Who we are. Cipher Digital Developments ltd. is the controller responsible for Pools. Questions and privacy requests can be sent to info@cipherdev.ie.
Information we collect
Account and profile information
Pools can create an anonymous account so you can begin using the app. If you protect or recover your account with Apple or Google, we receive the account identifiers and information those providers make available, which may include your email address. We also store your account ID, chosen display name, avatar colour and, if you choose one, your username. We store your People-search visibility preference and username history needed to manage changes and prevent impersonation.
Content and activity
We process pools and Groups you create or join, invitations, picks, options, results, votes, reactions, discussion messages, notification preferences, friendships, friend requests and their statuses, blocks, reports and the times these actions happen. We store Activity inbox events and whether you have read them. Reports may include a protected snapshot of the relevant content and the relationship or invitation that provides context. Friendships are relationships within Pools; we do not import your phone’s address book to provide these features.
Device and technical information
If you enable notifications, we store a device push token, platform, app identifier and delivery preferences. Our infrastructure may also process IP addresses, request logs, crash details and security signals needed to operate and protect the service.
Support and website information
If you contact us, we receive the details you send. This website does not create a Pools account, run advertising trackers or store contact-form entries. Our hosting provider may process ordinary request and security logs.
Why we use information
Who can see or receive information
People in the same pool or Group can see the profile, picks, messages, reactions and results that the feature makes available to them. Depending on the pool rules, picks may stay hidden until the pool closes.
We use service providers to host and deliver Pools, including Supabase for application infrastructure, Apple and Google for optional account sign-in, and Apple Push Notification service or Firebase Cloud Messaging for notifications. Those providers process information under their own terms and our arrangements with them. We may also disclose information when required by law, to protect people or the service, or during a legitimate business reorganisation.
People search and social features
When “Show me in People search” is enabled, other linked users can find your profile by searching your username in Explore. Results can show your display name, username and avatar colour. Existing username holders are discoverable by default unless they turn this setting off. Friends and people sending or receiving requests or invitations can see the profile and status information needed for those interactions; your full friend list is not a public directory.
Turning People search off hides you from search. Existing friendships, pending requests and access through shared pools or Groups remain. Published public pools and their creator profiles may be visible outside your shared pools or Groups. Activity is an account-specific inbox, although the underlying event may also be visible to other people involved.
International transfers
Some providers may process information outside Ireland or the European Economic Area. Where required, we use recognised safeguards such as adequacy decisions or standard contractual clauses.
How long we keep information
We keep account details and current friendships while needed to operate your account. Request and invitation history, username history and contact restrictions may remain after an interaction ends to enforce cooldowns, prevent repeated unwanted contact and investigate reports. Activity and invitation screens show a bounded recent history; an item disappearing from a screen does not necessarily mean its underlying record has been deleted.
We retain shared pool and Group records while needed to preserve participants’ history and results. Reports, security records and support correspondence may be kept for as long as needed to investigate concerns, prevent abuse, resolve disputes or meet legal obligations. The nature of the concern, whether it remains unresolved and any applicable legal requirements determine that period.
Account deletion removes sign-in access and deletes or de-identifies personal account data through our deletion process. Some shared records, relationship history and moderation or security evidence may remain for the purposes above. Shared historical structures may retain a neutral “Deleted user” placeholder so other participants’ pools and results remain understandable. Contact us for information about retained records or to exercise your rights.
Your choices and rights
Depending on the law that applies, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on it. You can edit your profile, notification preferences and blocks in the app, and start account deletion from Profile. In Profile, use “Show me in People search” to control discoverability. You can remove friends, decline requests and invitations, and block unwanted contact. You can also request deletion without reinstalling the app through our account deletion page. Contact info@cipherdev.ie for a privacy request.
You can also complain to the Irish Data Protection Commission or your local data protection authority.
Children
Pools is not directed to children under 16. If you believe a child has provided personal information without appropriate permission, contact us so we can review and take appropriate action.
Security and changes
We use access controls, scoped permissions and other technical and organisational measures designed to protect information. No service can guarantee absolute security. We may update this policy as Pools changes; the date at the top will show the latest version.