Privacy Policy

Version 1.1 — Effective 3 September 2026

Changes in this version

Version 1.1 added detail to Section 8 on exactly what happens when you delete your account, and added a self-service way to do that from within the app (Account > Delete account) alongside the existing option to ask us to do it for you.

1. Who we are

Grigg Predictor ("we", "us", "our") is a free, skill-based sports prediction competition, operated by Paul and Emily Grigg Ltd (company number 13613943, registered office 8 Rectory Close, Maisemore, Gloucester, England, GL2 8FL) ("the Operator"). For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), the Operator is the data controller for the personal data described in this policy.

If you have any questions about this policy or how your data is handled, contact us via the in-app Help & Contact page.

2. What personal data we collect

We collect the following personal data when you use Grigg Predictor:

  • Account details: your real name, email address, and password (stored securely — we never store your password in plain text).
  • Date of birth: collected so we can apply the right protections for younger players (see Section 10) and confirm you're old enough to hold an account.
  • Predictor team name: the name you choose to appear on leaderboards. This is visible to other players.
  • Profile photo: if you choose to upload one.
  • Gameplay data: your predictions, points, tournament and mini-league memberships, and your use of the Griggle boost.
  • Favourite team, and your location: if you choose to provide these.
  • Communications: anything you send us, e.g. via the Help & Contact page.
  • Technical data: IP address, browser or device type, and similar information collected automatically when you use the app.

    • Grigg Predictor is free to enter. We do not currently collect payment card details or any other payment information.

    3. How we use your data, and our legal basis for doing so

    We use your personal data to:

  • create and manage your account, and let you take part in tournaments and mini-leagues — necessary to provide the service you've signed up for;
  • display your predictor team name and in-game stats to other players so leaderboards and mini-leagues work — necessary to provide the service;
  • apply the additional protections for players under 16 described in Section 10 — necessary to provide the service safely, and to meet our legal obligations to protect children online;
  • keep the app secure, prevent abuse, and moderate content (including the profanity filter on team names and any reports you or others make) — based on our legitimate interest in running a safe, fair competition;
  • respond to your messages and resolve any issues you raise — necessary to provide the service.

    • 4. Who we share your data with

    We share personal data with:

  • Supabase, our database, authentication, and hosting provider, who process data on our behalf under their own data processing terms;
  • other players, to the extent described in this policy — your predictor team name and in-game stats are visible within your tournaments and mini-leagues; more personal details are restricted for players under 16 (see Section 10).

    • We do not sell your personal data to anyone, and we do not share it with third parties for their own marketing purposes.

    5. Complying with legal, regulatory and law enforcement requests

    We may also disclose personal data where we're required to by law, or to respond to a valid request from a court, regulator, or law enforcement body — for example, if we're legally required to share information about a user in connection with an investigation.

    6. Analytics

    We don't currently use any third-party analytics or advertising tools — we don't track you across other websites or apps, and we don't use your data to serve you ads. If that ever changes, for example to help us understand how the app is being used, we'll update this policy and our Cookie Notice before doing so, rather than after the fact.

    7. Where your data is stored

    Your data is stored by Supabase in their London (eu-west-2) data centre, within the UK. It doesn't leave the UK as part of our normal operation of the app.

    8. How long we keep your data

    We keep your personal data for as long as your account remains active. You can delete your account at any time, either yourself from Account > Delete account in the app, or by asking us to via the Help & Contact page.

    When you delete your account, we delete your personal data — your name, profile photo, date of birth, location, favourite team, and any other personal details — immediately.

    We keep your gameplay data: your predictions, points and results. We don't delete this, because doing so would leave a hole in the league tables and history of everyone else who played alongside you — their rank, points, movement and past game weeks need to stay exactly as they were. Instead, we anonymise it: your predictor team name is replaced with a neutral placeholder that can't be traced back to you, alongside the personal data already removed in the step above.

    The only exception is where we need to keep certain records for legal reasons (for example, to resolve a dispute about a prize).

    9. Your rights

    Under UK data protection law, you have the right to:

  • ask us for a copy of the personal data we hold about you;
  • ask us to correct anything that's inaccurate or incomplete;
  • ask us to delete your data, in certain circumstances — or delete your account yourself at any time from Account > Delete account (see Section 8 for exactly what that does and doesn't remove);
  • ask us to restrict or object to how we use your data, in certain circumstances;
  • ask us to move your data to another provider (data portability), where technically possible;
  • withdraw your consent at any time, where we're relying on consent (for example, for notifications) — this won't affect anything we did before you withdrew it.

    • To exercise any of these rights, contact us via the in-app Help & Contact page. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.

    10. Protecting younger players

    If you're under 16, we apply extra protections to keep your personal information private from other players. Other players can only see your predictor team name and your in-game stats (like your rank and points) — your favourite team, your location, your profile photo, and any other personal details are hidden from other players, even once profile-viewing is available in the app.

    We collect your date of birth specifically so we can apply these protections automatically — we don't ask you or expect you to remember to turn them on yourself.

    Parents and guardians: if you have any concerns about your child's account or the information associated with it, please contact us via the in-app Help & Contact page and we'll help.

    11. Cookies and similar technologies

    We use a small number of cookies to keep you signed in and to make the app work. See our separate Cookie Notice for the full details.

    12. Third-party websites

    The app may occasionally link out to third-party websites — for example, official club or competition sites, or a news article referenced in fixture information. We're not responsible for the content or privacy practices of those sites, and this policy doesn't cover them. Check their own privacy policy before providing them with any personal data.

    13. Keeping your data secure

    We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or misuse, including secure password storage and access controls on our admin systems. No method of storing or transmitting data is completely secure, but we work to keep your information as safe as we reasonably can.

    14. Changes to this policy

    We may update this policy from time to time, for example as the app gains new features. We'll post the updated version here with a new effective date, and let you know if the changes are significant.

    15. Contact us

    If you have any questions about this policy or your personal data, contact us via the in-app Help & Contact page.