Privacy policy

We take your privacy seriously. This policy explains what data we collect, why we collect it, who we share it with (spoiler: only the providers we need to operate, improve and promote the product), and the rights you have over it.

1. Who operates Quini

Quini is a product of Quinielero (the "Operator"), based in Mexico. The Operator processes personal data in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable to you, comparable frameworks such as the EU GDPR.

2. What data we collect

• Registration data: name, email address, password (encrypted).
• Optional profile data: photo, favorite team, bio.
• Usage data: pools created, picks, chat messages, play history.
• Device data: model, operating system, push notification token.
• Analytics data: events about how you use the app (via Amplitude) and install, sign-up and purchase events (via Meta) to measure our marketing.
• Advertising identifier: your device's advertising ID (IDFA on iOS / AAID on Android), subject to your tracking permission, used only to attribute installs and conversions to the ads that originated them.
• Transaction data: in-app purchase history (through Apple / Google / Stripe — we never see card numbers).

We do not collect: card numbers, bank details, real-time location, your phone contacts, other apps' history, or SMS.

3. How we use the data

• To operate the service: create your account, show your pools, score picks, send notifications.
• To improve the product: see which features are used, catch bugs, prioritize improvements.
• To measure our marketing: understand which campaigns bring new players, so we invest better.
• To communicate with you: onboarding emails, result notifications, support replies.
• To comply with legal and tax obligations.

4. Who we share data with

We share data only with service providers that need it for the app to work, and only what is strictly necessary:

• Apple / Google: to process in-app purchases.
• Stripe: to process web purchases.
• Expo (push notifications) and Firebase: to deliver notifications.
• Mailgun: to send transactional emails.
• AWS S3: to store images you upload (profile photo, pool logo).
• Sentry: to detect and diagnose technical errors.
• Amplitude: for aggregated, non-identifying usage analytics.
• RevenueCat: to manage purchases and subscriptions.
• API-Football: to bring in match, league and score data.
• Meta (Facebook): receives install, sign-up and purchase events to measure and optimize our ad campaigns. It never receives your profile, your picks or the contents of your chats.

We do not sell your data. We share with Meta only the events described above to measure our campaigns; never your profile information, your picks, or the contents of your pools or chats.

5. Your rights

You have the right to access, rectify, delete, and object to the processing of your data (the ARCO rights under Mexican law, mirrored by access/rectification/erasure/objection rights under the GDPR). To exercise any of them, write to hola@quinielero.mx.

To delete your account entirely, there is a formal process described at /delete-account.

6. Security

We use encryption in transit (HTTPS) and at rest for sensitive data. Passwords are stored with bcrypt. We run error monitoring (Sentry) and update dependencies regularly.

7. Cookies, pixels and tracking

This website (playquini.com) may use web analytics cookies (Google Analytics) and the Meta pixel to measure the effectiveness of our ads. The mobile app does not use cookies in the traditional sense — only local session tokens and, subject to your tracking permission, the device advertising identifier for campaign attribution.

8. Changes to this policy

We may update this policy from time to time. Changes are published here and, if they are significant, we will notify you by email or inside the app.

9. Contact

For any question about this privacy policy: hola@quinielero.mx.