This Privacy Policy explains how UPVOR ("we", "us", "our") collects, uses, discloses, and protects information when you use the UPVOR mobile application, websites, and related services (collectively, the "Service"). UPVOR is operated by Caudex Inc.
1. Information We Collect
Information you provide to us
- Account information: username, email address, country, city, language preference, profile photo, and authentication identifiers from Google, Apple, or email sign-in.
- Profile content: avatar, display name, badges, clan membership, and any optional details you add.
- Communications: messages you send in clan chat, support requests, and any feedback you submit.
- Payment information: when you purchase boosts, cosmetics, subscriptions, or other in-app items, payment is processed by Apple App Store, Google Play Billing, or Stripe. We receive transaction confirmation but do not store full payment card details.
Information collected automatically
- Device information: device model, operating system version, language, time zone, and app version.
- Usage data: features used, screens viewed, leaderboard interactions, and approximate session duration.
- Push notification token: issued by Apple Push Notification service or Firebase Cloud Messaging, used to deliver notifications you have enabled.
- Crash and diagnostic data: anonymized crash reports and performance metrics via Firebase Crashlytics to fix bugs and improve stability.
Information we do not collect
- We do not collect precise GPS location.
- We do not access your contacts, photos, microphone, or camera unless you explicitly grant permission to upload an avatar.
- We do not sell your personal information to third parties.
2. How We Use Your Information
- To create and operate your account and profile.
- To rank you on city, national, and global leaderboards.
- To process payments and deliver in-app purchases.
- To send notifications about your rank, clan activity, season events, and challenges (only if you have enabled notifications).
- To detect, prevent, and respond to fraud, abuse, and violations of our Terms of Service.
- To analyze usage patterns and improve the Service.
- To comply with legal obligations.
3. Third-Party Service Providers
We use the following third parties to operate the Service. Each has its own privacy practices:
- Google Firebase — authentication, push notifications, crash reporting (policy).
- Apple App Store / Sign in with Apple — iOS distribution, authentication, in-app purchases (policy).
- Google Play Billing / Sign in with Google — Android distribution, authentication, in-app purchases (policy).
- Stripe — web payment processing (policy).
- Amazon Web Services — cloud hosting, storage, and content delivery in Mumbai (ap-south-1) and Bahrain (me-south-1) regions.
4. Data Sharing and Disclosure
We share information only as follows:
- With other users: your username, avatar, country, clan, rank, badges, and public profile content are visible to other users by design — UPVOR is a social leaderboard.
- With service providers: as listed above, only as needed to operate the Service.
- For legal reasons: when required to comply with law, court order, or to protect the rights, property, or safety of UPVOR, our users, or others.
- In a business transfer: if UPVOR is acquired, merged, or sells assets, your information may transfer as part of that transaction.
5. Data Retention
We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes.
6. Your Rights
Depending on where you live, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your account and personal data.
- Objection / restriction: object to or restrict certain processing.
- Portability: request your data in a portable format.
- Withdraw consent: withdraw consent for processing based on consent.
To exercise these rights, contact us at support@upvor.com. EU residents have rights under the GDPR. California residents have rights under the CCPA.
7. Children
UPVOR is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us and we will delete it.
8. International Data Transfers
UPVOR is operated from infrastructure in India (Mumbai) and Bahrain. By using the Service you consent to your information being transferred to and processed in these regions, which may have data protection laws different from your country.
9. Security
We use industry-standard security measures including TLS encryption in transit, encryption at rest, and access controls. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice or email. The "Last updated" date at the top of this page indicates when the policy was last revised.
11. Contact
If you have questions about this Privacy Policy or our data practices, please contact us:
UPVOR / Caudex Inc.
Email: support@upvor.com