Privacy Policy

Last updated: 5 September 2026

1. Who we are

Collect N Connect (“we”, “our”, “us”) is a social platform for collectors, operated by IL Corp & Tech Ltd. By using the app or website you agree to this policy.

2. Data we collect

Account data — email address, username, full name, profile photo, bio, and date of birth (used only for age gating). If you sign in via Apple or Google, we receive the identifiers those services return.
Content data — posts, captions, media, collections, events you create or join, comments, likes, follows, connection requests, and messages you send inside the app.
Optional profile data — social handles (X, Instagram, Facebook, TikTok, Twitch, YouTube, Discord, Telegram, personal website) and, if you opt in, your approximate location for the map and event discovery.
Vendor / shop data — if you enable a shop profile, the business name, address, coordinates, opening hours, and description you provide.
Payment data — if you subscribe to a paid tier, our payment processor (Stripe) handles your card details. We store only the resulting subscription state (plan, status, renewal date) — never card numbers.
Usage data — aggregated interactions (opens, taps, feature usage) used to improve the service.
Device data — platform (iOS / Android / Web), app version, and a push-notification token so we can deliver notifications you opt into. We do not collect device identifiers beyond what iOS, Android, and Expo require to deliver push.

3. How we use your data

Display your profile and content to other members you have shared it with.
Power the social feed, events, deals, map discovery, tournaments, and messaging.
Send push notifications you have opted into.
Detect abuse and enforce our Community Guidelines and Terms.
Improve the service and fix bugs (aggregate analytics only).
Comply with legal obligations (e.g., preserving evidence in response to a valid legal request).

We never sell your personal data to third parties.

4. Third-party services

Clerk — manages authentication for some accounts and stores your email / password securely.
Stream — powers in-app messaging. Messages are stored on Stream’s servers.
Stripe — processes subscription payments for paid tiers on the web.
S3-compatible storage — stores photos and media you upload.
Apple Push Notification service & Firebase Cloud Messaging — deliver push notifications to your device.
Twitch, YouTube, and other social platforms — when you link a public social handle we query the platform’s public API to detect live-stream status. We never receive your credentials for those services.
RAWG, Start.gg, TopDeck.gg, PriceCharting, eBay, TCG APIs, Ticketmaster — used to fetch public game metadata, tournaments, marketplace prices, and event listings. These calls do not include your personal data.
Sentry & PostHog — error reporting and privacy-preserving product analytics.

Each third party has its own privacy policy and security practices.

5. Data retention

Your data is retained while your account is active. When you delete your account, all personal data, posts, collections, and media are permanently removed within 30 days, except where we are legally required to keep records (e.g., tax records for paid subscriptions).

6. Your rights

If you are in the EEA, UK, California, or another jurisdiction that grants data-protection rights, you have the right to:

Access a copy of your data.
Correct inaccurate data.
Delete your account and data (in-app: Profile → Settings → Delete account).
Restrict or object to processing.
Data portability — receive your content in a machine-readable format.
Withdraw consent for optional processing (e.g., analytics, push notifications).

To exercise these rights, delete your account in the app or email privacy@collectnconnect.app. We will respond within 30 days.

7. Children

Collect N Connect is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has registered, contact us and we will remove the account.

8. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed with industry-standard algorithms and never stored in plaintext. Session tokens rotate and expire. We follow security best practices; no online service is 100% secure, but we work continuously to protect your data.

9. International transfers

We operate servers in the European Union. If you are outside the EU, your data will be transferred to and processed in the EU under the same protections described here.

10. Changes to this policy

We may update this policy. We will notify you inside the app when material changes occur. Continued use after changes constitutes acceptance.

11. Contact

Questions or requests: privacy@collectnconnect.app