Privacy Policy
1. Who we are
Kench Studio LLC (“Wovan”, “we”, “us”, “our”), registered in Virginia, USA, is the data controller for personal information processed through the Wovan mobile application (the “App”) and related websites and services (the “Service”).
Wovan is offered solely to residents of the United States. The App is not available outside the United States through the App Store or Google Play. By using the Service, you represent that you reside in the United States.
Contact for privacy matters: support@wovan.app
2. Summary
We collect the information we need to run a fantasy sports app with leagues, scoring, chat, and subscriptions, and nothing we don’t. We do not sell your personal information. We use a small set of well-known service providers (Firebase/Google, Apple, sports data providers, store billing) and we keep your information only as long as we need it.
3. What we collect
3.1 You provide to us
| Category | Examples | Why |
|---|---|---|
| Account | Email address, display name, avatar, password hash (if email login), Apple/Google sign-in identifier | Create and secure your account |
| Profile | Bio, team names, league names, preferred sports | Personalize your experience |
| User content | Chat messages, reactions, reports, feedback | Operate league chat and reporting |
| Support | Emails and messages you send us | Respond to your queries |
3.2 Collected automatically
| Category | Examples | Why |
|---|---|---|
| Device and app | Device model, OS version, app version, language, time zone | Troubleshoot and improve the App |
| Usage | Screens viewed, actions taken, session length, feature usage | Understand how the App is used |
| Identifiers | Push notification token | Deliver notifications |
| Log data | IP address, request timestamps, user agent | Security, abuse prevention, debugging |
We do not use device advertising identifiers (IDFA/GAID) for cross-app tracking and we do not run ad networks in the App.
3.3 From third parties
- Apple Sign In / Google Sign In: your name and email, if you choose those sign-in methods.
- Sports data providers (e.g. API-hosted feeds): player and match statistics. This is not your personal information; it is used to compute fantasy scores.
- App Store / Play Store: a subscription receipt confirming purchase status. We do not receive your full payment card details.
3.4 What we do not collect
We do not knowingly collect: precise geolocation, health data, financial account numbers, biometric identifiers, or government ID numbers.
4. How we use your information
We process personal information for the following purposes:
- Provide the Service — create accounts, run leagues, compute scores, deliver chat and notifications.
- Support and communication — respond to questions, send service-related emails (e.g. password reset, important notices).
- Safety and integrity — detect abuse, enforce our Terms of Service and Community Guidelines, moderate reports, prevent fraud, and comply with legal obligations.
- Improve the Service — analyse anonymised usage, develop new features.
- Billing — deliver paid features and process subscription receipts from Apple/Google.
- Marketing — only with your consent where required, to send occasional product updates. You can unsubscribe at any time.
We do not sell personal information and we do not share it with advertising networks for cross-context behavioural advertising.
5. Who we share with
We share personal information only with:
| Recipient | Role | Location |
|---|---|---|
| Google / Firebase (Authentication, Cloud Storage, Cloud Messaging) | Hosting, auth, database, push notifications | United States |
| Apple Inc. | Sign In with Apple; App Store billing; push delivery via APNs | United States |
| Google LLC | Google Sign In; Play Store billing; push delivery via FCM | United States |
| Law enforcement / regulators | Only where required by law or to protect rights, life, or safety | — |
| Acquirers | In the event of a merger, acquisition, or asset sale (with notice to users) | — |
Service providers act under contract and may only use personal information for the purposes we specify.
6. Retention
| Data | Retention |
|---|---|
| Account data | Until you delete your account, then purged within 30 days (backups rotate out within 90 days) |
| Chat messages | Kept with the league; purged with league deletion or on account deletion |
| Reports and moderation records | Retained up to 2 years for safety and audit purposes |
| Server logs (IP, request metadata) | Up to 90 days, then deleted |
| Billing receipts | Kept as long as required by tax and accounting law (typically 7 years) |
| Support correspondence | Up to 3 years after last contact |
We may retain information longer where legally required or to defend legal claims.
7. Your rights
Depending on which US state you live in, you have some or all of the following rights:
- Access — get a copy of your personal information.
- Correction — fix inaccurate or incomplete data.
- Deletion — delete your account and personal information.
- Portability — receive your data in a machine-readable format.
- Opt out of sale or sharing — we do not sell or share your personal information.
- Limit use of sensitive information — we do not use sensitive personal information for purposes that trigger this right.
- Withdraw consent — for processing based on consent.
- Not be discriminated against for exercising your rights.
To exercise any of these rights, email support@wovan.app with the subject line “Privacy request” and the account email address you used to register. Account deletion is also available directly in-app under Settings.
We respond within 30 days (or as required by applicable law). We may need to verify your identity before acting — typically by confirming the request from the email address associated with your account.
8. US state privacy disclosures
California (CCPA/CPRA)
If you are a California resident:
- Categories of personal information we collect and purposes are listed in sections 3 and 4.
- Sources are listed in section 3.
- Recipients are listed in section 5.
- We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.
- Sensitive personal information: we do not use sensitive personal information for purposes that trigger the right to limit under the CPRA.
- Retention: see section 6.
- Authorised agents may submit requests on your behalf with written authorisation.
Other US states
Residents of US states with comprehensive privacy laws (including but not limited to Colorado, Connecticut, Delaware, Florida, Montana, Oregon, Texas, Utah, and Virginia) have rights similar to those listed in section 7. To exercise them, follow the same process described in section 7.
9. Children
Wovan is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, email support@wovan.app and we will delete it.
We do not show behavioural advertising, regardless of user age.
10. Security
We apply industry-standard technical and organisational measures to protect personal information, including:
- Transport encryption (TLS) between the App and our services;
- Encryption at rest for databases and backups (via Google Cloud / Firebase defaults);
- Principle of least privilege for internal access;
- Firestore security rules restricting data access to the account owner and authorised participants;
- Automated abuse detection on chat and accounts;
- Regular dependency and security scanning.
No online service is perfectly secure. If you believe your account has been compromised, contact support@wovan.app immediately.
11. Push notifications
The App sends push notifications for league updates, chat messages, trades, scoring, and other activity. You can disable push notifications at any time in your device’s system settings or in Settings > Notifications inside the App.
12. Cookies and local storage
The mobile App does not use browser cookies. It uses device local storage (AsyncStorage, Firebase SDK storage) to keep you signed in and to cache app state.
13. Third-party links
The Service may include links to third-party sites or services. Their privacy practices are their own. We encourage you to read their policies.
14. Changes to this policy
If we make material changes to this policy we will notify you through the App or by email before the changes take effect. The “Last updated” date at the top of this document always reflects the latest version.
15. Contact
Questions, requests, or complaints:
Kench Studio LLC
support@wovan.app
California residents may also contact the California Privacy Protection Agency.