GAMEDAY GATHOS

PRIVACY POLICY

This privacy policy applies to the Game Day Gatho's app for mobile devices, together with any related services operated by Adam Guinea (collectively, the "Application"). Adam Guinea is hereby referred to as the "Service Provider".

To provide the Application's core features — creating and joining map-pinned watch parties and chatting in event threads — the Service Provider collects the following information.

Information you provide directly:

• Account information — your email address. If you sign in with Google or Apple, the Service Provider also receives your display name and, where available, a profile photo from that provider. Apple may relay a private email address if you choose to hide your email.
• Profile information — a nickname and a favorite sport that you set and can edit at any time in the app.
• Content you create — watch-party events (including the topic, description, date/time, and the map location you choose for the event) and the messages you send in event chat threads.
• Safety and moderation data — if you block another user, the Service Provider stores a record of that choice (the blocked user's identifier and nickname) to enforce it. If you report content, the Service Provider stores the report, including a copy of the reported content, so it can be reviewed and acted upon.

Information collected automatically:

• Location — see the Location Information section below.
• Technical and device data — when the Application communicates with its backend services (provided by Google Firebase), standard technical information such as your device's Internet Protocol (IP) address, device type, and operating system may be processed to deliver and secure the service. The Application also uses Apple App Attest and Google Play Integrity to verify that requests come from a genuine, untampered app.

The Service Provider does not use third-party advertising, and does not run analytics or crash-reporting SDKs that track the pages you view or the time you spend in the Application.

Gameday Gathos is a social application. By design, certain information is visible to other users:

• Your nickname is shown on events you host or join, on your chat messages, and to anyone you block (so they can be informed they were blocked, where applicable).
• Events you create — including the topic, description, date/time, and map location — are visible to all signed-in users so they can discover and join nearby watch parties.
• Messages you send in an event chat are visible to the other participants of that event.

Please do not post personal information about yourself or others that you do not want to be visible to other users.

The Application does not use cookies or advertising/tracking technologies. The third-party SDKs it relies on (such as Google Firebase) may store identifiers on your device that are necessary to authenticate you, secure requests, and operate the service. Where required by applicable law, the Service Provider will obtain consent before using any non-essential tracking technologies, which the Application does not currently use.

The Application uses location in two distinct ways:

• Your device location (foreground only) — with your permission, the Application requests your device's location while you are using the app ("when in use") solely to center the map on watch parties near you. The Application does not collect or track your location in the background. You can decline this permission; the map still works, it simply won't auto-center on you.
• Event locations you choose — when you create a watch party, you select a location for the event (assisted by the Google Places service for address suggestions). That chosen location is stored with the event and, as described above, is visible to other users so they can find and join the party. This is a location you deliberately publish, not a record of where you are.

You can exercise several of your rights directly within the Application:

• Correction — you can edit your nickname and favorite sport at any time from the Profile screen.
• Deletion — you can permanently delete your account from the Profile screen (under "Danger Zone"). This deletes your account and profile information (email, display name, photo, nickname, favorite sport) and your block list. Content you have already posted — watch-party events you created and messages you sent — may remain visible to other users after deletion; contact the Service Provider if you need that content removed as well.
• Blocking — you can block and unblock other users from a watch party's detail screen and manage your block list in the app.

You may also request access to, correction of, or deletion of your personal data, or withdraw consent where processing is based on consent, by contacting the Service Provider at the email below.

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at gamedaygathos@gmail.com.

The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.

For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to email. The information the Service Provider requests will be retained and used as described in this privacy policy.

The Application relies on trusted third-party service providers to operate. These providers process your personal data on the Service Provider's behalf, as data processors, only to deliver the service — not for their own independent purposes:

• Google Firebase (Authentication, Cloud Firestore, App Check) — stores your account, profile, events, chat messages, block list, and reports, and authenticates your sign-in. Your personal data and content are stored on Google's infrastructure.
• Google Sign-In and Sign in with Apple — used, at your choice, to authenticate you and provide your name/email/photo.
• Google Maps / Places — used to display the map and suggest locations when you create an event.

Beyond these providers, the Service Provider does not sell your personal data and shares it only as described in this privacy statement.

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• Google Firebase (Authentication, Firestore, App Check)
• Google (Sign-In, Maps & Places)
• Sign in with Apple
• Expo

The Service Provider may disclose User Provided and Automatically Collected Information:

• As required by law, such as to comply with a subpoena, or similar legal process
• When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
• With their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at gamedaygathos@gmail.com.

The Service Provider retains personal data based on its necessity for the stated purposes:

• Account and profile data (email, display name, photo, nickname, favorite sport) and your block list — retained while your account exists and deleted promptly when you delete your account in-app.
• Content you posted (events you created, chat messages you sent) — retained while it remains relevant to other users; it may persist after you delete your account. Contact the Service Provider to request its removal.
• Moderation and safety records (reports) — retained as needed to keep the service safe and to comply with legal obligations.
• Data required for legal compliance — retained as long as required by applicable law.

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at gamedaygathos@gmail.com. Please note that some User Provided Data may be required for the Application to function properly.

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (gamedaygathos@gmail.com) so that they will be able to take the necessary actions.

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at gamedaygathos@gmail.com.

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email: