PRIVACY POLICY

Effective September 22, 2026

Welcome to PrizeTime ("we," "us," "our," "Company," or "PrizeTime"). We are committed to protecting your privacy and ensuring you have a positive experience on our application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services ("App").


Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App. By accessing and using PrizeTime, you acknowledge that you have read and understood this Privacy Policy.


1. INFORMATION WE COLLECT


1.1 Information You Provide Directly

When you create a PrizeTime account and use our App, we collect information you voluntarily provide, including:

• Account Information: name, email address

  • Challenge Information: challenge descriptions, reward descriptions, challenge goals, challenge duration, participant names

  • Age range and birth year — this is only collected in an account verification step to comply with laws and rules. We do not retain this information or use it in any way.


1.2 Information Collected Automatically

When you use PrizeTime, we automatically collect certain technical information:

• Device Information: device model, operating system, unique device identifiers (IDFA, IDFV), device settings

• PrizeTime Usage Data: which features you use, time spent in the App, crashes or errors, pages/views accessed

• Challenge Outcomes: completion status, achievement of goals

• Ledger Data: challenge results logged in the ledger, settlement status


1.3 What We Do NOT Collect

Important: PrizeTime does NOT collect or store raw screen time event data. Screen time events (e.g., app usage, screen time minutes) are monitored locally on your device using Apple's DeviceActivity API and remain stored on your device only. We do not transmit, access, or retain this raw data. We also do not directly observe which apps a user selects to track for their goal, though we do note the intended tracking scope from the person who sent the challenge.

We also do not collect:

• Biometric data (fingerprints, face data)

  • Location data

  • Health information or medical records

• Payment information (we do not process payments in-app)


2. HOW WE USE YOUR INFORMATION


We use the information we collect for the following purposes:

• Account Management: to create and manage your account, authenticate you, and maintain account security

• App Functionality: to operate PrizeTime, enable challenges, track progress, and display your ledger

• Communication: to send you notifications about challenges, outcomes, account updates, and support responses

• Analytics: to understand how users interact with the App, identify trends, and improve features

• Customer Support: to respond to your inquiries and resolve technical issues

• Safety & Compliance: to detect and prevent fraud, abuse, security breaches, and enforce our Terms & Conditions

• Legal Obligations: to comply with applicable laws and legal processes

We will not use your information for purposes other than those listed above without first obtaining your consent.


3. HOW WE SHARE YOUR INFORMATION


3.1 Sharing Between Users

When you participate in a challenge on PrizeTime:

• The other user(s) in the challenge can see your challenge outcome (whether you completed the goal), your participation status, and reward information

• The other user(s) can see entries you create in the shared ledger

• Your name is visible to other users you challenge or who challenge you

• Your raw screen time data is NOT shared with other users. Only the outcome (goal met or not) is visible.


3.2 Sharing with Third Parties

We do not sell your personal data to third parties. However, we may share information in the following limited circumstances:

• Service Providers: We use third-party vendors to provide essential services (cloud storage, authentication, analytics, customer support). We use Google’s Firebase as a back end. We also use Post Hog to monitor use within the app to help improve features.

• Legal Requirements: We may disclose information if required by law, court order, or government request (e.g., law enforcement subpoena).

• Safety & Fraud Prevention: We may share information to detect, prevent, or address fraud, abuse, or security threats.

• Business Transfers: If PrizeTime is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

3.3 What We Do NOT Share

We do NOT share, sell, or disclose:

• Your password or authentication credentials

• Raw screen time event data

• Your personal information with advertisers or marketing partners


4. DATA RETENTION

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specific retention periods:

• Active Account Data: Your account information, profile, and ongoing challenges are retained as long as your account is active.

  • Deleted Account Data: When you delete your account, your challenge history and ledger data involving other users may be retained for the integrity of the app. You may request deletion of your data by emailing us at [email protected].

  • Inactive Accounts: If your account is inactive for one year, we may delete your account and associated data. You will receive email notice before deletion, if practical.

• Dispute/Legal Holds: If a dispute is pending or we receive a legal request, we may retain relevant data for as long as necessary to resolve the matter.

• Analytics Data: Aggregated, de-identified analytics data may be retained indefinitely.


5. DATA SECURITY

We take data security seriously and implement industry-standard technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Access Controls: Only authorized employees and service providers have access to personal data, and only for legitimate business purposes

• Secure Authentication: This is done via Apple’s Single Sign On API

However, no security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security. You use PrizeTime at your own risk. We recommend you take steps to protect your password and account.


6. CHILDREN'S PRIVACY

PrizeTime is intended for users aged 13 and older. We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable child protection laws.

By using PrizeTime, you certify that you are at least 13 years old. If we discover that a user is under 13, we will delete that account and associated data immediately.


7. THIRD-PARTY SERVICES

PrizeTime may integrate with third-party services. Here's what you should know:

• Apple DeviceActivity API: We use this to monitor screen time on your device. This data remains on your device and is not transmitted to our servers.

• Firebase: We store challenge and ledger data on Google Firebase's servers

• We use Apple Single Sign On for user authentication; their privacy policy governs their use of your authentication data.

We are not responsible for the privacy practices of third parties; please review their privacy policies independently.


8. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the revised Privacy Policy in the App and updating the "Last Updated" date at the top. Your continued use of PrizeTime after such changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

12. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]


9. YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know: You can request what personal information we have collected about you

• Right to Delete: You can request deletion of personal information we've collected (subject to certain exceptions)

• Right to Correct: You can request correction of inaccurate personal information

• Right to Opt-Out: You can opt out of the sale or sharing of your personal information (though we do not currently sell or share data)

To exercise these rights, please submit a request to [email protected] with "California Privacy Request" in the subject line.


—————————


By using PrizeTime, you acknowledge that you have read and understand this Privacy Policy.

Questions? Contact us at [email protected]

© 2026 PrizeTime