Privacy Policy
Last updated: July 10, 2026
1. Introduction
This Privacy Policy explains what information Legacy Pullz ("we", "us") collects when you use the Legacy Pullz mobile application, why we collect it, how it is used and shared, how long we keep it, and the choices and rights you have. By using the app you agree to this Policy. If you do not agree, please do not use the app.
2. Information you provide
• Account details: your email address, and — when you sign in with Apple or Google — the identifier and email those services share with us. • Profile & shipping: your name, shipping address, and confirmation that you meet the minimum purchase age. A phone number only if you choose to add one. • Referrals: a referral code you enter (if any) and the codes you share. • Support communications: anything you send us when you contact support.
3. Information collected automatically
• Purchase & order history: the packs you buy, order totals, discounts/credit applied, reveal assignments, and shipment requests. • Device identifier: a per-device identifier (Apple "identifier for vendor" on iOS, or the Android SSAID) and whether the device appears to be an emulator. We use these solely to prevent referral fraud and multiple-account abuse — not for advertising or cross-app tracking. • Push token: if you enable notifications, a push token so we can send order and restock alerts. • Technical logs: our infrastructure providers automatically record limited technical data (such as IP address, timestamps, and error logs) needed to operate and secure the service.
4. Payment information
Payments are processed by Stripe. Your full card number and payment credentials are entered directly with Stripe and are never seen or stored by Legacy Pullz. We retain only non-sensitive records of a transaction (such as an order id, amount, and payment status). Stripe's handling of your payment data is governed by Stripe's own privacy policy.
5. How we use your information
We use your information to: create and secure your account; process and fulfil orders and shipments; operate the referral program and detect abuse; send transactional messages (verification codes, order and restock notifications); provide customer support; comply with legal obligations; and protect the safety, integrity, and rights of Legacy Pullz and its users. We do not sell your personal information, and we do not use it for third-party advertising.
6. How we share information
We share information only with service providers who process it on our behalf, under contract, for the purposes above: • Supabase — account authentication and database hosting. • Stripe — payment processing. • Expo / EAS — push notification delivery and app updates. • Resend — sending transactional emails. • Apple & Google — only if you choose those sign-in methods. • Shipping carriers — the name and address needed to deliver a shipment you request. We may also disclose information if required by law, to enforce our Terms, or in connection with a business transfer. We never sell your data.
7. Data retention
We keep your account and order information for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal, tax, and accounting requirements. Fraud-prevention signals (device identifiers) are retained only as long as needed for that purpose. When you request deletion (see Section 9), we remove or anonymize your personal information except where we are legally required to retain certain records (for example, transaction records for tax purposes).
8. Where your data is stored
Your information is stored on infrastructure operated by our providers (including Supabase and Stripe), which may process and store data in the United States and other countries. Where data is transferred internationally, our providers rely on appropriate safeguards for such transfers.
9. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can: • Update your profile and shipping details in the app. • Turn notifications on or off in your device settings. • Request a copy of your data, or request deletion of your account and associated personal data, by contacting us (Section 12). We will verify your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising these rights.
10. GDPR (EEA/UK) and CCPA/CPRA (California)
If you are in the EEA or UK, our legal bases for processing are: performance of our contract with you (to provide the service), our legitimate interests (security, fraud prevention, and improving the service), your consent (for notifications), and compliance with legal obligations. You may lodge a complaint with your local data protection authority. If you are a California resident, you have the right to know what personal information we collect and how it is used and shared, to request deletion, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. You may exercise these rights via the contact in Section 12.
11. Security
We protect your information with industry-standard measures: encrypted connections (HTTPS/TLS), row-level database access controls that restrict each user to their own data, server-side validation of all sensitive actions, and payment handling delegated to Stripe so we never hold your card details. No method of transmission or storage is perfectly secure, but we work continually to protect your information and to limit access to it.
12. Children
Legacy Pullz is intended only for adults who meet the minimum purchase age. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date below, and where required by law we will provide additional notice. Continued use of the app after an update means you accept the revised Policy.
14. Contact us
For any privacy question or to exercise your rights, contact us at legacypullz@gmail.com. Please include enough detail for us to locate your account and verify your identity.