Privacy Policy

What we collect

You What? collects the information needed to run your account and leagues:

• Email address — used to create and secure your account, for account-related emails, and for optional football emails or app news when you specifically opt in
• Username — your display name, visible to other players
• Predictions (takes) and results — your agree/disagree calls, points earned, and win/loss record
• League membership — which leagues you've joined, via invite codes
• Basic technical information — session tokens, used to keep you signed in; and on the mobile app, device tokens used to deliver notifications
• App usage data — which pages and features you use within the app, plus a random browser session ID and optional campaign labels for the public signup journey, so we can understand how You What? is used and improve it

How we use it

We use your information to:

• create and manage your account
• show leaderboards and league standings
• save and score your predictions
• respond to support or moderation requests
• understand how the app is used, so we can improve it
• send football emails, including take reminders and Weekly Verdicts, only when you have chosen to receive them

Your username, points, win rate, and league position may be visible to other players in leagues you join. Your email address is never shown to other users.

Our basis for using your information this way is that it's necessary to provide the app to you (the service you've signed up for), and, for app usage data, our legitimate interest in understanding and improving You What?. Optional football and app-news emails are based on your consent. You can change your email choices in Profile or unsubscribe from any optional email at any time.

Community safety

Usernames, league names, league membership, invite codes, and support messages may be reviewed if we're investigating a report, enforcing the community rules in our Terms of Use, or protecting users from abuse or misuse.

If moderation action is needed, we may remove inappropriate names, remove users from leagues, delete leagues, or suspend or delete accounts.

Who we share data with

We do not sell personal information that identifies you. We may share aggregated, anonymized insights derived from user activity (for example, general trends across groups of users) that cannot reasonably be used to identify any individual.

We share limited data with the service providers that help us run the app, strictly to operate the service:

• Supabase — database, authentication, and backend infrastructure
• Google Firebase — delivering mobile push notifications
• Resend — sending account-related emails (e.g. signup confirmation and password reset) and optional emails you have opted into
• Vercel — hosting the app
• Cloudflare — domain and email routing

These providers only process your data on our instructions, to help operate You What? — none of them are permitted to use it for their own purposes.

Your data may be processed and stored in countries other than the one you're in, as part of our service providers' standard infrastructure (including the United States and the European Economic Area). These providers maintain appropriate safeguards for handling personal data.

Data retention and deletion

You can delete your account at any time from your Profile. Your account, profile, votes and predictions are permanently deleted, and you are removed from any leagues you currently belong to. If you created a league, it remains for the other members but is no longer linked to you. This cannot be undone.

If you can't access the app — for example you've lost your device or can't sign in — email support@youwhat.app and we'll process the deletion manually. We'll need to verify that you own the account first, and requests are processed within 30 days.

We keep your personal data while your account is active. When you delete your account, your data is deleted as described above, except that your final position and summary statistics may remain in completed-season leaderboards and league tables to preserve the historical standings. Your username is replaced with “Deleted user”, and no profile information is shown with the entry. We may also retain limited information for a short period where needed for legal, security, or fraud-prevention purposes.

If you sign up again later using the same email address, it will be treated as a brand new account with no connection to the old one.

Your rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal data, or to object to or restrict how we use it. You can exercise most of these directly by editing your profile or using the delete-account option; for anything else, contact us using the details below.

If you're unhappy with how we've handled your data, you also have the right to lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO), at ico.org.uk.

Children's privacy

You What? is intended for users aged 18 and over. Users aged 13 to 17 should have a parent or guardian's permission to use the app. We don't knowingly collect personal information from anyone under 13. If you believe someone under 13 has provided us with personal information, please contact us and we'll remove it.

Changes to this policy

We may update this policy as the app, its features, or its service providers change. We'll update the "last updated" date above whenever we do.

Who's responsible for your data

You What? is an independently-run project. Any references to "we," "us," or "our" throughout this policy refer to You What? and the person operating it. For any data protection queries, use the contact details below.

Contact

Questions about this policy, or want to exercise your data rights? Reach out at support@youwhat.app.