Privacy Policy for Pullin

Effective Date: May 29, 2026 Last Updated: July 28, 2026

Pullin (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Pullin mobile application and related services.

By using Pullin, you agree to this Privacy Policy. If you do not agree, please do not use the app.

1. Who We Are

Pullin is an entertainment and social video-collection platform. We provide account-based features including spins, collections, community posts, messaging, and profiles.

Contact (privacy): [email protected] General support: [email protected]

2. Information We Collect

Account and authentication

Email address — used to create and secure your account via Supabase authentication (sign-in, password reset, account recovery).
Sign-in providers — if you choose Google or Sign in with Apple, we receive basic profile information from that provider (such as email and display name) to create or link your Pullin account. We do not receive your provider password.
We do not require a phone number to use the core app.

Profile and identity

You may provide or we may display:

Display name, username, avatar, profile banner, short bio
Profile photos and banners you upload may be stored in our cloud storage and served as URLs (not only on your device).
Camera and photo library (optional): If you choose to take or select a profile photo or cover image, we may request access to your device camera or photo library. We use that access only for the image you pick or capture for your profile. We do not access the camera or scan your photo library in the background. If you deny permission, those features will not work; you can still use the rest of the app.
Visibility and privacy preferences (e.g. public or friends-only profile; separate settings for game profile and Coliseum profile where offered)
Optional “favorite” collection item shown on your profile

App usage and gamification

To run the game experience, we process:

Spin counts, daily rights, bonus or late spins, streaks, points
Cards/videos you pull, star levels, collection progress, season filters
Leaderboard-related stats where you participate and visibility rules allow

Social and user-generated content

If you use social features, we process:

Thread posts — title, text, attached video references, reactions (emoji), share counts
Comments and replies on videos or thread posts
Direct messages between users (content and timestamps)
Message requests from non-friends (one introductory message until accepted or declined, where enabled)
Friend requests and connections, thread follow relationships where applicable
Block lists — if you block another user, we store that relationship on our servers to enforce messaging, friend, and visibility rules

Content reports and moderation

If you report content, we store your report (reason, optional details, reported content identifier, timestamp). Reports are handled on our servers.

Purchases (when enabled)

If you buy in-app products (e.g. spin packs or subscriptions), payment is processed by Apple App Store or Google Play. We receive purchase confirmation from the store, not your full card number. We record which product was granted to your account.

Technical data

We may process basic technical information needed to operate the app (e.g. app version, error logs). We do not use third-party advertising trackers in the core app unless we update this policy and disclose them.

We do not sell your personal data to third parties.

3. How We Use Your Information

We use collected information to:

Create, authenticate, and manage your account
Provide spins, collections, streaks, points, and season features
Display profiles, thread feeds, messages, and leaderboards according to your privacy settings
Process in-app purchases when available
Review content reports and enforce our Terms and Copyright Policy
Maintain security, prevent abuse, and apply rate limits on server actions
Improve reliability and fix bugs

4. Legal Bases (where applicable)

Depending on your region, we rely on: performance of our contract with you (providing the app), legitimate interests (security, abuse prevention), and consent where required (e.g. optional profile fields).

5. How We Share Information

We do not sell your personal data.

We may share data only with:

Service providers that help us run the app (e.g. Supabase for authentication, database, and storage; Cloudflare or similar for video and media delivery where configured), under contracts that limit use to providing the service
App stores (Apple, Google) for purchases you initiate
Authorities when required by law or to protect rights, safety, and integrity of the platform

Supabase privacy information: https://supabase.com/privacy

6. Data Storage and Security

Data is stored using Supabase and related infrastructure. We use access controls, server-side rules for sensitive actions (spins, purchases, social writes), and industry-standard practices.

No system is 100% secure. You are responsible for keeping your login credentials safe.

7. Retention, Account Deletion, and “Hide Conversation”

While your account is active

We keep your data while your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce policies.

Deleting your account in the app

You can permanently delete your Pullin account inside the app:

Open your profile / settings
Go to Account & Security
Tap Delete account
Read the warnings, type the required confirmation phrase, and confirm

Deletion is processed on our servers. When it completes:

Permanently removed (examples):

Your login — you cannot sign in again with the same account
Direct messages — removed for both participants
Global lobby messages you sent
Your collection, cards, spins, points, streaks, shop history, and related game progress
Friend connections, follow relationships, bookmarks, and personal thread activity tied to your account
Your profile identity fields (name, username, avatar, banner, bio, email on the profile record)

May remain visible in anonymized form:

Coliseum (thread) posts and comments you published may stay in the community feed so existing conversations remain readable. Your name and profile photo are removed; the author may appear as «Deleted account» (or equivalent). The text of your posts/comments and attached video references may remain.
This is intentional: deleting an account does not erase every public post from other users’ feeds.

Signing in again: If you create a new account with the same email or sign-in provider, you receive a new profile. We do not restore deleted data.

You may also request account deletion by emailing [email protected]. We may need to verify your identity.

“Hide conversation” is not the same as deletion

In direct messages, Hide conversation (sometimes shown as hiding or clearing a chat from the list) removes the thread from both participants’ inbox lists until a new message arrives. It does not immediately erase message content from our systems. Hidden messages may still be retained for safety, moderation, abuse investigation, and legal obligations until account deletion or our retention schedule applies.

After deletion or retention periods

When retention no longer requires personal data, we delete or anonymize it within a reasonable period, except where law requires longer storage (e.g. purchase records from app stores, abuse investigations, or valid legal requests).

8. Your Rights and Choices

Depending on your location, you may have the right to:

Access, correct, or delete personal data we hold about you
Object to or restrict certain processing
Withdraw consent where processing is consent-based
Lodge a complaint with a supervisory authority

To exercise these rights, contact [email protected]. We may need to verify your identity.

You can update many profile fields in the app. You can adjust privacy toggles where offered. You can delete your account from Account & Security as described in Section 7.

9. Children’s Privacy

Pullin is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided data, contact us and we will delete it.

10. International Users

Your data may be processed in countries where our providers operate. By using Pullin, you understand your information may be transferred internationally with appropriate safeguards where required.

11. Changes to This Policy

We may update this Privacy Policy. We will post the new version at the URL linked from the app and update the “Last Updated” date. Continued use after changes means you accept the updated policy.

12. Contact Us

Privacy: [email protected] General: [email protected] Copyright / content removal: [email protected]