FanVest Privacy Policy

FanVest (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we handle information when you use the FanVest mobile application (the “App”).

1. Information We Collect

• Contest Participation Data: We store your contest entries, portfolio allocations, and leaderboard results to operate contests.
• Achievement Data: We process badge progress, rank points, and the events needed to calculate them.
• Friends Account Data: If you use Friends, Sign in with Apple provides an account identifier. We also process sessions, invitations, accepted or blocked relationships, private notes, and account-deletion state.
• Friends Safety Data: If you submit a report, we process the selected reason, optional details, the accounts involved, and operational information needed to investigate abuse.
• Device Integrity and Operations Data: We may process App Attest evidence, rate-limit state, request identifiers, security audits, and error diagnostics to protect Friends and operate the service.
• Device & Usage Data: Basic diagnostic and crash data may be collected automatically by Apple to help us improve performance.
• Download Link Counts: When an automatic FanVest download link is used, our backend stores aggregate daily request counts by channel. It does not store an IP address, cookie, referrer, query parameter, or persistent identifier for this measurement. A request’s user-agent may be inspected transiently to separate known automated requests, but it is not stored.
• iCloud / CloudKit Data: Your contest data and profile information may be synced securely using Apple’s CloudKit services.

FanVest does not collect payment information. Friends is optional and is separate from your Fantasy Invest contest identity until you explicitly link them.

2. How We Use Information

• Run free fantasy investment contests and leaderboards.
• Calculate achievement progress and show a minimal badge summary to accepted friends.
• Create, validate, claim, expire, and revoke one-time friend invitations.
• Operate Friends relationships, private notes, blocking, abuse reporting, security, and account deletion.
• Sync your contest data across your devices via iCloud.
• Improve and support the App.
• Measure aggregate download-link requests by acquisition channel without building individual visitor profiles.

We do not sell your personal information to third parties.

3. Data Sharing

• With Apple Services: We rely on Apple services (iCloud/CloudKit, TestFlight) for secure storage and testing.
• With Accepted Friends: Accepted friends may see the social display information and minimal achievement summary required for Friends features. Private notes and reports are not shared with the other player.
• With Service Providers: Hosting and infrastructure providers may process information only to operate and secure FanVest on our behalf.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

We do not share user information with advertisers or data brokers.

4. Data Storage and Security

• Contest data is stored in Apple’s CloudKit public and private databases, protected by Apple’s security infrastructure.
• Friends authorization and social operations are processed by FanVest’s backend. Invitation secrets are one-time bearer credentials; the backend stores a non-reversible digest rather than the link secret.
• The invitation website does not send the link fragment to its hosting origin, does not validate invitations, and does not use invite-page analytics.
• Automatic download links pass through FanVest’s Fly.io-hosted backend. FanVest persists only the aggregate daily channel counts described above; the direct App Store link remains available as a manual fallback.
• We take reasonable measures to protect your data, but no system is completely secure.

5. Retention and Deletion

• One-time invitations expire after seven days and can be cancelled sooner by the sender. Operational records are retained only as long as reasonably necessary for security, support, and legal obligations.
• Delete Friends Profile in the App removes Friends sign-in, invitations, relationships, private notes, social identity links, and shared achievement summaries. This does not delete Fantasy Invest contest history.
• Private abuse reports may be retained or irreversibly anonymized when reasonably necessary for safety or legal obligations, even after Friends Profile deletion.
• To request deletion of other applicable FanVest data, contact info@fanvestapp.com.
• You can manage iCloud settings on your device in Settings > [your name] > iCloud.

6. Children’s Privacy

FanVest and Friends are intended for users 13 years and older. We do not knowingly collect personal information from children under 13. Contact us if you believe a child under 13 has provided information.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

8. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us at: