Privacy Policy

Effective July 18, 2026

Commish ("we," "us") runs pick'em, spread, over/under, player-prop, parlay, and survivor prediction games you play with friends. This policy explains what we collect, why, and your choices. Commish is for entertainment only — we do not process real-money wagers, deposits, or payouts.

Information we collect

• Account information you provide: email address, display name, handle, bio, and favorite teams.
• Profile photo, if you choose to upload one. Uploaded photos are held privately and reviewed before they appear. We resize and re-encode each image (which removes embedded metadata such as EXIF/GPS), and check it for prohibited content using an image-moderation provider and, where needed, human review. Only an approved photo becomes visible; a rejected or abandoned upload is deleted, and photos are stored with our cloud storage/CDN provider.
• Content you create: the games you create or join, your picks, comments, and reactions.
• Safety information: reports you submit, report categories and details, snapshots of reported content and author information, users you block, and moderation decisions. We use this information to investigate abuse and enforce our Terms.
• Sign-in identifiers when you use Sign in with Apple or Google to authenticate (we receive a verified identifier and, if you allow it, your name/email).
• Device token if you enable push notifications, so we can deliver them.
• Basic technical and usage data (e.g., app interactions and server logs) needed to operate and secure the service. This includes security and audit records of sensitive administrative and account-security actions, and short request-correlation identifiers (including a Cloudflare request id) used to investigate abuse. These records reference accounts and objects by identifier and do not contain the content of your messages.

How we use your information

• To run your games, grade picks, and show standings to your circle.
• To authenticate you and keep your account secure.
• To send transactional messages (e.g., a password-reset code) and, if you opt in, push notifications. You can turn notification categories off in Settings at any time.
• To provide support and to maintain, improve, and protect the service.

How your information is shared

We do not sell your personal information, and we do not use it for tracking or cross-app advertising. We share it only with trusted service providers who help us operate the app, and only as needed — for example, providers for cloud hosting and database storage; a content-delivery network and edge-security provider; profile-photo storage and image moderation; transactional and moderation email delivery; sign-in providers (Apple and Google) when you choose them; push-notification delivery; and sports and odds data providers for game content. These providers may use your information only to perform services for us.

AI features: the AI/custom-game builder is not available in this version, and your content is not sent to any AI provider.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.

Data retention and deletion

We keep your information while your account is active. Safety records, including reports, block records, reported-content snapshots, and moderation decisions, may be retained after content or an account is deleted when reasonably necessary to investigate abuse, prevent repeat violations, document our response, or meet legal obligations. Moderation alerts are processed by our email provider and delivered to authorized operators.

We retain security and audit records — the accountability log of sensitive administrative and account-security actions and abuse-threshold summaries, together with their request-correlation identifiers — for up to 180 days, then delete them. These records identify accounts and objects by identifier and correlation id, not by message content.

You can delete your account at any time from Settings → Delete Account. Deletion runs as a single operation that removes your profile, profile photos, picks, comments, games you own, and social connections, and deletes your stored profile photo. For Sign in with Apple accounts, deletion also revokes your Sign in with Apple. The limited safety and audit records described above are retained without your account identity — reporter and actor identifiers are severed and profile details removed — solely for the safety and legal purposes stated. You can also contact us at [email protected] to request deletion.

Security

We use reasonable technical and organizational measures to protect your information, including encryption of data in transit, edge protection and rate limiting, and audit logging of sensitive administrative and security actions with alerting for likely abuse. No method of transmission or storage is completely secure, but we work to protect your data.

Children's privacy

Commish is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Your choices and rights

You can review and update your profile in the app, control notifications in Settings, and delete your account. Depending on where you live, you may have additional rights to access, correct, or delete your information — contact us to exercise them.

Changes to this policy

We may update this policy as the app evolves. We will post the updated version here and surface material changes in the app.