THE DROPYour data, plainly.
This policy describes what The Drop app and website collect, why, and what you can do about it. It is written to match what the app actually does.
What we collect
| Data | Why | Where it is processed |
|---|---|---|
| Email address, or your Apple ID sign-in and Apple's relay email | To create and secure your account | Supabase (United States) |
| Name, username, birthday, and state of residence | Eligibility (18+, U.S.), leaderboards by username | Supabase |
| Predictions, coin balances, transaction ledger, and redemption requests | To run the game and pay prizes | Supabase |
| Device attestation key (Apple App Attest) and a device identifier | One account per device, fraud prevention | Supabase, Apple |
| Push notification token | Daily drop and result alerts, only if you turn them on | Apple Push Notification service |
| Gift-card delivery email, and IRS Form W-9 above $600 in a year | Prize fulfilment and tax reporting required by law | Sponsor, stored encrypted; tax forms retained as required by the IRS |
| Subscription status from Apple, if you subscribe to Drop Plus | To unlock subscriber features | Supabase, from Apple's server notifications |
| Crash and performance data | To keep the app working | Apple |
| IP address and basic device information when video streams | Video delivery and abuse prevention | Mux (video), Supabase, Vercel (website) |
We do not collect precise location, contacts, or photos. We do not use advertising identifiers, show third-party ads, or sell personal information. We do not use your data to train AI models.
How we use it
To operate the game, keep it fair, prevent fraud and duplicate accounts, deliver prizes, meet tax and legal obligations, send notifications you opt into, respond to support requests, and improve the app. We use aggregated, de-identified play data to tune the game.
Who we share it with
Service providers who process data for us under contract and only on our instructions: Supabase (database and authentication), Mux (video hosting and streaming), Apple (sign-in, push notifications, App Attest, subscriptions), Vercel (website and admin hosting), and Resend (transactional email). Gift-card merchants receive only the email address needed to deliver your card. We disclose information to authorities when required by law, and would transfer it in a merger or sale under the same protections described here.
How long we keep it
Your account data is kept while your account is active. Ledger, prize, and tax records are retained for seven years after the relevant transaction because tax and audit rules require it; after you delete your account these records are de-linked from your username.
Your choices
- Delete your account. In the app, You tab → Account → Delete account. Your profile, device records, push tokens and host memberships are removed immediately and your sign-in is deleted. Or email privacy@thedrop.today from the address on your account.
- Notifications can be turned off in iOS Settings at any time.
- Access, correction, or a copy of your data: email privacy@thedrop.today. We respond within 45 days.
- State privacy rights. Residents of California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states with privacy laws may have rights to access, correct, delete, or port their data and to opt out of sales or targeted advertising. We do not sell data or use it for targeted advertising. To exercise any right, email us; we will not treat you differently for doing so. You may appeal a decision by replying to our response.
Children
The Drop is for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn we have, we delete the account and its data.
Security
Data is encrypted in transit and at rest. Access to our administrative systems requires a second authentication factor. Coin movements are recorded in an append-only ledger so balances can always be audited. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
Changes
We will post changes on this page and update the effective date. For material changes we will also notify you in the app before they take effect.