Privacy Policy

This Privacy Policy describes how KULL 1 (“we”) collects, uses, and protects personal information when you use the kull1.com website, tenant subdomains (e.g., yakabass.kull1.com), and the KULL 1 mobile applications for iOS and Android (collectively, the “Service”). Tournament Directors who run clubs on the Service are independent businesses and act as separate data controllers for the catches you submit at their events.

1. Information We Collect

• Account. Display name, email address, optional avatar, hometown, bio, kayak setup, and social handles you choose to add.
• Authentication. Clerk user ID and session tokens (we do not store passwords; Clerk handles authentication on our behalf).
• Payment. Stripe customer ID for tournament entry fees. We do not see or store full card numbers — Stripe handles the entire payment lifecycle.
• Catch submissions. Photograph of the fish (uploaded with a metadata watermark), GPS coordinates of the catch, length and weight you enter, timestamp, and the tournament ID.
• Device. Expo push notification token, device platform (iOS / Android), device model name (for stable device identification across token rotations).
• Diagnostics. Crash reports and performance traces via Sentry, scoped to error context (we do not attach personal identifiers in diagnostic events).
• On-water location. While a tournament is “live” and you have permitted background location, the app monitors your position against the tournament boundary polygon to give a leave-the-zone warning. Background coordinates are processed on-device and only transmitted with a catch submission or SOS alert.
• SOS alerts. Your name, GPS coordinates, GPS accuracy, and the timestamp at the moment you trigger an SOS.

2. How We Use Your Information

• Operate tournament registrations, leaderboards, Angler of the Year standings, and historical results.
• Watermark catch photographs with tournament name, your display name, timestamp, and GPS coordinates as anti-tamper evidence.
• Send push notifications about catch verifications, tournament status changes, and TD broadcasts. You can disable push notifications in your device settings.
• Detect and prevent fraud, abuse, and tournament-integrity violations.
• Comply with legal obligations (state fishing tournament regulations, tax reporting on payouts).

3. Sharing

We share data only with: the Tournament Director hosting a tournament you enter (for tournament administration); Clerk (authentication); Stripe (payment processing); Cloudflare R2 (photograph storage); Expo (push notification delivery); Neon (database hosting); Sentry (error tracking). We do not sell or rent your personal information to third parties. We do not share data with advertising networks.

4. Catch photographs and EXIF

Photographs are stored in Cloudflare R2. Public viewers of the tournament leaderboard or scoreboard see the watermarked photo. The original EXIF metadata (including any embedded GPS) is replaced by the server-rendered watermark; we do not display raw EXIF to other users.

5. Your rights

• Access and correction. You can view and edit your profile in the app at any time. Email support@kull1.com for any data not editable in-app.
• Deletion. Open the app, go to Profile → Settings, Privacy & Account → Delete Account. Or use the off-device deletion path at /delete-account. We remove personally identifying information; anonymized tournament results stay under “Deleted Angler” to preserve historical leaderboard integrity.
• California residents (CCPA). You have the right to know what personal information we hold about you, the right to delete it, and the right to opt out of any sale or sharing (we do not sell or share personal information for cross-context behavioral advertising). To exercise your rights, email support@kull1.com from the address on the account.
• Do Not Sell or Share My Personal Information. KULL 1 does not sell or share personal information as defined by the CCPA.

6. Children (under 13)

The Service is not directed to children under 13. Anglers under 13 must participate through a parent or guardian’s account as a youth sub-profile, with verifiable parental consent collected in accordance with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information without parental consent, email support@kull1.com and we will delete it.

7. Data retention

Active accounts: data is retained for the life of the account. Deleted accounts: personal data is removed within 7 business days of the deletion request. Catch records persist under “Deleted Angler” indefinitely as tournament history. Sentry diagnostic events follow Sentry’s retention policy (currently 30 days for the free tier).

8. Security

We use industry-standard transport encryption (TLS 1.2+) for all client-server communication. Authentication tokens are signed (RS256 JWT) and verified server-side against Clerk’s JWKS endpoint. Payment card numbers are never seen by KULL 1; Stripe’s PCI-compliant infrastructure handles the entire payment lifecycle. No security system is perfect; if you believe an account has been compromised, emailsupport@kull1.com immediately.

9. International users

KULL 1 is operated from the United States. By using the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced via in-app message and email. The effective date at the top of this page reflects the latest revision.

11. Contact

Questions or concerns? Email support@kull1.com.