01
Data we collect
We collect only what's needed to run fair, verifiable esports tournaments — account details, your competitive identity, and match performance.
Account & identity
Email or phone number, username, display name, your platform User ID (e.g. SUP-1001), and a salted SHA-256 password hash. We never store plaintext passwords.
Esports identity
Your numeric Free Fire in-game UID, profile photo, and a verification screenshot used by admins to confirm your account is genuine.
Match & team data
Tournament registrations, receipt numbers, team rosters, hashed team-consent codes, and career stats — total kills, wins, and matches played.
Device & local storage
Local preferences and session state stored on-device, plus a Firebase push-notification token used to deliver room codes and alerts.
02
How we use your data
- Authentication — verifying your identity via email OTP and keeping your session secure.
- Tournament operations — processing squad registrations and allocating custom room slots.
- Room delivery — sending Custom Room IDs and passwords roughly 15 minutes before a match starts.
- Fair play — verifying in-game UIDs and enforcing anti-cheat and anti-smurfing rules.
- Leaderboards — calculating kill counts, win rates, rankings, and prize distribution.
- Alerts — notifying you about match timing, team invites, and support replies.
03
Sharing & third parties
We do not sell, rent, or trade your personal data to advertisers. Data is only shared with the infrastructure providers that run the app:
| Provider | Purpose | Data handled |
|---|---|---|
| Supabase | Cloud database & authentication | Encrypted profiles, teams, registrations, match results |
| Google Firebase | Push notifications (FCM) | Device notification token |
| Google Fonts | App typography | Font asset requests only |
04
Security & storage
- All traffic between the app and our servers is encrypted with 256-bit SSL/TLS.
- Passwords and team consent codes are salted and hashed with SHA-256 before storage.
- Our Supabase database uses Row-Level Security so users can only access data they're authorized to see.
- Sensitive credentials are never written to your device in plaintext.
05
Retention & deletion
We keep your data for as long as your account stays active, or as needed to preserve fair, historical leaderboard records.
You can request full deletion at any time. Email [email protected] with the subject "Account Deletion Request" and include your registered email, display name, and User ID. Your account, team affiliations, and personal records are permanently removed within 7 business days.
06
Children's privacy
Squad Up is built for competitive players aged 13 and older. We don't knowingly collect data from anyone under 13, and any such data found on our servers is deleted immediately.
07
Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — update your display name or Free Fire UID directly from your Profile screen.
- Restriction & objection — ask us to limit or stop specific processing of your data.
- Erasure — request full deletion of your profile and records (see Section 5).
08
Contact us
Questions about this policy or a request regarding your data? Reach out any time.