Privacy Policy for ChantMaster

Effective Date: 19 December 2025
Last Updated: 12 March 2026

ChantMaster (“ChantMaster,” “we,” “our,” or “us”) operates the ChantMaster Sport mobile application and related services (collectively, the “Service”).

This Privacy Policy describes how we collect, use, disclose, retain, and protect information when you use the Service. This Policy should be read together with our Terms of Service, which govern your use of the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Service, you may provide:

• Name
• Email address
• Phone number (required for account verification)
• Profile photo
• Account credentials (password or third-party sign-in via Apple or Google)
• User-generated content, including chants, votes, messages, and in-app interactions
• Communications with us, including support requests

User-generated content is processed and displayed in accordance with the license granted to ChantMaster under the Terms of Service.

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device type, operating system, and app version
• Push notification tokens (used to deliver notifications to your device)
• App usage and interaction data
• IP address (used for security, fraud prevention, and abuse detection)
• Crash reports and performance diagnostics

We do not collect precise GPS location data.

1.3 Categories of Personal Information

Depending on how you use the Service, the categories of personal information we collect may include:

• Identifiers (such as name, email address, and phone number)
• Internet or network activity information (such as app usage data)
• Device and diagnostic information (including push notification tokens)
• User-generated content

1.4 Subscription and Payment Information

Paid features and subscriptions are processed by third-party providers, including:

• Apple App Store
• Google Play
• RevenueCat

ChantMaster does not store full payment card details. We may receive limited information such as:

• Subscription status and entitlement information
• Transaction identifiers
• Purchase history metadata necessary to provide access to paid features

2. How We Use Information

We use information to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Verify your identity via SMS during account creation and sign-in
• Send push notifications to your device
• Enable chants, voting, and event participation
• Manage subscriptions and entitlements
• Improve functionality, performance, and reliability
• Monitor for fraud, abuse, policy violations, and security issues
• Diagnose errors and crashes to maintain service stability
• Communicate service-related messages and respond to support inquiries
• Comply with legal and regulatory obligations

Lawful Bases for Processing (EU/UK)

Where required by applicable law, including GDPR, we process personal data based on one or more of the following lawful bases:

• Performance of a contract (providing the Service)
• Legitimate interests (operating, securing, and improving the Service)
• Compliance with legal obligations
• User consent, where required

3. How We Share Information

We may share information with:

• Service providers that support infrastructure, analytics, payments, and customer support
• Payment and subscription partners to manage purchases and entitlements
• Cloud hosting and security providers to store and protect data
• Legal authorities when required by law or to protect rights, safety, or property

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

4. Analytics, Diagnostics, and Third-Party Services

We use third-party tools to operate the Service, verify user identity, deliver notifications, and monitor stability. These providers may receive limited personal data as described below.

4.1 SMS Verification

We use Twilio to send SMS verification codes during account creation and sign-in. Twilio receives your phone number to deliver these messages. Twilio's privacy practices are governed by their own privacy policy.

4.2 Push Notifications

We use Expo to deliver push notifications to your device. Expo receives your device push token and notification content.

4.3 Error and Crash Reporting

We use Sentry to diagnose errors and crashes. Sentry may receive your user identifier and email address alongside error data to help us identify and resolve issues.

4.4 Analytics and Monitoring

• Analytics data is used for internal purposes only
• Data is collected in aggregated or pseudonymous form where feasible
• We do not use analytics data for targeted advertising, cross-app tracking, or data brokerage

Monitoring for moderation, safety, and policy enforcement purposes is distinct from analytics and is conducted solely to maintain the integrity and safety of the Service.

5. Data Retention

We retain personal information only for as long as necessary to:

• Provide and maintain the Service
• Support active user accounts
• Comply with legal, accounting, and regulatory requirements
• Resolve disputes and enforce agreements

You may request account deletion at any time through the app or by contacting support@chantmaster.app. Upon deletion:

• Personal identifiers (name, email, phone number, profile photo, sign-in credentials) are removed or replaced with non-identifying values
• Authentication tokens, playlists, and applications are destroyed
• Chants you created are retained as community content but disassociated from your identity
• Subscription records are retained for billing reconciliation with app store providers

For full details on the deletion process, see our Account Deletion page.

Certain records may be retained where necessary to comply with legal requirements, resolve disputes, enforce our Terms of Service, or prevent fraud.

6. Your Privacy Rights

Depending on your location, you may have the right to:

• Access personal data we hold about you
• Request correction or deletion of personal data
• Restrict or object to certain processing activities
• Request data portability

California Residents

We comply with the California Consumer Privacy Act and the California Privacy Rights Act (CCPA/CPRA). We do not sell personal information.

EU and UK Residents

We process personal data in accordance with applicable GDPR requirements. Personal data may be processed and stored in the United States or other jurisdictions where ChantMaster or its service providers operate, subject to appropriate safeguards required by law.

Requests to exercise privacy rights may be submitted to: privacy@chantmaster.app

7. Children’s Privacy

The Service is not directed to children and is not intended for use by individuals under the age of 13, or under 16 where required by law.

We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.

8. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information. However, no system can be guaranteed to be completely secure.

9. Third-Party Services

The Service may contain links to or integrate with third-party services. Their privacy practices are governed by their own privacy policies, not this one.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date. Where required by law, we will provide additional notice of material changes.

11. Contact Us

ChantMaster
Email: privacy@chantmaster.app