Privacy Policy

Who this covers

This policy governs both the Arena website (arena-predictions.com) and the Arena iOS app. Arena is a paper-trading experience for prediction markets: you trade real, live market prices using virtual dollars. No real money is ever involved. Because there is no real-money trading, we do not collect the financial-account information a real brokerage or sportsbook would.

Information we collect

• Account & profile. Your display name, email address, and (optionally) a profile photo. If you use Sign in with Apple and choose to hide your email, we receive only Apple’s private relay address, not your real one.
• Authentication. We use Supabase Auth with Sign in with Google and Sign in with Apple. We never see or store a password. You can also browse as a guest through a temporary anonymous session that carries no personal identifiers until you choose to sign in.
• Activity in the app. Your paper trades, positions and portfolio, verified pick records (receipts), watchlists, head-to-head challenges, alerts, and any referral code you redeem. All balances are virtual dollars with no real-world value.
• Subscription status. Whether you have an active Arena Pro subscription, and the related purchase and entitlement identifiers. Payments are processed by the app store and by RevenueCat — we do not collect or store your card number or bank details.
• Device, log & usage data. Standard technical data such as IP address, device or browser type, app version, and interaction and diagnostic events, used for performance, security, and debugging. On the website we use Vercel Analytics, which is privacy-friendly and aggregated.
• Cookies & local storage (web). To keep you signed in, remember preferences such as your theme, and support basic analytics. See “Cookies” below.

How we use it

We use your information to authenticate you; operate the app (your portfolio, live markets, leaderboards, receipts, challenges, and alerts); process and validate subscriptions and entitlements; run the referral program; send you service messages and, if you enable them, push notifications when your picks settle; keep the service secure and debug problems; produce aggregated, de-identified statistics that help us improve Arena; and comply with legal obligations.

Legal bases (EEA / UK)

Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to provide the service); our legitimate interests (to secure, maintain, and improve Arena); your consent (where required, for example certain notifications); and compliance with legal obligations.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share limited data with service providers who process it on our behalf, and only as needed:

• Supabase — authentication, database, and file storage.
• RevenueCat — manages subscription access and entitlements. It does not receive your trading activity.
• Apple — App Store payments, Sign in with Apple, and push delivery (APNs) on iOS.
• Google — Sign in with Google.
• Vercel — website hosting and privacy-friendly, aggregated analytics.
• Fly.io — the real-time market-data proxy that streams live prices.
• Kalshi— provides prediction-market data. We send requests for market data, not your personal information; Kalshi’s own privacy policy governs any data it collects.

We may also disclose information if required by law or valid legal process, to protect the rights, safety, and security of Arena and our users, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

Cookies & local storage

On the website we use cookies and browser local storage to keep you signed in, remember settings such as your theme, and measure aggregate usage. We do not use advertising cookies. The Arena iOS app does not use third-party advertising identifiers (no IDFA tracking) and does not track you across other companies’ apps or websites.

Data retention & deletion

We keep your information while your account is active and as needed to provide the service. You can delete your account at any time from within the app; deletion removes your personal data, subject to any information we must retain for legal, security, or fraud-prevention reasons and to de-identified or aggregated statistics that no longer identify you. You can also request deletion by emailing support@zbgcllc.com.

Security

Data travels over TLS encryption and is stored on Supabase infrastructure that follows industry security standards. Because authentication is handled through Sign in with Google and Sign in with Apple, we never store a password. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit access to it.

Your rights & choices

You may request access to, correction of, deletion of, or a copy of your personal data, and you may object to or ask us to restrict certain processing. Residents of California (CCPA/CPRA) have the right to know, delete, and correct their data, and to opt out of sale or sharing — we do not sell or share personal information — as well as the right not to be discriminated against for exercising these rights. Residents of the European Economic Area and the UK (GDPR) have the rights described above and the right to lodge a complaint with a supervisory authority. To make a request, email support@zbgcllc.com; we may need to verify your identity before acting.

International transfers

Arena is operated from the United States, and your information is processed and stored there. If you access Arena from outside the U.S., you understand that your information will be transferred to and processed in the U.S., and we take steps to ensure appropriate safeguards for such transfers where required.

Children

Arena is not directed to children under the age of 17, and we do not knowingly collect personal information from anyone under 17. If we learn that we have collected such information, we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, provide a more prominent notice. Your continued use of Arena after an update means you accept the revised policy.

Contact

Arena is operated by ZBGC LLC. For any privacy question or request, email support@zbgcllc.com.

See also our Terms of Use and how Arena works. Questions? Contact support.