Privacy Policy

Who we are

Purple Sector and Hoopster (the "apps") are made by Digisaint Private Limited ("Digisaint", "we"), a company registered in India. We're responsible for your personal data in the apps: the "controller" under GDPR and the "data fiduciary" under India's DPDP Act. Questions or requests go to admin@purplesector.club.

The apps share the same features and the same practices, so this one policy covers both. A few features may not be in every app yet, and where a feature isn't available, the data it uses isn't collected.

What we collect

When you create an account

Most features work without an account. If you sign in, we receive:

• a unique identifier from Sign in with Apple (or Google sign-in, where offered), plus the name and email you choose to share. Apple's sign-in may give us a private relay address instead of your real one;
• if you create an account with an email and password, your email address. We store your password only as a secure hash.

What you add

• Profile: username, display name, avatar, bio, country, favourite teams, drivers or players, social links, and, if you choose, your gender, age range and Instagram handle.
• Activity: predictions, rooms, leagues, friends, and journal entries with photos.
• Submissions: wallpapers and watch-party listings.
• Messages: feedback and support messages, with any attachments, and what you type to the in-app AI assistant.
• Connected accounts: your Discord ID and username, if you connect Discord.

Collected automatically

• Identifiers: an app-generated device ID, push and Live Activity tokens, your account ID, and your advertising ID, but only if you allow tracking.
• Usage and diagnostics: features you use, settings, how you found the app (for example, a referral link), crashes and performance.
• Network: IP address and user agent, which our servers log for security, and to estimate your country.
• Purchases: your plan, its status, price, currency and store country, from Apple, Google and RevenueCat.

Only with your permission

• Location: only while you search for nearby watch parties.
• Calendar: only to add events you pick. We don't read your existing events.
• Motion: used on your device to detect driving (to reduce distraction) and for visual effects. Google's ad SDK may also use it to detect fraud. Motion data isn't sent to our servers.
• Photos: "add only" access to save images to your library. When you pick a photo to upload, only that photo is shared.
• Clipboard: checked once during onboarding for a friend's referral code.

How we use it

• To run the apps: accounts, sync, widgets, Live Activities, predictions, social features and subscriptions.
• To send the notifications you turn on. Promotional notifications only if you opt in.
• To fix and improve the apps: crash reports, performance, and how features are used.
• To show ads to free users and measure them.
• To keep people safe: security, fraud prevention, moderation and enforcing our Terms of Use.
• To meet legal obligations, such as tax records.

Ads and your choices

Free users see ads from Google AdMob and its mediation partners (such as Meta Audience Network, Liftoff, InMobi and Unity Ads). Ad-free plans show no third-party ads.

• Apple devices: before any tracking across other companies' apps, we ask using Apple's tracking prompt. If you decline, your ads aren't personalised. To change it later: Settings → Privacy & Security → Tracking.
• EEA, UK and Switzerland: Google's consent tool asks for your choice. To change it later: the app's Settings → Privacy options.
• Android: reset or delete your advertising ID in your device's Google settings.

Who we share it with

We share data with:

• the service providers below, which run parts of the apps;
• other users, for content you choose to make visible;
• Apple or Google, to process purchases.

Beyond that, we share data only when the law requires it, to protect people's safety, or as part of a merger or sale of Digisaint. In that case we'll tell you before a different policy applies.

What others can see

Other users can see:

• your username, display name, avatar, bio, level and favourites;
• your activity in shared rooms, leagues and leaderboards;
• anything you submit for others to see.

We use automated filters and human review. You can report or block users in the app.

AI features

The in-app AI assistant sends what you type, your recent chat history, display name, plan and favourites to Google's Gemini models to write a reply. We store the conversation so you can come back to it. AI replies can be wrong.

Where your data is processed

Digisaint is based in India, and our main servers are in the UK (AWS, London). Our providers also process data in the US, the EU and other countries. When data leaves the EEA, UK or Switzerland, we rely on the EU Standard Contractual Clauses, the UK transfer addendum, or the EU–US Data Privacy Framework.

How long we keep it

• Account, profile and content: until you delete your account.
• Purchase records: 8 years, as Indian tax and company law requires.
• Crash reports: up to 90 days.
• Security logs, email records and analytics: only as long as needed for their purpose. Ask us and we'll delete yours unless the law requires us to keep them.
• Backups: overwritten automatically on a rolling schedule.

Deleting your account

Go to your profile and choose Delete Account, or email us. This:

• removes your account, profile, predictions, friends, settings and uploaded files;
• revokes our Sign in with Apple access and any Discord connection;
• deletes your AI assistant chat history;
• deletes the subscription record linked to your account at RevenueCat.

Some things remain, or need you to ask us separately:

• Shared leaderboards keep your past scores under your display name, so other members' results still add up.
• Published wallpapers and watch parties stay up, but are no longer linked to you. Ask us to remove them.
• Analytics records at Mixpanel and Firebase can remain. Email us and we'll delete them.

Deleting your account doesn't cancel a subscription. Cancel in your Apple or Google account. See the Subscription Terms.

Your rights

Depending on where you live, you can ask to:

• access, correct, delete or export your data;
• object to or restrict some uses of it;
• withdraw consent;
• complain to a data protection authority.

Email admin@purplesector.club from the address on your account, or include your username. We reply within one month, or sooner if your local law requires. It costs nothing.

Children

The apps aren't directed at children. We don't knowingly collect data from children under 13 (16 in the EEA and UK) without a parent's consent. In India, anyone under 18 needs a parent's or guardian's consent to create an account. If you think a child has given us data, email us and we'll delete it.

Security

We use encryption in transit, access controls and monitoring, and store passwords only as secure hashes. If a breach affects your data, we'll tell you and the authorities as the law requires.

Changes

When this policy changes, we update the date at the top. For significant changes, we'll tell you in the app first.