Privacy policy

Updated on October 6, 2026 · Ler em português

Who we are

Spin Duel is a trivia duel game made by JotaLab. This policy explains what data the app uses, what for, who it is shared with, and how you control it. Questions or requests: contato@jotalab.dev.

What data we use

• Account: your email and password. The password is stored encrypted: not even we can see it.
• Profile: nickname, avatar (the mascot and color you pick) and the app language.
• Game: your duels, answers, right answers, points, XP, level, lives and seals, plus the challenges, blocks and reports you make.
• Notifications: if you turn on turn notifications, your phone's notification address — a code generated by the system, not your phone number.
• Technical data: like any online service, the servers log data such as IP address and access time, for security and to keep things running.

Spin Duel doesn't ask for your name, phone number, location, contacts or photos, and today it has no ads or in-app purchases. If that changes, this policy will be updated first.

What we use it for

• Creating and keeping your account, and confirming your email with a code.
• Running the game: drawing questions, counting points, building leaderboards and finding opponents.
• Showing your nickname, avatar and level to other players.
• Sending emails with confirmation and password reset codes.
• Sending turn, challenge and end-of-duel notifications, if you turn them on.
• Protecting the game from abuse, such as offensive nicknames, cheating and harassment.

Under Brazil's data protection law (LGPD), we use your data to provide what the app offers you (art. 7, V), for our legitimate interest in keeping the game safe (art. 7, IX) and, for phone notifications, with your consent (art. 7, I).

What other players see

Your nickname, avatar, level, leaderboard points and the duels you played together. Your email is never shown to anyone.

Who we share it with

We don't sell your data. We use a few services that process it on our behalf:

• Supabase: database and sign-in, with servers in São Paulo, Brazil.
• Resend: sending the emails with codes.
• Expo and Google Firebase Cloud Messaging: delivering notifications to your phone.
• Cloudflare: hosting this site and forwarding emails.

Some of these services are outside Brazil. In those cases, data transfers follow the LGPD rules.

How long we keep it

For as long as your account exists. When you delete your account, we immediately erase your email, password, nickname, notification addresses and leaderboard points. The duels you played stay in your opponents' history, with nothing that identifies you. Server logs are erased by the providers themselves, within short periods.

How to delete your account

In the app, open your Profile and tap Delete account. If you can't sign in to the app, see how to ask for deletion by email.

Your rights

You can confirm whether we process your data, access it, correct it, ask for deletion, ask for a copy in a format you can take to another service, learn who we share it with, and withdraw consent to notifications at any time in your phone settings. You change your nickname and avatar in the app itself. For any other request, write to contato@jotalab.dev from your account's email. We reply within 15 days.

Children

Spin Duel is not made for children under 13. If you learn that a child created an account, write to us and it will be deleted.

Security

All app traffic is encrypted, passwords are stored encrypted, and access to data is limited to what each part of the game needs.

Changes to this policy

When this policy changes, the date at the top is updated and, for important changes, we let you know in the app.