Privacy Policy

1. Introduction

Jynx ("we", "our", "the application") is a social gaming platform that allows players to connect, form teams and play together.

This privacy policy describes how we collect, use, share and protect your personal data when you use our application.

2. Minimum Age and Verification

Our application is reserved for users aged 18 and over.

When creating your account, we ask you to provide your date of birth. If you are under 18, you will not be able to create an account or use our services.

3. Data Collected

3.1. Registration and Profile Data

We collect the following information when creating and managing your account:

Authentication Information:

• Email (for email/password accounts)
• Username/nickname
• Profile photo (optional)
• Social login identifiers (Google, Apple) if you use these methods

Profile Information:

• Date of birth (for age verification)
• Country and timezone
• Languages spoken
• Biography (optional)
• Gaming preferences and availability
• Unique handle (automatically generated for private friend discovery)

3.2. Gaming Data

To help you find compatible teammates, we collect:

Game Profiles:

• Games you play
• Levels, ranks and game statistics
• Favorite champions/characters
• Play style

Riot Games API Integration:

We retrieve from the Riot Games API (with your consent):

• Summoner name and Riot ID
• Rank and match history (League of Legends, Valorant, etc.)
• Champion statistics
• Recent match history

Collection Reason: Display your player profile and improve matching with other players.

3.3. Usage and Technical Data

We automatically collect certain technical data:

Analytics and Performance:

• Firebase Performance Monitoring: App startup time, interface fluidity
• Sentry: Error and performance reports (with personal data anonymization)
• Firebase Crashlytics: Crash reports

Device Information:

• Device type and model
• Operating system version
• Application version

User Behavior:

• Screens visited and features used
• Time spent in the application
• Interface interactions

You can disable analytics data collection in Settings > Privacy > "Enable Analytics".

3.4. Communication Data

• Messages: Messages in community chats, private messages between users, conversation history
• Notifications: FCM tokens (Firebase Cloud Messaging) for push notifications

3.5. User Generated Content

• Uploaded photos (profile pictures, additional photos)
• Security and moderation reports
• Cosmetic preferences (avatars, badges)

4. Third-Party Services and Data Sharing

4.1. Firebase Services (Google)

We use the following Firebase services, all GDPR compliant:

• Firebase Authentication: Secure user account management
• Cloud Firestore: Storage of your profile and game data
• Firebase Storage: Hosting your profile images
• Cloud Functions: Secure backend logic execution
• Firebase Cloud Messaging: Push notifications
• Firebase App Check: Protection against abuse and bots
• Firebase Performance Monitoring: App performance monitoring
• Firebase Crashlytics: Crash reports

Firebase Privacy Policy: https://firebase.google.com/support/privacy

4.2. Sentry (Error Monitoring)

We use Sentry for error and performance tracking. Collected data includes:

• Error traces
• Technical context (OS, app version)

Sentry Privacy Policy: https://sentry.io/privacy/

4.3. Riot Games API

When you link your Riot Games account, we retrieve your game statistics via the official Riot Games API. This data is used only to display your profile and improve matching.

Riot Games Privacy Policy: https://www.riotgames.com/en/privacy-notice

5. Data Usage

We use your data to:

1. Provide Our Services:

• Create and manage your account
• Allow you to connect with other players
• Facilitate team creation and gaming session organization

2. Personalization:

• Recommend compatible teammates (game-based, rank, style matching)
• Display relevant content

3. Communication:

• Send you important notifications (matches found, messages received)

4. Service Improvement:

• Analyze usage to improve features
• Identify and fix bugs
• Optimize performance

5. Security and Compliance:

• Prevent fraud and abuse
• Enforce our terms of use
• Comply with legal obligations

6. Data Retention

6.1. Retention Periods

• Profile Data: Retained as long as your account is active
• Logs and Analytics: Firebase Analytics: 14 months (Firebase policy)

6.2. Data Deletion

You can request deletion of your account at any time (see Section 7).

Legal Retention: Some data may be retained longer to comply with our legal obligations (e.g., security reports, financial transactions).

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

7.1. Right of Access

You can request a copy of all data we hold about you.

How to exercise this right: Settings > Privacy > "Export My Data"

The process generates a JSON file containing all your data (profile, messages, statistics, etc.). The download link is valid for 7 days.

7.2. Right of Rectification

You can modify your profile information at any time from the application (username, bio, preferences, etc.).

7.3. Right to Erasure ("Right to be Forgotten")

You can request deletion of your account.

How to exercise this right: Settings > Danger Zone > "Delete My Account"

Automated Deletion Process:

1. Two-step confirmation to prevent accidental deletions
2. Immediate anonymization of your personal data (Firestore)
3. Deletion of your Firebase Authentication account (automatically revokes all OAuth tokens)
4. An anonymized ID is provided as reference
5. Option to delete your messages and generated content

Important: Deletion is irreversible. Some anonymized data may be retained for statistical purposes (GDPR-compliant).

Manual Deletion Requests: For specific data deletion requests (e.g., delete only messages from a specific community, delete Storage images, or other edge cases), please contact our Data Protection Officer at dpo@jynx.app. We will process manual requests within 30 days as required by GDPR.

7.4. Right to Data Portability

The data export (Section 7.1) allows you to retrieve your data in a structured, machine-readable format (JSON).

7.5. Right to Object

You can object to the processing of your data for direct marketing purposes.

7.6. Right to Withdraw Consent

You can withdraw your consent for:

• Analytics: Settings > Privacy > Disable "Enable Analytics"
• Push Notifications: Device settings

Note: OAuth tokens (Google, Apple) are automatically revoked when you delete your account (Section 7.3).

8. Data Security

We implement technical and organizational security measures to protect your data:

• Encryption: Secure communication via HTTPS
• Firebase Security Rules: Strict access control to Firestore data
• Authentication: Secure session management via Firebase Auth
• Input Validation: XSS injection prevention via SecureTextInput
• Rate Limiting: Protection against abuse (spam messages, automated actions)
• Moderation: Content reporting and moderation system

No system is 100% secure. In case of a data breach, we will notify you in compliance with GDPR (within 72 hours).

9. International Data Transfers

Your data may be transferred and stored on servers located outside the European Union, including:

• Google Cloud / Firebase: Uses global infrastructure with GDPR compliance
• Sentry: US-based servers with Privacy Shield compliance

Guarantees: All our partners offer protection guarantees equivalent to GDPR (standard contractual clauses, Privacy Shield certifications).

10. Cookies and Similar Technologies

Our mobile application does not use cookies in the traditional sense, but uses:

• Authentication Tokens: Stored locally in a secure manner
• Local Cache: To improve performance (profile data, recent messages)

11. Changes to This Policy

We may update this privacy policy. In case of major changes, we will notify you:

• Via an in-app notification
• By email to the address associated with your account

12. Contact Us

For any questions regarding this privacy policy or to exercise your rights:

• Email: dpo@jynx.app

Supervisory Authority: If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) in France.

13. Consent

By using Jynx, you consent to the collection and use of your data as described in this privacy policy.

You can withdraw your consent at any time by deleting your account.