Killer Pool Social (“we”, “us”) is operated by Killer Pool Social. This policy explains how we handle information when you use our mobile and web applications (the “Services”). Contact: killerpoolsocial@gmail.com
We collect the information you provide and what is needed to run multiplayer rooms, accounts, optional social features, and leaderboards. We use Supabase as our database and file host. We do not sell your personal information. We do not use your data for cross-app advertising tracking.
• Account and profile: username, password (stored using one-way hashing where supported), internal profile identifier, and session data used to keep you signed in. If you continue as a guest without creating an account, we still assign a temporary guest username and internal profile identifier on your device; guest profiles do not have a password or a persistent sign-in session. • Gameplay and rooms: game state you create or join (for example room codes and player data) stored so participants can sync a session. • Timer and stats: timer attempt times, rankings, and related stats you submit or we derive for leaderboards and progress displays. • Social features (if you use them): friend connections, friend requests, head-to-head match records, feed posts, captions, and images you upload for avatars or posts. • Device and app data: basic technical data from your device and our infrastructure (for example error logs, timestamps, IP address processed by our service providers as part of normal hosting). Diagnostic events may be logged only on your device during development and are not sent to us as part of the product unless you separately enable that. • Photos and camera (optional): with your permission, we access images you choose from your photo library or images you capture with your device camera, solely so the image can be uploaded for your profile or social posts. The camera is used only when you explicitly choose “Take photo”; we do not record or stream camera content in the background. • Notifications (optional): if you enable notifications, we collect and store a device push token (for example an Expo push token) linked to your profile so we can send friend/social/game/PB alerts when the app is closed. We may also process notification-related metadata (for example delivery timestamps and notification ids) to avoid duplicate alerts and improve delivery behavior.
We use information to provide and improve the Services, authenticate you, sync gameplay, show leaderboards and social features, send in-app and device notifications when enabled, enforce reasonable security, fix bugs, and comply with law. We do not use your content to train generalized public AI models unless we tell you otherwise in a separate notice and, where required, obtain consent.
Where GDPR or similar law applies, we rely on: performance of a contract (providing the Services you request); legitimate interests (security, product improvement, fraud prevention) balanced against your rights; and consent where required (for example optional photos or certain communications). You may withdraw consent where processing is based on consent, without affecting prior lawful processing.
We use Supabase (and its subprocessors) for database storage, authentication-related data storage, realtime sync, and file storage for images you upload. Their processing is governed by their terms and privacy policy. We may use additional infrastructure or analytics providers in the future; if we do, we will update this policy and, where required, the App Store privacy details.
We keep information while your account is active and as needed to provide the Services. If you delete your account through the app where available, we delete or anonymize associated personal data except where we must retain minimal records for legal, security, or dispute resolution purposes. Some content you posted may remain visible to others if copies were shared before deletion, or if retention is required by law.
We use industry-standard measures appropriate to the nature of the Services. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
The Services are not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.
• Access, correction, deletion: you may update profile information in the app where supported, delete your account where offered, or contact us to exercise rights under applicable law. • Restrict or object: depending on your region, you may restrict certain processing or object to processing based on legitimate interests. • Portability: where applicable, you may have the right to receive a copy of personal data you provided in a portable format. • Complaints: you may lodge a complaint with your local data protection authority. • California residents: California law may grant you rights to know, delete, and opt out of certain “sales” or “sharing” (we do not sell personal information as defined by the CCPA/CPRA in the usual sense; we do not monetize personal data by selling it to data brokers).
If you use the Services from outside the country where our servers or providers are located, your information may be transferred across borders. We use appropriate safeguards where required by law (such as standard contractual clauses).
We may update this policy from time to time. We will post the updated version in the app and adjust the “Last updated” date. If changes are material, we will provide additional notice as required by law (May 5, 2026 is the effective date of this version).