Privacy Policy

1. Information we collect

Account information

A free account is required to vote. You may sign in with Google or Apple. Through our authentication provider (Supabase Auth), we receive and store:

• Email address (if provided by your identity provider)
• Name or display name (if provided by your identity provider)
• Authentication provider type (e.g., Google or Apple)
• A unique user identifier assigned to your account

App activity

When you use Wheech, we store information needed to run the product, including:

• Matchups you create (players, scoring type, NFL season and week)
• Votes you submit (your choices and timestamps)
• Vote-gate sessions and result unlocks
• Vote credits, voter scores, tiers, streaks, and related engagement data
• Season pass entitlement status (if you purchase a Season Pass)
• Rewarded-ad completion status (e.g., whether an ad was watched or could not be shown)

Information collected automatically

• Timestamps and technical data when your device calls our servers
• In-app event records (for example: matchup submitted, vote gate started, ad completed) stored in our database for product analytics and reliability
• Advertising data — if you use the free tier, Google AdMob may collect device and advertising identifiers and information about ad interactions. See Google’s Privacy Policy.

What we do not collect

We do not intentionally collect:

• Precise location data
• Contacts, photos, microphone, or camera data
• Your fantasy league rosters from external platforms
• Payment card numbers (purchases are processed by Google Play or the Apple App Store)

2. How we use information

We use the information above to:

• Create and authenticate your account
• Provide core features (matchups, voting, crowd-based results)
• Enforce vote-gate rules and reduce abuse (for example, preventing voting on matchups you submitted)
• Operate monetization (display ads, validate Season Pass purchases, remove ads for pass holders)
• Calculate voter engagement scores, streaks, and related features
• Maintain, secure, and improve the Service
• Comply with legal obligations

3. Third-party services

We use trusted providers to operate Wheech. They process data on our behalf as described below:

• Supabase — database, authentication, and API hosting. Supabase Privacy Policy
• Google — sign-in (OAuth) and, on the free tier, advertising through AdMob. Google Privacy Policy
• Apple — sign-in (OAuth) and, on iOS, in-app purchases. Apple Privacy Policy
• Google Play / Apple App Store — payment processing and purchase receipts for the Season Pass
• Tank01 (via RapidAPI) — NFL player, schedule, and stats data fetched by our servers only; your device does not send personal information directly to Tank01

We do not sell your personal information.

4. Advertising

Free users may see banner ads on certain screens and a rewarded video ad before viewing matchup results. Ads are served by Google AdMob. AdMob and its partners may use cookies, device identifiers, and similar technologies to deliver and measure ads, including personalized ads where permitted by your device settings and applicable law.

Users who purchase a Season Pass for the current NFL season do not see banner or rewarded ads. You can limit ad personalization on Android through your device settings and Google Ads Settings.

5. In-app purchases

Wheech offers a one-time Season Pass (currently $5.99 USD per NFL regular season) that removes ads and unlocks additional features. Payments are processed by Google Play or the Apple App Store. We receive purchase verification data from the store — not your full payment card details. Restore purchases is supported where available on your platform.

6. Data retention

We retain account and activity data for as long as your account is active or as needed to provide the Service. We may retain certain records longer where required for security, fraud prevention, legal compliance, or legitimate business purposes. Aggregated or de-identified data may be kept indefinitely.

7. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) between the app and our servers and access controls on our infrastructure. No method of transmission or storage is completely secure.

8. Children’s privacy

Wheech is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

Account deletion: Uninstalling the app does not delete your server-side account or activity. To request account deletion or a copy of your data, email contact@ggrls.co. We will verify your request and respond within a reasonable time.

California residents: We do not sell personal information. You may request disclosure or deletion as described above.

EEA / UK residents: GGRLS Software LLC is the data controller for personal information processed through Wheech. Contact us at contact@ggrls.co to exercise your rights.

10. International transfers

Wheech is operated from the United States. Your information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws than your country of residence.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated in the app or by other reasonable means where required by law.

12. Contact us

Questions about this Privacy Policy or our data practices:

GGRLS Software LLC
Email: contact@ggrls.co
Website: wheech.app