Prisma Privacy Policy
Last updated: July 12, 2026
This policy explains what data Prisma ("the app", "we") collects, what we use it for, who we share it with, and what rights you have over it.
1. Data controller
Owner: Prisma4pp
Contact: info.prisma4pp@gmail.com
2. What data we collect
Account data
- Email and password (stored encrypted by our authentication provider, Supabase)
- Full name, username, date of birth (to verify you are at least 16 years old)
Profile data
- Bio, avatar (app-provided color and icon presets), favorite games, public or private profile preference
Content you create
- Reviews, ratings, game lists, game statuses (playing/completed/dropped/pending) and their dates, votes, polls, tagging of co-op play sessions with friends
Social data
- Who you follow and who follows you, users you block, invitations to shared lists
Notifications
- Your device's push notification token (if enabled), preferences for which notifications you want to receive
Subscription data (Prisma Premium)
- Your subscription status (active, expired, plan type) and an anonymous subscriber identifier, managed by our provider RevenueCat
Advertising (if enabled)
- If we show ads in the future, a device advertising identifier and limited technical data used by Google AdMob; before that happens we will ask for your consent wherever the law requires it (EEA, UK, Switzerland), through a standard consent form (Google UMP)
Technical data
- App access days (for future usage-streak features)
- If we enable error reporting (Sentry), technical crash data is collected without personally identifiable information
We do not collect payment data directly: if you buy Prisma Premium, the transaction is handled by Google Play, Apple's App Store, or RevenueCat as a technical intermediary between them — not by us.
3. What we use your data for
- Creating and managing your account
- Displaying your profile, activity and content to whoever is appropriate according to your privacy settings
- Sending you notifications you've enabled
- Preventing abusive content (banned-words filter, reporting system and user blocking)
- Improving the app and diagnosing technical errors
The legal basis is the performance of the contract you accept when registering (our Terms and Conditions) and, for optional notifications and personalized advertising, your explicit consent.
Prisma is available worldwide. Regardless of your country of residence, we apply the same data protection standards described in this policy to all users, inspired by the European GDPR.
4. Who we share your data with
- Supabase (database, authentication and storage): acts as data processor under our instructions
- IGDB / Twitch (IGDB.com): we use their API to display game information. We do not send them your personal data, only catalog queries
- Expo (push notifications): receives your device token solely to send you notifications
- RevenueCat (subscription management): receives an anonymous subscriber identifier and your purchase status
- Google AdMob (advertising, if enabled): may receive a device advertising identifier; only activated after obtaining your consent wherever the law requires it
- YouTube (Google): when you play an embedded video, YouTube may collect playback data under its own policy
- Sentry (optional, error reporting): if active, receives technical crash data, without personally identifiable information
We do not sell your data to third parties. We do not use it for our own advertising purposes; if third-party ads (Google AdMob) are shown in the future, it will always be with your prior consent wherever the law requires it.
5. How long we keep your data
For as long as your account exists. You can delete your account at any time from Edit profile → Delete account: this permanently and immediately deletes your profile and all associated content. See the account deletion page for details.
6. Your rights
Prisma is published worldwide, so we grant the same rights to all users regardless of country of residence. These rights are inspired by the European GDPR and are equivalent to those recognized by other privacy laws such as California's CCPA/CPRA or Brazil's LGPD:
- Access the data we hold about you
- Rectify inaccurate data (you can do this yourself from Edit profile)
- Erase your account and data (available directly in the app)
- Portability: request a copy of your data in a readable format
- Object to or restrict processing of your data in certain circumstances
- Not be discriminated against for exercising any of these rights
To exercise these rights, write to us at info.prisma4pp@gmail.com, regardless of your country of residence. If you reside in the European Union, you also have the right to lodge a complaint with your country's data protection authority (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).
Our data provider, Supabase, hosts data in the European Union (Ireland). Some providers such as Google (AdMob, YouTube) or RevenueCat may transfer data outside the European Economic Area; in those cases they rely on safeguards recognized by the GDPR, such as Standard Contractual Clauses.
7. Minors
Prisma requires users to be at least 16 years old. We do not knowingly collect data from users younger than that.
8. Security
We apply reasonable technical measures (encryption in transit, access control via row-level security policies in the database) to protect your data. No system is 100% secure, but we commit to notifying you if a breach affecting you were to occur, as required by law.
9. Changes to this policy
We may update this policy. If changes are significant, we'll notify you within the app.
10. Contact
For any questions about this policy or your data: info.prisma4pp@gmail.com