1. Controller and Contact
The operator identified for privacy requests is: legal name: Savy's Tips operator - business details pending; tax number: To be added before live monetization; address: To be added before live monetization; business country: HU. Privacy requests can be sent to privacy@savystips.com.
Placeholder business details mean Savy's Tips is still in pre-monetization readiness mode and must be completed before live income channels are enabled.
2. Data We Collect
We collect account information such as email, display name, username, authentication provider, legal acceptance records, 18+ confirmation, referral code, notification preferences, and registration date. We also process app usage data, device identifiers needed for push notifications, Firebase Cloud Messaging tokens, subscription status, plan identifiers, and purchase lifecycle information from RevenueCat, Apple, Stripe, and Google Play where applicable.
3. How We Use Data
Data is used to create and secure accounts, enforce the auth wall, complete usernames, verify legal acceptance, load prediction feeds, unlock adwall picks where enabled, process votes, manage premium access, restore purchases, send notifications, operate referral features, provide support, detect abuse, and improve product reliability.
4. Notifications and Device Tokens
If you allow notifications, Apple Push Notification service, Firebase Cloud Messaging, and platform notification systems help deliver alerts such as picks ready, results, big match alerts, subscription lifecycle messages, maintenance notices, product announcements, and account messages. You can change notification permissions in device settings and app notification preferences where available.
5. Subscriptions and Purchases
iOS purchases are processed by Apple. RevenueCat helps us read subscription entitlement state, plan type, renewal or expiration events, and restore status. Web purchases, where available, may be processed by Stripe. Android purchases, when launched, may be processed by Google Play Billing and RevenueCat. We do not receive full card numbers or full Apple, Google, or card payment credentials.
6. Analytics and Reliability
We may use Firebase Analytics, Crashlytics, and related Firebase/Google Cloud services to understand app usage, conversion events, crashes, reliability, and feature performance. Events may include signup, legal acceptance, username completion, paywall views, plan selection, purchase success or failure, notification permission state, ad unlocks, voting, and referral copy actions.
7. Cookies, Ads, and Consent
Essential cookies are used for service operation. Non-essential cookies, analytics, web advertising technologies, and consent-based ad delivery are enabled only after consent where required. Rewarded ads and Google Mobile Ads/UMP consent flows are used only when those features are configured and enabled.
8. Third-Party Processors
We use Firebase and Google Cloud for authentication, database, functions, storage, analytics, reliability, and notifications; RevenueCat for subscription lifecycle; Apple for App Store purchases and push notification delivery; Google Play and Google Mobile Ads/UMP where configured; and Stripe for web billing where applicable.
9. Data Retention
We retain personal data while your account is active and as needed for legal, accounting, security, fraud-prevention, and service-operation obligations. After a verified account deletion request, the account is immediately restricted and scheduled for retention review. Personal data is deleted or anonymized after the retention review unless legal, accounting, security, fraud-prevention, or support obligations require longer retention.
10. Your Rights
Under GDPR where applicable, you may request access, rectification, erasure, portability, restriction of processing, and objection to processing. You may also withdraw cookie or ad consent at any time for web usage where those choices are available.
11. Data Security
We use reasonable technical and organizational safeguards, including Firebase Authentication, Firestore security rules, authenticated APIs, App Check where configured, and restricted backend processing. No system is perfectly secure, so use a strong account password and protect your devices.
12. Data Breach Notifications
If a breach involving your personal data occurs, we will notify affected users and relevant authorities within legally required timeframes.
13. Contact
Privacy requests can be sent to privacy@savystips.com. Support requests can be sent to support@savystips.com.