Privacy Policy

• Account details: your name, email address and/or phone number, and the organization, workspace, group or role you belong to.
• Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password, and we do not access your other Google data.
• Activity in Arena: entries, submissions, scores, points, recognitions, event attendance and messages you post in workspaces you belong to.
• Device and notification data: push notification tokens for the devices you enable notifications on, and basic app settings.
• Technical data: log and audit records needed to keep the service secure, diagnose faults and show administrators who changed what.

• To create and secure your account and sign you in.
• To run competitions, scoring, leaderboards, chat and the features your organization turns on.
• To send you transactional messages, such as invitations, sign-in codes and notifications you have opted into.
• To provide AI-assisted features (for example setup suggestions or judging help) when your organization uses them.
• To detect abuse, keep the service reliable, and meet legal obligations.

We do not sell personal information, and we do not use it for advertising. Arena does not show ads and does not track children for marketing.

Arena’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to sign you in and to show your name and profile picture in Arena. We do not use it for advertising, and we do not allow humans to read it except where needed for security, to comply with law, or with your consent.

We share information only with service providers that help us run Arena, and with your organization:

• Database, authentication and file storage hosting (Supabase).
• Transactional email delivery (Resend).
• AI model providers, only when an AI feature is used (Anthropic).
• Google and Apple push notification services, to deliver notifications you enable.
• Google, for sign-in when you choose to use it.
• Your organization’s administrators, who can see the information needed to run their workspace, such as members, results and activity.

We may also disclose information where the law requires it.

Some Arena workspaces, such as school houses and academic leagues, include students under 18. Those workspaces are set up and managed by the school or organization, which is responsible for obtaining any consent required from parents or guardians. We do not run advertising or behavioural tracking aimed at children, and we limit what children’s profiles show to what their workspace needs.

We keep account and activity information for as long as your account or workspace is active. When an account is deleted, we remove its personal information, except where we must keep limited records for legal, security or accounting reasons. Backups are overwritten on their normal cycle.

We encrypt data in transit, restrict access to personal information by role, and record administrative actions in audit logs. No online service is perfectly secure, so please use a strong, unique password and tell us promptly if you think your account has been compromised.

You can view and update your profile in Arena, turn notifications on or off in your settings, and sign out at any time. You can also ask us to access, correct, export or delete your personal information, or to withdraw consent, by emailing us. Depending on where you live, you may have additional rights under local law. We will respond within a reasonable time and within the period the law requires.

We may update this policy. When we make material changes we will update the “Last updated” date above and, where appropriate, tell you in the app or by email.

Questions about this policy or your personal information can be sent to hello@example.com.