Privacy Policy

1. Who We Are

Scavvi is operated by The Hopium Lab Ltd, a company registered in England and Wales. When we say “Scavvi”, “we”, “us” or “our”, we mean The Hopium Lab Ltd.

If you have any questions about this policy, you can contact us at hello@scavvi.com.

2. What This Policy Covers

This privacy policy applies to the Scavvi mobile application (available on iOS and Android) and the Scavvi website at scavvi.com. It explains what data we collect, why we collect it, and your rights regarding that data.

3. Data We Collect

3.1 Account Data

Scavvi uses anonymous authentication via Supabase. We do not require an email address, password, or real name to use the app. Each user is assigned an anonymous identifier. You may optionally provide a display name within the app.

3.2 Photos

When you take a photo to verify a scavenger hunt item, that image is sent to our AI verification service (powered by OpenAI) to confirm whether the photo matches the hunt item. Photos are processed in real-time and are not stored permanently by our AI provider. Photos associated with your hunt may be visible to other players in the same hunt session.

3.3 Location Data

With your permission, Scavvi accesses your device’s location only during active hunt sessions to calculate distance-based scoring (explorer bonus). We do not track your location in the background or when the app is not actively in use. Location data is not sold or shared with third parties.

3.4 Hunt & Gameplay Data

We store hunt metadata (hunt names, item lists, scores, leaderboard positions, and timestamps) in our database (Supabase) to enable the multiplayer experience. This data is associated with your anonymous user ID.

3.5 Purchase Data

If you subscribe to Scavvi Pro, your purchase is processed by Apple (App Store) or Google (Google Play) and managed through RevenueCat. We do not receive or store your payment card details. We only receive confirmation of your subscription status and entitlements.

3.6 Advertising Data

The free version of Scavvi displays ads served by Google AdMob. AdMob may collect device identifiers and usage data to serve relevant ads. You can opt out of personalised ads through your device settings. Scavvi Pro subscribers see no ads.

3.7 Website Data

Our website (scavvi.com) does not collect personal data. It serves as a landing page and provides deep links to the app.

4. How We Use Your Data

We use the data we collect to:

• Provide and operate the Scavvi app and multiplayer features
• Verify scavenger hunt photos using AI
• Calculate scores and distance-based bonuses
• Process in-app purchases and manage subscriptions
• Display ads to free-tier users
• Send relevant notifications and updates
• Improve the app and fix bugs

We do not sell your personal data to third parties.

5. Third-Party Services

Scavvi uses the following third-party services that may process your data:

• Supabase — authentication and real-time database
• OpenAI — AI photo verification
• Google AdMob — advertising (free tier only)
• RevenueCat — subscription management
• Netlify — website hosting

Each of these services has their own privacy policy. We encourage you to review them.

6. Children’s Privacy

Scavvi is designed to be enjoyed by users of all ages, including families with children. We take children’s privacy seriously.

• We do not knowingly collect personal information from children without parental consent.
• The app uses anonymous authentication — no email, real name, or date of birth is required.
• Children under 13 (or under 16 in the UK/EU) should use Scavvi with parental supervision and consent.
• Parents or guardians can contact us at any time to request deletion of their child’s data.
• Personalised advertising is not served to users identified as children. AdMob’s child-directed settings are enabled.

If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us at hello@scavvi.com and we will delete it promptly.

7. Data Retention

Hunt data (scores, items, leaderboards) is retained for the duration of your use of the app. Anonymous account data is retained until you uninstall the app or request deletion.

8. Your Rights

Under UK GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a portable format
• Objection — object to processing of your data

To exercise any of these rights, email us at hello@scavvi.com. We will respond within 30 days.

9. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), Supabase row-level security to restrict database access, and rate limiting on API calls. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify users through the app or website. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your data, please contact us: