Privacy Policy

Effective 24 September 2026 · TG Labs Pte. Ltd., Singapore · Supersedes the version dated 22 July 2026

What KingPick is

KingPick is a free-to-play sports prediction game. You make picks with virtual currency (Gems) that has no monetary value, cannot be purchased in the current version, and cannot be exchanged for money or anything else of value. KingPick takes no wagers and pays no winnings. Odds displayed in the app are informational data licensed from a third-party sports data provider.

What we collect

Account data. Your email address, a username (handle), an optional display name and an optional profile picture. Your email is used to create the account, verify it, sign you in and recover it.

Gameplay data. The picks you make, the odds they were taken at, their results, your Gem balance and its full transaction ledger, experience points, streaks and daily-return tiers. This is the substance of the game.

Device and preference data. If you allow notifications, a device push token. Your notification preferences and your device's UTC offset, so that a notification arrives at a sensible hour where you are.

Diagnostic data. If the app hits an error we send a crash report. See Crash reporting below, which describes the unusual amount of care taken with it.

We do not collect your location, your contacts, your advertising identifier, or any biometric data. We do not operate an advertising or analytics SDK of any kind.

What is public

KingPick is built around a verifiable record, so some of your data is deliberately visible to other users:

Your email address is never shown to another user, and neither is your Gem balance or your unsettled (pending) picks. A Hide picks switch in your profile withdraws your pick history from other users' view; your handle and headline stats remain visible. If you share a ticket, the image and link you share are public by their nature.

Who processes your data

We use a small number of processors. Each handles data on our behalf under its own terms and none of them sell it.

Supabase

Database, authentication and file storage — your account, your picks, your ledger and your profile picture. This is the primary store.

Google Firebase Cloud Messaging

Delivery of push notifications only. It receives a device push token and the notification text (for example, that a ticket has settled). It receives no account data.

Firebase App Distribution (Android beta testers only)

While KingPick is in closed beta, Android builds are distributed to invited testers through Firebase App Distribution, which knows the tester's email address and device model for that purpose. This ends when the app ships publicly.

Sentry (crash reporting)

Uncaught errors are reported to Sentry so we can fix them. Our Sentry project is hosted in the European Union. The categories collected are crash data, performance data and other diagnostic data; none of it is used for tracking and none of it is linked to an advertising profile.

Crash reporting sits next to the wallet and the bet slip, so we treat it as a data-egress risk rather than a convenience. The outgoing report is rebuilt from an explicit allowlist of fields rather than filtered for known-bad ones, which means a field added by a future version of the reporting library is dropped rather than forwarded. Specifically: IP addresses are not collected, request and response bodies are never attached, screenshots and view hierarchies are disabled, and network breadcrumbs are stripped of their query parameters. The only identifier attached to a crash is your opaque account ID — not your email address and not your handle.

Sportmonks (sports data)

Fixtures, odds, scores, lineups and league tables come from Sportmonks. Data flows one way: they receive no personal data about you, and no request we make to them identifies a user.

Cloudflare

This website is served by Cloudflare, which processes standard web-server request logs (IP address, user agent, requested URL) for delivery and abuse prevention. The app itself does not route through it.

Legal bases (where the GDPR applies)

We process account and gameplay data to perform the contract of providing the game. We process crash diagnostics under our legitimate interest in keeping the app working. We send push notifications on your consent, which you give at the system prompt and can withdraw at any time in your device settings or in the app's notification settings.

International transfers

We are based in Singapore. Our processors operate in the United States and the European Union, so your data is processed outside your country of residence. Transfers rely on the processors' own standard contractual clauses.

Retention and deletion

Account and gameplay data are retained for as long as your account exists. Crash reports are retained for a limited period set by our crash-reporting provider and no longer than 90 days.

To delete your account and the personal data attached to it, email support@kingpick.app from the address your account uses, or write to us from the support page. We will action it within 30 days and confirm when it is done.

One honest caveat about deletion: graded picks are an append-only record, and the integrity of everyone's published statistics depends on that. On deletion your account, email, handle, profile picture and Gem ledger are removed, and any remaining graded rows are severed from you — anonymised so that they can no longer be attributed to a person. They are not shown under your name, because after deletion there is no name.

Your rights

You may request access to the personal data we hold about you, correction of anything inaccurate, a portable copy, or deletion, using the contact address above. Your handle, display name, profile picture and notification preferences are editable directly in the app.

Children

KingPick is intended for users aged 17 and over. We do not knowingly collect data from children. If you believe a child has created an account, write to us and we will delete it.

Security

Traffic is encrypted in transit. Client applications hold no privileged database credentials and cannot write to the database directly; every write goes through a server-side function that checks who you are. Row-level security scopes private data to its owner.

Changes

We will update this page when the policy changes and revise the effective date above. Material changes will also be announced in the app.

Contact

TG Labs Pte. Ltd., Singapore
support@kingpick.app