Privacy Policy

Last updated: January 6, 2026

This Privacy Policy explains how indindi ("we", "us", or "our"), operated by Liam Loughnane, collects, uses, shares, and protects your information when you use our private prediction game (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your personal data is:

Liam Loughnane
Email: liam@loughystudios.com
Website: https://indindi.com

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Information We Collect

Information You Provide

  • Account information: Email address, display name (username), and password (stored securely in hashed form)
  • Profile information: Optional avatar image URL and notification preferences
  • User-generated content: Group names, market questions, options, and comments you create

Information Generated Through Use

  • Activity data: Groups you join, bets you place, markets you create, points earned or lost, and leaderboard standings
  • Transaction records: Points transactions, bet history, and market resolutions

Information Collected Automatically

  • Device information: Device type, operating system, and app version
  • Push notification tokens: If you enable push notifications, we store your device token to send you notifications
  • Log data: IP address, access times, and pages viewed
  • Analytics data: We use analytics services to understand how the Service is used. This includes Mixpanel in the mobile app and Vercel Analytics on our website. These services collect usage data such as app opens, features used, and user interactions to help us improve the Service.

3. Legal Basis for Processing (GDPR)

If you are in the EEA, we process your personal data based on the following legal grounds:

  • Contract: Processing necessary to provide the Service you requested (e.g., creating your account, managing groups, processing bets)
  • Legitimate interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your rights
  • Consent: Where you have given explicit consent, such as for push notifications or marketing communications (if any)
  • Legal obligation: Processing necessary to comply with legal requirements

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Create and manage your account
  • Process your activity within groups (bets, markets, points)
  • Calculate and display leaderboards and activity feeds
  • Send push notifications (if enabled) about relevant activity
  • Respond to your enquiries and provide customer support
  • Monitor performance, identify bugs, and improve the Service
  • Ensure security and prevent abuse
  • Comply with legal obligations

5. How Your Information Is Shared

Within the Service

  • Your display name, bets, and points are visible to other members of your groups (e.g., in leaderboards and activity feeds)
  • Group admins can see member activity within their groups

With Third Parties

  • We do not sell your personal information
  • We use third-party service providers to operate the Service, including:
    • Supabase: Authentication, database, and real-time functionality (hosted in the EU)
    • Expo: Push notification delivery
    • Mixpanel: Mobile app analytics (data stored in EU)
    • Vercel: Website hosting and analytics
  • These providers process data on our behalf under appropriate data processing agreements

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of ourselves or others.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained until you delete your account
  • Activity data: Retained for the lifetime of your account for gameplay purposes
  • Anonymised/aggregated data: May be retained indefinitely for analytical purposes

After account deletion, we may retain certain records as required by law or for legitimate purposes such as security, auditing, or resolving disputes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Delete your account and data through the app's profile settings
  • Withdraw consent: Withdraw consent for optional processing (e.g., push notifications)

Additional Rights for EEA Residents (GDPR)

  • Portability: Request your data in a structured, machine-readable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Lodge a complaint: File a complaint with your local data protection authority

For California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to request deletion of personal information
  • Right to non-discrimination for exercising your rights
  • We do not sell personal information

To exercise your rights, contact us at liam@loughystudios.com. We will respond within the timeframes required by applicable law (generally 30 days for GDPR, 45 days for CCPA).

9. Account Deletion

You can delete your account at any time through the profile settings in the app. Account deletion is permanent and immediate. Once deleted:

  • Your account and personal data will be removed from our active systems
  • Your data cannot be recovered
  • Some anonymised or aggregated data may be retained for analytical purposes
  • Certain records may be retained as required by law

10. Security

We use reasonable technical and organisational measures to protect your information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure password hashing
  • Row-level security in our database
  • Regular security reviews

However, no method of transmission or storage is 100% secure. You are responsible for using a strong password and keeping your account credentials confidential.

11. Cookies and Similar Technologies

We may use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Understand how the Service is used (analytics)

You can typically control cookies through your browser or device settings, but disabling them may affect core functionality.

12. Children

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. We rely on app store age ratings to enforce this requirement. If you believe someone under 18 has created an account or provided us with personal information, please contact us at liam@loughystudios.com, and we will take appropriate action to delete the account and data.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last updated" date above
  • Notify you through the Service or by other means where appropriate

Your continued use of the Service after changes take effect means you accept the updated policy. If you do not agree with the changes, you should stop using the Service and delete your account.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have any concerns about how we handle your data, please contact us:

Email: liam@loughystudios.com

Website: https://indindi.com

For EEA residents, you also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

← Back to home