Privacy Policy

Version 1.6 — Effective 14 October 2026

Changes in this version

Version 1.6: Grigg Predictor is now operated by Grigg Tech Ltd (company number 17521681), which took over from Paul and Emily Grigg Ltd on 14 October 2026; the company's details are updated throughout. Version 1.5 added the Call the big game page to "Predictions you make before you have an account". Version 1.4 added "Predictions you make before you have an account", after Section 2. Version 1.3 added "How we measure invite links", after Section 6. Version 1.2 added to Section 2 what we receive when you sign in with Google or Apple, and what we use it for. Version 1.1 added detail to Section 8 on exactly what happens when you delete your account, and a self-service way to do that from within the app (Account > Delete account).

1. Who we are

Grigg Predictor ("we", "us", "our") is a free, skill-based sports prediction competition, operated by Grigg Tech Ltd (company number 17521681, registered office 167-169 Great Portland Street, London, England, W1W 5PF) ("the Operator"). For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), the Operator is the data controller for the personal data described in this policy.

If you have any questions about this policy or how your data is handled, contact us via the in-app Help & Contact page.

2. What personal data we collect

We collect the following personal data when you use Grigg Predictor:

  • Account details: your real name, email address, and password (stored securely — we never store your password in plain text).
  • If you sign in with Google or Apple: we receive your name and email address from them (Apple may give us a private relay address that forwards to your real one). We use these only to create your account and sign you in. We never receive your Google or Apple password, we don't read anything else in your Google or Apple account, and we never post or act on your behalf. You can remove Grigg Predictor's access at any time in your Google or Apple account settings.
  • Date of birth: collected so we can apply the right protections for younger players (see Section 10) and confirm you're old enough to hold an account.
  • Predictor team name: the name you choose to appear on leaderboards. This is visible to other players.
  • Profile photo: if you choose to upload one.
  • Gameplay data: your predictions, points, tournament and Grigger Circle memberships, and your use of the Griggle boost.
  • Favourite team, and your location: if you choose to provide these.
  • Phone number: optional, only if you choose to give it to us at sign-up.
  • Communications: anything you send us, e.g. via the Help & Contact page.
  • Technical data: IP address, browser or device type, and similar information collected automatically when you use the app.

    • Grigg Predictor is free to enter. We do not currently collect payment card details or any other payment information.

    Predictions you make before you have an account

    If you open a link to a Grigger Circle, or our Call the big game page, and fill in predictions before creating an account, we keep them so they are waiting for you when you sign up. They are held against the link you opened, not against you — at that point we have no name, email address or account for you.

    Create an account and they become your predictions. If you don't, we delete them within seven days, or sooner once the games they cover have kicked off.

    3. How we use your data, and our legal basis for doing so

    We use your personal data to:

  • create and manage your account, and let you take part in tournaments and Grigger Circles — necessary to provide the service you've signed up for;
  • display your predictor team name and in-game stats to other players so leaderboards and Grigger Circles work — necessary to provide the service;
  • apply the additional protections for players under 16 described in Section 10 — necessary to provide the service safely, and to meet our legal obligations to protect children online;
  • keep the app secure, prevent abuse, and moderate content (including the profanity filter on team names and any reports you or others make) — based on our legitimate interest in running a safe, fair competition;
  • respond to your messages and resolve any issues you raise — necessary to provide the service.

    • 4. Who we share your data with

    We share personal data with:

  • Supabase, our database, authentication, and hosting provider, who process data on our behalf under their own data processing terms;
  • other players, to the extent described in this policy — your predictor team name and in-game stats are visible within your tournaments and Grigger Circles; more personal details are restricted for players under 16 (see Section 10).

    • We do not sell your personal data to anyone, and we do not share it with third parties for their own marketing purposes.

    5. Complying with legal, regulatory and law enforcement requests

    We may also disclose personal data where we're required to by law, or to respond to a valid request from a court, regulator, or law enforcement body — for example, if we're legally required to share information about a user in connection with an investigation.

    6. Analytics

    We don't use any third-party analytics or advertising tools — we don't track you across other websites or apps, and we don't use your data to serve you ads. We do measure how invite links are used, ourselves, as set out below. If we ever add a third-party tool, we'll update this policy and our Cookie Notice before doing so, rather than after the fact.

    How we measure invite links

    When someone opens a link to a Grigger Circle, we record what happens from there until they join — or decide not to. We do it so we can see where joining goes wrong and fix it.

    We record the time; which circle the link was for, and whether it came from a shared link or an email invite; which game week was open and how long was left before its deadline; whether you were already signed in, or already playing that competition; which version of the page you saw; the kind of browser and phone you used, including whether the page opened inside another app such as Facebook or Instagram; and the steps you took — opening the page, choosing to create an account or to sign in or to get the app, whether that finished or failed, and whether you then went on to enter the competition and join the circle.

    To follow one visit from the link through to joining, we give each visit a random id and carry it in the web address. It is not connected to you until you create an account or sign in, and it tells us nothing about you beyond what you did on these pages.

    We do not record your IP address. There is no advertising and no third-party tracking on these pages, and none of this is shared with anyone outside Grigg Predictor. We delete it after 12 months.

    7. Where your data is stored

    Your data is stored by Supabase in their London (eu-west-2) data centre, within the UK. It doesn't leave the UK as part of our normal operation of the app.

    8. How long we keep your data

    We keep your personal data for as long as your account remains active. You can delete your account at any time, either yourself from Account > Delete account in the app, or by asking us to via the Help & Contact page.

    When you delete your account, we delete your personal data — your name, profile photo, date of birth, location, favourite team, and any other personal details — immediately.

    We keep your gameplay data: your predictions, points and results. We don't delete this, because doing so would leave a hole in the league tables and history of everyone else who played alongside you — their rank, points, movement and past game weeks need to stay exactly as they were. Instead, we anonymise it: your predictor team name is replaced with a neutral placeholder that can't be traced back to you, alongside the personal data already removed in the step above.

    The only exception is where we need to keep certain records for legal reasons (for example, to resolve a dispute about a prize).

    9. Your rights

    Under UK data protection law, you have the right to:

  • ask us for a copy of the personal data we hold about you;
  • ask us to correct anything that's inaccurate or incomplete;
  • ask us to delete your data, in certain circumstances — or delete your account yourself at any time from Account > Delete account (see Section 8 for exactly what that does and doesn't remove);
  • ask us to restrict or object to how we use your data, in certain circumstances;
  • ask us to move your data to another provider (data portability), where technically possible;
  • withdraw your consent at any time, where we're relying on consent (for example, for notifications) — this won't affect anything we did before you withdrew it.

    • To exercise any of these rights, contact us via the in-app Help & Contact page. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.

    10. Protecting younger players

    If you're under 16, we apply extra protections to keep your personal information private from other players. Other players can only see your predictor team name and your in-game stats (like your rank and points) — your favourite team, your location, your profile photo, and any other personal details are hidden from other players, even once profile-viewing is available in the app.

    We collect your date of birth specifically so we can apply these protections automatically — we don't ask you or expect you to remember to turn them on yourself.

    Parents and guardians: if you have any concerns about your child's account or the information associated with it, please contact us via the in-app Help & Contact page and we'll help.

    11. Cookies and similar technologies

    We use a small number of cookies to keep you signed in and to make the app work. See our separate Cookie Notice for the full details.

    12. Third-party websites

    The app may occasionally link out to third-party websites — for example, official club or competition sites, or a news article referenced in fixture information. We're not responsible for the content or privacy practices of those sites, and this policy doesn't cover them. Check their own privacy policy before providing them with any personal data.

    13. Keeping your data secure

    We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or misuse, including secure password storage and access controls on our admin systems. No method of storing or transmitting data is completely secure, but we work to keep your information as safe as we reasonably can.

    14. Changes to this policy

    We may update this policy from time to time, for example as the app gains new features. We'll post the updated version here with a new effective date, and let you know if the changes are significant.

    15. Contact us

    If you have any questions about this policy or your personal data, contact us via the in-app Help & Contact page.