Privacy Policy

This Privacy Policy explains how ConcertBuddy AI LLC ("ConcertBuddy AI," "we," "us," or "our") collects, uses, and shares information in connection with War & Peace Daily (the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information: email address, username, and password (handled by our authentication provider, Supabase — we never see or store your raw password).
• Gameplay data: your answers, scores, and completed rounds, so we can show you results and history.
• Phone number and consent record: if you opt in to text alerts, we store the phone number you provide along with a timestamped record of the consent language you agreed to.
• Technical data: IP address, browser/device information, and standard server logs, collected automatically by our hosting provider.

2. How We Use Information

• To operate, maintain, and improve the Service;
• To authenticate your account and save your progress;
• To send text alerts to users who have opted in, once that feature is active;
• To detect, prevent, and address technical issues, fraud, or abuse;
• To comply with legal obligations.

We do not sell your personal information.

3. Third-Party Service Providers

We share information with the following service providers, solely to operate the Service:

• Supabase — account authentication and database storage.
• Vercel — application hosting and server logs.
• Mapbox — map rendering for map-based questions; Mapbox may process your IP address and interactions with map tiles under its own privacy policy.

If we begin sending text messages, we will use a dedicated SMS provider solely to deliver messages to numbers that have opted in, and will not share your phone number for that provider's own marketing purposes.

4. Cookies

We use a session cookie set by Supabase to keep you signed in. We do not currently use advertising or third-party tracking cookies.

5. Text Message Communications

If you opt in to text alerts, you can withdraw consent at any time by replying STOP to any message, or by contacting support@concertbuddy.ai. We retain your consent record even after opt-out, solely to document that the opt-out occurred.

6. Data Retention

We retain account and gameplay data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations and resolve disputes. You may request deletion at any time (see Section 7).

7. Your Rights & Choices

You may access, correct, or request deletion of your personal information by contacting support@concertbuddy.ai. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we hold and to request its deletion; contact us to exercise these rights.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Data Security

We use reasonable administrative and technical measures to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and material changes will be reflected here.

11. Contact

Questions about this Privacy Policy can be sent to support@concertbuddy.ai.