1. Who we are

The data controller for ToldYa! is Zuki Apps. Contact details are at the end of this Policy.

This Policy applies to the ToldYa! app (iOS and Android) and the legal pages we publish for the product. It does not cover third-party websites or app stores, which have their own policies.

2. Information we collect

We collect information you provide and information generated when you use the Service:

• Account data: email address, username, display name, password (stored in hashed form by our authentication provider), optional profile bio and avatar image, language preference, and optional invitation-related metadata when invitation codes are used.
• Social & content data: predictions (text, category, target dates, status, visibility), votes, likes, comments, retweets/shares, follower relationships, reputation or category scores, and direct messages you send or receive.
• Resolution & dispute data: outcomes submitted by prediction authors (including optional notes and evidence links), resolution timestamps, dispute reports filed by other members, and moderation-queue records related to outcomes.
• Private room data: room names, membership lists, invitations, and predictions scoped to a room (visible only to room members, excluded from public feeds and global leaderboards).
• Safety & moderation data: content reports, block lists, automated content-filter signals, and enforcement actions taken on your account or content.
• Media: photos or videos you attach to predictions, if you choose to upload them.
• Device & usage data: device type, operating system, app version, push notification tokens (if you enable notifications), IP-derived region (where available), crash logs, and analytics events via Google Firebase Analytics and Crashlytics.
• Support & safety: information you send when contacting support or reporting content or users.
• Communications metadata: timestamps and delivery status for notifications and messages.

3. How we use your information

We use personal data to provide and secure the social network, including:

We do not sell your personal information. We do not use your data for third-party advertising profiles in the current version of the app.

• Create and manage your account and profile
• Display feeds, Arena views, voting results, comments, and notifications
• Operate mandatory prediction resolution, overdue reminders, and dispute review
• Operate private rooms, membership, and room-scoped feeds
• Operate follower features, search, and reputation scoring (excluding room-only predictions from global stats)
• Send push or in-app notifications you have enabled (including resolution reminders)
• Detect abuse, enforce our Terms, and respond to reports and blocks
• Maintain reliability, debug crashes, and improve the Service
• Comply with law and respond to lawful requests

4. Legal bases (where applicable)

Depending on your location, we rely on: performance of a contract (providing the Service you request); legitimate interests (security, fraud prevention, product improvement, and community safety, balanced against your rights); consent (e.g. optional notifications or permissions you grant on device); and legal obligation (records we must keep).

5. How we share information

Other members can see your public profile (username, display name, avatar, bio, scores, and public predictions and interactions) according to product design. Predictions marked as private-room are visible only to members of that room and are not shown in public home or following feeds or global leaderboards. We do not display your email address to other users.

When you use the in-app “Share result” feature, an image or link is generated on your device and sent through your chosen third-party app (for example Messages, WhatsApp, or social networks). We do not receive that exported image unless you separately send it to us. Those third-party services have their own privacy policies. We use service providers that process data on our behalf, including Google Firebase (authentication, cloud database, file storage, analytics, crash reporting, and hosting as configured in our project). These providers act under contractual terms appropriate to their role. We may disclose information if required by law, to protect users and the public, or in connection with a merger or asset sale, with notice where required.

6. User-generated content & moderation

Predictions, comments, messages, room content, and media are user-generated. We provide in-app tools to report content or users and to block other users, as required by Apple App Store and Google Play policies for apps with user-generated content. Reports and blocks are reviewed by our team; safety-related reports are prioritized. We also use automated content filtering on create flows where configured.

We may review, remove, restrict, or correct content and accounts that violate our Terms or applicable law, including after an outcome dispute is filed. Removed content may remain in backups for a limited period before deletion. For child safety, see https://zukiapps.com/toldya/safety

7. Retention

We keep personal data while your account is active and as needed to operate the Service. After account deletion, we delete or anonymize profile and content data within a reasonable period (typically within 30 days), except where we must retain limited records for legal, security, or dispute purposes.

8. Account deletion

You can delete your account in the app (Settings → Delete account) or by following the instructions on our Delete Account page. Deletion is permanent and removes your profile, predictions, votes, comments, and messages from the live Service, subject to backup and legal retention described above.

Delete account: https://zukiapps.com/toldya/delete-account · Terms: https://zukiapps.com/toldya/terms · Support: https://zukiapps.com/toldya/support

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may withdraw consent where processing is consent-based. To exercise rights, contact us using the details below; we may need to verify your identity.

Users in the EU/EEA, UK, and Israel may also lodge a complaint with a supervisory authority. California residents may have additional rights under applicable state law; contact us to submit a request.

10. Security

We implement technical and organizational measures appropriate to a consumer social application (access controls, encrypted transport, and provider security features). No system is completely secure; use a strong password and protect your device.

11. International transfers

Data may be processed in countries where we or our providers operate (including the United States and regions used by Google Cloud/Firebase). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

12. Children

ToldYa! is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new “Last updated” date. Material changes may be notified in-app or by email where appropriate. Continued use after the effective date constitutes acceptance.

14. Prediction resolution & disputes

After a prediction’s voting deadline passes, the author must submit the outcome (fulfilled, failed, or void/cancelled) with any required note. Other members may dispute a submitted outcome if they believe it is incorrect. Disputes are stored with your account identifier, the prediction reference, optional reason text, and timestamp, and are routed to our moderation queue for human review.

Submitting a dispute does not instantly change the displayed outcome. We aim to review non–child-safety disputes within a reasonable period (typically within 14 business days). We may correct an outcome, request additional information from the author, or decline a dispute if insufficient evidence is provided. Overdue unresolved public predictions may trigger reminders and, in some cases, limit your ability to post new public predictions until resolved.

15. Private rooms

Private rooms let invited members make predictions visible only within that room. We process room names, creator and member user IDs, invitation activity, and room-scoped predictions, votes, and comments. This data is not included in public home or following feeds or global reputation leaderboards.

Room membership is visible to other members of the same room. The same community standards, reporting, blocking, and moderation processes apply inside private rooms. Room data is deleted or anonymized when you delete your account or when a room is removed, subject to backup and legal retention described above.

16. Sharing outside the Service

The Service may let you generate a shareable image card (for example after a resolved prediction) containing your username, prediction text, outcome, vote summary, and branding. That export is created on your device and shared through third-party apps you choose (via the system share sheet). We do not automatically post shared cards on your behalf.

Once you share content outside ToldYa!, the receiving platform’s terms and privacy policy govern that copy. You are responsible for what you share and with whom. Deep links included in shares may require sign-in to view the full Arena.