Privacy Policy

2. Information We Collect

When you create an account on Ravioli, we collect:

• Account information: email address, username, date of birth, and password (hashed).
• Phone number (optional): used solely for account verification via SMS.
• Profile information: bio, avatar, and selected interests you choose to provide.
• OAuth data: if you sign in with Google or Apple, we receive your name, email, and (Google) profile picture from that provider.
• Activity data: predictions and trades you make, comments and posts you write, and your interactions with the platform.
• Device & technical data: IP address, browser or app version, device model, and operating system, for security and analytics.
• Analytics & diagnostics: in the app, product-usage events and crash/error diagnostics are collected only after you opt in to analytics (see “Analytics & Your Choices”). On the web, analytics run under our legitimate interest to operate the service.

3. How We Use It

• Create and maintain your account.
• Verify your identity and enforce our age requirement (18+).
• Process predictions, track credits, and manage your portfolio.
• Compute reputation from your prediction accuracy and activity.
• Personalize your experience based on selected interests.
• Send transactional notifications (prediction results, friend requests).
• Detect fraud, prevent abuse, and maintain platform security.
• Improve the platform through product analytics (app: with your consent).

4. Information Sharing & Sub-processors

We do not sell your personal information. We share data with the following service providers, who process it on our behalf:

• Supabase: database, authentication, and file storage (United States).
• PostHog: product analytics and crash/error diagnostics (United States).
• Twilio: SMS delivery for optional phone verification (United States).
• Cloudflare: security, bot protection, and CAPTCHA.
• Other users: your username, avatar, bio, reputation, and public activity (predictions, comments, posts) are visible to others.
• Legal requirements: when required by law, subpoena, or to protect our rights and users.

5. International Data Transfers

Ravioli is operated from the United States, and our service providers (Supabase, PostHog, Twilio) process data in the United States. If you use Ravioli from the European Economic Area, the United Kingdom, or elsewhere, your personal data is transferred to the United States. Where required, these transfers are protected by Standard Contractual Clauses with our providers.

6. Analytics & Your Choices

In the iOS app, product analytics and crash diagnostics (PostHog) are off until you explicitly opt in on first launch, and you can turn them off at any time under Settings → Privacy. We do not use advertising identifiers (IDFA) and do not track you across other companies’ apps or websites. On the web, we use PostHog for product analytics and essential cookies for authentication and session management; you can block non-essential storage via your browser or your app privacy setting.

7. Data Retention

We keep account and activity data for as long as your account is active. When you delete your account, your personal data is erased from our database, and your analytics profile and events are deleted from PostHog. Analytics event data is otherwise retained for up to 12 months. Some records may be retained longer where required for legal, security, or fraud-prevention purposes.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), certificate pinning in the app, hashed passwords, secure on-device credential storage (iOS Keychain), and row-level security on our database. No method of transmission over the Internet is 100% secure.

9. Your Rights

Depending on where you live (including under the EU/UK GDPR), you have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate information in your profile settings.
• Delete your account and associated data, in-app or on the web.
• Withdraw analytics consent at any time (app: Settings → Privacy).
• Object to or restrict certain processing, and lodge a complaint with your local data protection authority.

10. Age Requirement

Ravioli is only available to users who are 18 years of age or older. We collect date of birth to enforce this requirement and do not knowingly collect information from anyone under 18.

11. Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform. Continued use of Ravioli after changes constitutes acceptance.