Legal

Privacy Policy

Last updated: April 2026. We respect your privacy and are committed to protecting your personal data.

1. Who we are

VivaStrike is a gamified football fan platform built around the world's biggest tournaments. This policy explains what information we collect when you use the VivaStrike website and apps, how we use it, and the rights you have over that data.

2. Information we collect

We collect information in three ways:

Account data you provide at signup: email, display name, city, chosen team.
Activity data generated as you use the product: posts, reactions, predictions, challenges completed, XP earned, items purchased.
Technical data automatically collected: IP address, device type, browser, referral source, and anonymous analytics events.

3. How we use your data

To operate the core product (show your feed, track XP, run leaderboards, deliver notifications).
To process payments for VS Coins and cosmetic items through Stripe.
To prevent fraud, abuse, and violations of our community standards.
To improve the product through aggregated analytics and A/B experiments.
To send service emails (account confirmations, match reminders, streak warnings). You can opt out of non-essential email at any time.

4. Third-party services

We use the following processors and share only what is strictly needed:

Supabase — database, authentication, and file storage.
Stripe — payment processing for coin purchases.
Cloudinary — image hosting for user uploads and cosmetics.
Google — OAuth sign-in (if you choose to use it).

5. Your rights

You can at any time:

Access a copy of the data we hold on you.
Correct or update your profile data from account settings.
Delete your account, which removes your profile and anonymizes your activity.
Withdraw consent for non-essential processing.

To exercise any of these rights, email privacy@vivastrike.com.

6. Data retention

Account data is retained while your account is active. If you delete your account, your personal data is removed within 30 days. Aggregated and anonymized analytics may be retained indefinitely. Payment records are retained for 7 years as required by law. You can request account and data deletion any time at vivastrike.com/delete-account — no sign-in required.

7. Children

VivaStrike is not intended for users under the age of 13. If you believe a child has provided us with personal information, contact privacy@vivastrike.com and we will delete it.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced via an in-app notification and by email. The “Last updated” date at the top always reflects the current version.

9. Contact

Questions? Reach us at privacy@vivastrike.com.