correct — request correction of inaccurate personal information.
Right to opt-out of sale or sharing — we do not sell your personal information, and we do not share it for cross-context behavioral advertising. Accordingly, there is nothing to opt out of, but you may confirm this position in writing at any time.
Right to non-discrimination — we will not deny service, charge a different price, or provide a different level of service to you because you exercised any of these rights.

To exercise any right, email iamarchon@proton.me from the email address associated with your account. We will respond within 45 days as required by the CCPA. We may need to verify your identity before processing certain requests; verification uses only the email address on file.

11

Indian residents' rights

If you reside in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) gives you the following rights with respect to your personal data:

Right to access — obtain a summary of the personal data we process about you and the processing activities undertaken.
Right to correction and erasure — request correction of inaccurate or incomplete personal data, and request erasure of personal data that is no longer necessary for the purposes for which it was collected.
Right to grievance redressal — raise any concern about how we handle your personal data and receive a response from us.
Right to nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

For any DPDP-related request or grievance, email iamarchon@proton.me from the email address associated with your account. We will respond within the timeframes required by the DPDP Act and applicable rules. Our nominated Grievance Officer can be reached at the same address.

12

Changes & contact

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes are notified in-app before they take effect.

Questions, complaints, or data requests: iamarchon@proton.me.

THE SHORT VERSION

We collect the bare minimum to run a fantasy game, store it in the US, and never sell it. You can delete your account from inside the app.

© 2026 CALL ITSEE ALSO: TERMS

What we keep,and why.