← Back to home

Privacy Policy

Last updated: January 6, 2025

Effective Date: January 6, 2025

1. Introduction

Who's Right? ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website at https://www.whosright.live (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

Personal Information You Provide

  • Account Information: Name, email address, username, password
  • Profile Information: Profile picture, bio, preferences
  • Authentication Data: Information from third-party login providers (Google, Apple)
  • Communications: Messages you send to us or other users

Information Collected Automatically

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: Pages visited, features used, time spent, voting patterns
  • Log Data: IP address, browser type, access times, referring URLs
  • Cookies and Tracking: See our Cookie Policy for details

3. How We Use Your Information

  • Provide, maintain, and improve our Service
  • Create and manage your account
  • Process your votes and display results
  • Enable social features (friends, challenges, leaderboards)
  • Send you notifications about your account and the Service
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or unauthorized activity
  • Personalize your experience
  • Comply with legal obligations

4. Data Sharing

We do NOT sell your personal information. We may share your information in the following circumstances:

  • With Your Consent: When you explicitly agree to share
  • Service Providers: Third parties that help us operate (hosting, analytics, authentication)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, sale, or acquisition
  • Public Information: Usernames and public profile information are visible to other users

Third-Party Services We Use

  • Clerk: Authentication and user management
  • Vercel: Hosting and analytics
  • Database Provider: Data storage

πŸ‡ͺπŸ‡Ί 5. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at ambond1998@gmail.com or use our Data Deletion Request page.

Legal Basis for Processing: We process your data based on: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in operating the Service.

πŸ‡ΊπŸ‡Έ 6. Your Rights Under CCPA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request what personal information we collect, use, disclose, and sell
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the sale of your personal information (Note: We do NOT sell your data)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, please contact us at ambond1998@gmail.com. We will respond to verifiable consumer requests within 45 days.

Categories of Information Collected: Identifiers (name, email), Internet activity (usage data), and inferences (preferences based on activity).

πŸ‘Ά 7. Children's Privacy (COPPA)

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at ambond1998@gmail.com.

If we discover that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.

Age Requirement: Users must be at least 13 years old to create an account. Users between 13-18 must have parental consent.

8. Data Retention

We retain your personal information for as long as necessary to provide you with the Service and fulfill the purposes described in this Privacy Policy. We may also retain data as required by law or for legitimate business purposes.

  • Account Data: Retained until you delete your account
  • Usage Data: Retained for up to 2 years for analytics
  • Legal Compliance: May be retained longer if required by law

9. Account Deletion

You can delete your account at any time. To request data deletion:

  1. Go to your Profile page and click "Delete Account", OR
  2. Visit our Data Deletion Request page, OR
  3. Email us at ambond1998@gmail.com

When you delete your account, we remove or anonymize your personal information (email, username, display name). Debates, votes, and comments you created will remain but will show "Deleted User" instead of your profile information.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure hosting infrastructure

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws than your country. By using the Service, you consent to such transfers.

For EEA users, we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Who's Right? - Privacy Team

Email: ambond1998@gmail.com

Website: https://www.whosright.live