Privacy Policy

Information We Collect

When you create an account and use Collectoria, we collect the following:

• Account information — your email address, username, and display name provided at registration.
• Profile information — any additional details you choose to add, such as a profile photo, banner image, bio, country, favourite brand, or collection details.
• Usage data — interactions including posts, comments, likes, reposts, game scores, points earned, and event RSVPs.
• Device information — device type, operating system, and app version for diagnostic and crash-reporting purposes.
• Location data — approximate location when you use the IRL Events map or Zone Wars patrol features. Location is only accessed when you actively use these features and is not stored on our servers.
• Camera and photo library — used only when you explicitly choose to upload a profile photo, banner image, community post image, or listing photo. We never access your camera or photo library in the background.
• Signup metadata — IP address collected at account registration for fraud prevention and bot detection. This is not used for tracking or advertising.
• Purchase history — transaction records from in-app purchases managed by RevenueCat, Google Play, and the Apple App Store.

How We Use Your Information

We use the information we collect to:

• Create and manage your Collectoria account
• Operate community features including the feed, leaderboards, marketplace, and mini games
• Process in-app purchases and credit shards or points to your account
• Detect and remove bot accounts, spam, and fraudulent activity to protect the community
• Moderate content using automated systems to enforce community guidelines
• Send push notifications and email alerts you have opted into, including weekly and monthly points reports
• Diagnose crashes and bugs using anonymised error reporting
• Provide customer support and respond to bug reports
• Improve the app based on usage patterns and feedback
• Enforce our Terms of Use and community guidelines, including temporary or permanent account bans

Camera & Media Permissions

Collectoria requests access to your device camera and photo library solely for:

• Uploading a profile avatar photo
• Uploading a custom profile banner image
• Attaching images to community posts
• Adding photos to marketplace listings

Camera access is only activated when you explicitly tap a photo upload button. We never access your camera or photo library in the background. Photos you upload are stored securely on Supabase infrastructure and used only to display your profile, listings, or community posts.

Data Storage & Security

Your data is stored securely using Supabase infrastructure hosted on AWS. We implement the following security measures:

• Encrypted data transmission via HTTPS/TLS for all network requests
• Row-level security policies on all database tables, ensuring users can only access their own data
• Server-side validation of all points, purchases, and game scores — no critical values are accepted from the client alone
• Automated bot detection that flags and removes suspicious accounts
• Immediate account suspension for accounts that violate our policies
• Anonymised crash and error reporting via Sentry — personal data is scrubbed before any error reports are sent

While we take reasonable steps to protect your information, no system is completely secure. We encourage you to use a strong, unique password for your account and to notify us immediately if you suspect unauthorised access.

Third-Party Services

We use the following third-party services to operate Collectoria. Each service has its own privacy policy governing how they handle data:

• Supabase — database, authentication, real-time messaging, and file storage (supabase.com/privacy)
• RevenueCat — in-app purchase management, subscription tracking, and server-side purchase verification (revenuecat.com/privacy)
• Google Play Billing — payment processing for Android in-app purchases (policies.google.com/privacy)
• Apple App Store — payment processing for iOS in-app purchases (apple.com/privacy)
• Sentry — anonymised crash and error reporting. Personal data is scrubbed before transmission (sentry.io/privacy)
• Expo / EAS — app build, delivery, and push notification infrastructure (expo.dev/privacy)
• Apple MapKit — map rendering on the Calendar IRL Events page on iOS devices (apple.com/privacy)
• Google Maps — map rendering on the Calendar IRL Events page on Android devices (policies.google.com/privacy)

Your Rights & Choices

• Access — view the information stored on your profile at any time within the app
• Correction — update your profile information in the Edit Profile screen at any time
• Deletion — delete your account directly from Settings → Edit Profile → Delete Account. This permanently removes your profile, posts, and associated data
• Portability — request an export of your data by contacting us at collectorsgonedigital@gmail.com
• Notification opt-out — disable push notifications in your device settings or within the app at any time
• Account bans — accounts that violate our Terms of Use may be suspended or permanently banned. You may appeal a ban by contacting us

Children's Privacy

Collectoria is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through an in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Collectors Gone Digital
collectorsgonedigital@gmail.com
We aim to respond to all enquiries within 48 hours.

Child Safety Standards

Collectoria is committed to maintaining a safe platform and fully complies with Google Play's Child Safety Standards Policy. The following standards are in place and actively enforced:

• Collectoria strictly prohibits any content, behaviour, communication, or material that sexually exploits, endangers, or harms minors in any way
• Any account found to involve CSAE-related activity is permanently banned immediately without appeal and reported to the National Center for Missing and Exploited Children (NCMEC) and relevant law enforcement authorities
• Collectoria is not directed at children under 13. All users must confirm they are at least 13 years old during the onboarding process before accessing any platform features
• Users under 18 must have parental or guardian consent before making any in-app purchases, as required by applicable law including COPPA
• All user-generated content — including posts, comments, images, chat messages, and profile information — passes through automated content moderation before being published. Content flagged as exploitative or harmful to minors is immediately blocked and escalated for manual review
• Our bot detection system monitors for patterns of grooming behaviour or suspicious interactions directed at minors and flags accounts for immediate review
• Verified creators are subject to additional scrutiny and must comply with our Creator Programme standards, which explicitly prohibit any content harmful to minors
• We actively cooperate with law enforcement agencies and platform safety organisations in any investigation involving the safety of minors