GameweekIQ Privacy Policy

1. Information we collect

2. How we use information

We use personal information to:

• provide, operate, secure, and maintain the Service;
• authenticate users and preserve sessions;
• save your selected leagues, claimed team, and preferences;
• retrieve public FPL data and calculate GameweekIQ analytics;
• prepare and cache current and historical analytics;
• respond to support requests and service communications;
• manage the Premium waitlist;
• monitor reliability, investigate errors, enforce usage limits, and prevent abuse;
• understand aggregate product usage and improve the Service; and
• comply with legal obligations and protect our rights and users.

We do not use Google user data or other personal information for targeted advertising. We do not sell personal information.

3. Legal bases

Where UK or European data-protection law applies, we process personal information under one or more of these legal bases:

• Contract: to provide the Service you request and manage your account;
• Legitimate interests: to secure, operate, analyse, and improve the Service, provided those interests are not overridden by your rights;
• Consent: where we ask for it, including optional communications or storage where consent is legally required; and
• Legal obligation: where processing is required by law.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

4. How we share information

We share information only as needed for the purposes described above:

• Supabase provides authentication, database, API, and application storage services.
• Vercel provides hosting, delivery, operational logging, and analytics services.
• Google provides Google Sign-In when you choose that option and Google Analytics 4 when you allow analytics.
• Slack may receive limited account, lifecycle, or error details through operational notifications. Secret-like values such as passwords, authentication tokens, cookies, and API keys are filtered from these notifications.
• Fantasy Premier League receives requests containing league, entry, and gameweek identifiers when we retrieve its public data.
• Professional advisers, authorities, or transaction parties may receive information where reasonably necessary to comply with law, protect rights and security, obtain professional advice, or complete a merger, financing, reorganisation, or sale of the Service.

Service providers may process information only to provide services to us and subject to their applicable contractual and legal obligations. We do not share Google user data except as necessary to provide or secure the user-facing Service, comply with law, or complete a business transfer with any consent required by Google policy or law.

5. Data storage and retention

Account information and your saved league or team associations are generally retained while your account is active. Waitlist details are retained while relevant to the waitlist or until you ask us to remove them.

We retain operational logs, rate-limit records, backups, and security information only for as long as reasonably necessary for their purpose. Rate-limit records are normally eligible for deletion after 48 hours. Some cached FPL analytics are shared across users and may remain after you remove a league or delete your account because they are derived from public FPL data and are not account credentials.

When information is no longer needed, we delete or anonymise it, subject to legal, security, fraud-prevention, dispute-resolution, and backup requirements.

Our providers may process information in the United Kingdom, European Economic Area, United States, and other countries. Where required, international transfers are protected through recognised safeguards such as adequacy decisions or standard contractual clauses.

6. Security

We use reasonable technical and organisational safeguards, including encrypted connections, secure HTTP-only authentication cookies, access controls, row-level database protections, server-side credentials, rate limiting, and restricted administrator access. No online service can guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to:

• access, correct, or receive a copy of your personal information;
• ask us to delete or restrict processing of it;
• object to processing based on legitimate interests;
• withdraw consent;
• request data portability; and
• complain to a data-protection authority.

You can remove saved league associations or delete your account within the Service. Account deletion removes your account and the personal information associated with it, subject to the retention exceptions described above. To request removal from the waitlist, exercise another privacy right, or get help if you cannot access your account, email support@gameweekiq.com. We may need to verify your identity before completing a request.

You may also revoke GameweekIQ's Google access from your Google Account connections. Revoking access prevents future Google Sign-In authorisation but does not by itself delete information already held by GameweekIQ; use the in-app account deletion option before revoking access, or contact us if you need help.

UK users may complain to the Information Commissioner's Office. You may also contact the supervisory authority where you live or work.

8. Children

The Service is not directed to children under 13. If the minimum age for consenting to online services is higher where you live, that higher age applies. We do not knowingly collect personal information from a child who cannot legally consent without the required permission. Contact us if you believe a child has provided personal information unlawfully.

9. Third-party services and links

The Service relies on or links to third-party services, including Google and Fantasy Premier League. Their privacy practices are governed by their own policies. GameweekIQ is an independent product and is not endorsed by or affiliated with the Premier League, Fantasy Premier League, or Google.

10. Changes to this policy

We may update this Privacy Policy as the Service or law changes. We will post the revised version with a new "Last updated" date and provide additional notice where a material change requires it. If we materially change how we use Google user data, we will update our disclosures and obtain consent where required before using the data for the new purpose.

11. Contact

For privacy questions or requests, contact: