Privacy Policy and Notice at Collection

1 Who we are

CALLTHEFARM, LLC, an Oregon limited liability company, operates The Farm's mobile applications, website, APIs, private groups, and related services. CallTheFarm is responsible for the personal information described in this Policy.

2 Notice at Collection

The table describes the categories we collect in the current Service, representative examples, our business purposes, and the general retention approach. We do not collect every example from every person.

No sale sharing or tracking We do not sell personal information, share it for cross-context behavioral advertising, serve third-party advertising, or allow advertising SDKs to track you across apps or websites. Our marketing, acquisition, and usage measurement is first-party and used only in aggregate to run and improve the Service.

3 Where information comes from

• Directly from you when you register, make picks, create or join a group, configure a contest, submit a report, contact us, change preferences, or join the waitlist.
• Automatically from your device and requests, including IP-derived country, browser or device context, app version, session and security data, and push tokens when notifications are enabled.
• Automatically when you visit our marketing or landing pages, including through a QR code or campaign link, such as the campaign or location code you arrived from, coarse device type, IP-derived country, referrer, and time on page; for visitors who are not signed in this is recorded first-party, without cookies and without linking to an account.
• From other members when they invite you, include you in a group or report, block you, or take an authorized commissioner action affecting shared contest records.
• From service providers when they deliver email or notifications, route network requests, or return sports data used by the Service.

We do not buy personal information from data brokers or enrich member profiles with brokered data.

4 How we use information

• Provide the Service by creating accounts, running groups and contests, saving picks, scoring results, displaying standings, and maintaining preferences.
• Authenticate accounts, maintain sessions, enforce age and United States restrictions, prevent fraud or abuse, rate-limit requests, and protect contest integrity.
• Send verification, account, group, contest, result, security, moderation, support, and optional promotional communications.
• Respond to support and privacy requests, investigate bug and abuse reports, administer blocking and moderation, and resolve scoring issues.
• Diagnose failures, understand product interactions recorded in our first-party activity ledger, maintain features, and improve reliability.
• Measure how people discover and join The Farm, including the performance of our stickers, links, and campaigns, and how members engage with the Service, using first-party, aggregate analytics, to operate, secure, and improve it.
• Comply with law, valid process, and enforceable requests; enforce our Terms; and establish, exercise, or defend legal claims.

5 When we disclose information

5.1 Other group members Your display name, username, group role, contest participation, picks when the format reveals them, results, standings, and appropriate activity may be visible to members of groups you join. Your account email is not displayed as a normal group profile field.

5.2 Service providers We give providers only information reasonably needed to perform services for us. We require providers to handle it under instructions and protections consistent with this Policy and applicable law.

5.3 Legal safety and enforcement We may disclose information when we reasonably believe it is necessary to comply with law or valid process, enforce our Terms, investigate fraud or security incidents, or protect the rights, property, or safety of CallTheFarm, members, or the public.

5.4 Business transfers Information may transfer as part of a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, subject to applicable law and continued protection.

5.5 At your direction We disclose information when you direct or authorize us to do so.

6 Cookies local storage and analytics

The web and mobile applications use strictly necessary cookies, secure device storage, and local storage to keep you signed in, preserve preferences, secure sessions, and support core functions. Blocking necessary storage may prevent the Service from working.

The current release does not use third-party advertising cookies, advertising identifiers, retargeting pixels, cross-site tracking, session replay, or a third-party product-analytics SDK. First-party activity records may document account-linked actions needed for operation, support, security, and contest integrity. We measure how visitors arrive and how members engage using first-party, aggregate records and campaign links carried in URLs, not cookies or advertising identifiers. Our QR and landing-page measurement records a campaign or location code, coarse device type, IP-derived country, referrer, and time on page, with no cookie and, for visitors who are not signed in, no link to an account.

7 AI-assisted Announcer

The Clubhouse Announcer may use Google Gemini to vary wording. Before any request leaves The Farm, our server converts the event into an abstract scenario containing permitted enums, coarse plurality, semantic constraints, and empty placeholders. Gemini returns placeholder-only wording. The Farm validates the response and inserts real values locally.

Gemini does not receive member names, usernames, account IDs, group or contest names, period names, picks, teams, scores, exact counts or percentages, raw summaries, device information, or the private mapping used to fill placeholders. If validation or the provider fails, the Service uses deterministic local wording.

The launch configuration uses a paid Gemini API project with optional prompt logging disabled. We do not claim a formal zero-data-retention status unless Google confirms that status for the specific project.

8 How long we keep information

We keep personal information only while reasonably needed for the purposes described here, including providing an active account or shared group, maintaining security and consent records, resolving reports or disputes, honoring preferences, and meeting legal obligations. Retention can vary with the record and context.

• Account information remains while the account is active and is deleted or de-identified through the account-deletion process, subject to the limited exceptions below.
• Open or reviewing bug reports remain while active. Resolved or closed bug reports are scheduled for deletion after 90 days, with an internal warning and grace period before automated deletion.
• Push tokens remain until they are unregistered on logout, removed by the member, or rejected as invalid by the notification service.
• Waitlist records remain until unsubscribe or deletion request, or until they are no longer needed for the waitlist.
• Acceptance, security, fraud, abuse, and dispute records may remain for the period reasonably needed to document consent, enforce rules, protect the Service, comply with law, or resolve a claim.
• Backups are not individually edited and may retain deleted information until overwritten through the provider's ordinary backup cycle. If restored, deletion and de-identification controls apply again where practicable.

9 Account deletion

You may permanently delete your account from Profile on web or mobile. Instructions are also available at https://callthefarm.com/delete-account. If you cannot sign in, email [email protected] from the account email so we can verify the request.

Deletion removes account identity, credentials, sessions, memberships, notification tokens, linked bug reports, and other account-linked personal data from active systems. If you own a group, you must transfer ownership or delete that group first.

To avoid rewriting shared standings for other members, historical contest entries, picks, and results may remain only under a neutral Deleted Member label and a new random identifier that cannot sign in and is not linked to your former identity. Safety reports submitted by or about you may remain as anonymized records when reasonably needed for safety, dispute resolution, or law. We may also retain information required by law, needed for a legal claim, or irreversibly aggregated or de-identified.

10 Your privacy rights

Depending on where you live and whether a law applies to us, you may have rights to know or access personal information, receive a copy, correct inaccurate information, delete information, opt out of certain processing, limit certain sensitive-information uses, appeal a decision, and receive service without unlawful discrimination for exercising a right.

The Farm does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, so an opt-out from those practices does not change current handling.

Submit a request or appeal to [email protected]. Describe the request and use the email associated with your account. We may verify your identity and an authorized agent's authority before responding. We will respond within the time required by applicable law and explain any denial and available appeal or regulatory options.

11 Children

The Farm is for adults and may not be used by anyone under 18. We do not knowingly collect personal information from a person under 18. If you believe a minor has provided information, contact [email protected] so we can investigate and delete it as appropriate.

12 Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Current controls include encryption in transit, hashed passwords and security-sensitive tokens, authenticated sessions, access controls, multi-factor authentication for platform-administrator access, rate limiting, device-secure storage for mobile credentials, and procedures for responding to security and privacy incidents.

No system is perfectly secure. Report a suspected vulnerability or account-security problem to [email protected]. We will provide notices of a qualifying breach as required by law.

13 Where information is processed

The Service is intended for United States residents. We and our providers may process information in the United States and other locations where they operate. Those locations may have different privacy laws. We require providers handling personal information for us to protect it consistently with their obligations and applicable law.

14 Third-party sites and services

The Service may link to third-party sites or services we do not control. Their privacy practices apply to information you provide directly to them. Review their policies before providing information.

15 Changes to this Policy

We may update this Policy. We will update its version and effective date and provide notice required by law. If a change is material, we may notify you by email or in the Service and require affirmative acceptance before continued use. Prior versions are available on request from [email protected].

16 Contact us