Privacy Policy
This Privacy Policy explains how Group Acca ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our mobile application ("the App"). We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Group Acca is operated by a UK-based team. The App is designed for users based in the United Kingdom.
Contact email: hello@group-acca.com
ICO Registration: Registration in progress
2. What Group Acca Does
Group Acca is a social coordination and bet tracking application. It allows groups of friends to organise group betting activities, make team picks, and track the success of their picks and bets over time. The App does not facilitate, process, or intermediate any financial transactions. Any betting or payments associated with group activities take place entirely outside the App through third party platforms chosen by the user.
3. Information We Collect
We collect the following personal information when you register and use Group Acca:
- •Name — collected at registration and used to identify you within the App and to other members of your groups
- •Email address — collected via Apple Sign In on iPhone or Google Sign-In on Android, and used to create and manage your account
- •Apple ID information — when you sign in using Apple Sign In, Apple may share your name and email address with us in accordance with Apple's own Privacy Policy. You may choose to hide your email address using Apple's private relay service
- •Username — a display name you choose during onboarding, visible to other members of your groups
- •Monzo username (optional) — if you voluntarily provide this, it is stored solely to enable a deep link to the Monzo app to facilitate any payments between users outside of Group Acca. We do not access, store, or process any Monzo account credentials, payment details, or financial data
- •Device token — collected when you grant permission for push notifications, used solely to send you in-app notifications such as group updates and results
- •Profile photo (optional) — if you choose to upload a profile photo, your image is stored on Supabase's secure storage infrastructure and is visible to members of your groups. You can remove it at any time from your profile settings
- •Activity data — your team picks, selections, and historical results within your groups are stored to provide the core tracking and gamification features of the App
- •App usage data — basic in-app events, such as opening the App, signing in, creating or joining a group, and creating an acca, together with your app version and a randomly generated device identifier. We use this to understand how the App is used and to measure the effectiveness of our advertising (see Advertising Measurement below)
- •Feature request submissions (optional) — if you submit a feature request or upvote an existing request, the content you provide and your vote are stored linked to your account. This data is used solely to help us prioritise product development
4. Information We Do Not Collect
- •We do not process, hold, or have any visibility of any money transferred between users
- •We do not collect your Monzo account credentials or any banking or payment information
- •We do not collect payment card details
- •We do not place bets on behalf of users — any bets are placed independently by a group admin through a third party betting platform entirely outside the App
- •We do not share any of your data with betting operators or gambling platforms
5. Lawful Basis for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- •Contract performance — processing your name, email, username, and activity data is necessary to provide you with the Group Acca service and manage your account
- •Legitimate interests — to maintain the security and integrity of the App, send relevant push notifications, and improve our service
- •Legitimate interests (advertising measurement) — to understand whether our adverts on Facebook and Instagram lead to people installing and using the App, so we can spend our advertising budget responsibly. You can object to this at any time, as described in Advertising Measurement below
- •Consent — for optional data such as your Monzo username and push notification permissions, which you provide voluntarily and can withdraw at any time
6. How We Use Your Information
- •To create and manage your Group Acca account
- •To display your name and username to members of your groups
- •To track and display your team picks and results within your groups
- •To send you push notifications about group activity, picks, and results where you have granted permission
- •To enable optional Monzo deep link functionality where you have chosen to provide your Monzo username
- •To communicate with you about your account where necessary
- •To maintain the security and performance of the App
- •To measure the effectiveness of our advertising on Facebook and Instagram
7. Data Shared Within Your Groups
The following information is visible to other members of the groups you belong to:
- •Your username and display name
- •Your team picks and selections within the group
- •Your historical pick and bet success record within the group
- •Your Monzo username, if you have chosen to provide it
- •Your profile photo, if you have chosen to upload one
This information is only visible within the groups you are a member of and is not publicly accessible outside of those groups.
Community groups: Group Acca also runs community groups that are open to all users, such as the weekend group. If you choose to join one, your username and profile photo are visible to every member of that group, including on its leaderboards. You can stop appearing there by leaving the group where the App allows, or by deleting your account.
8. Push Notifications
With your permission, Group Acca may send you push notifications relating to group activity, picks deadlines, results, and acca split events. We collect your device token solely for this purpose. You can withdraw your consent at any time through your device settings (Settings → Notifications → Group Acca).
9. Third Party Data Processors
- •Supabase — used as the backend database and authentication provider. Data is stored on Supabase's GDPR-compliant, EU-based infrastructure. Privacy policy: supabase.com/privacy
- •Apple — used for Apple Sign In and Apple Push Notification Service (APNs). Privacy policy: apple.com/legal/privacy
- •Google — used for Google Sign-In and Firebase Cloud Messaging (push notifications) on Android. Privacy policy: policies.google.com/privacy
- •Meta — the Meta (Facebook) SDK is used to measure the effectiveness of our advertising on Facebook and Instagram. See Advertising Measurement below. Privacy policy: facebook.com/privacy/policy
We do not sell, rent, or trade your personal data with any other third parties for commercial purposes.
10. Advertising Measurement
We advertise Group Acca on Facebook and Instagram. To understand whether those adverts work, the App includes the Meta (Facebook) SDK, which sends Meta a limited set of information about how the App is used:
- •App events — installing the App, opening it, registering, creating or joining a group, and creating an acca
- •Device information — such as device model, operating system version, app version, language, time zone, and mobile network
- •Advertising identifier — your device's advertising identifier, where your device settings allow it. On iPhone, this is only shared if you have allowed the App to track you under Apple's App Tracking Transparency
We do not send Meta your name, email address, username, profile photo, team picks, group names, Monzo username, or any payment or betting information.
Meta uses this information to help us measure our advertising, and may also use it in line with its own Privacy Policy.
You can limit this at any time through your device settings:
- •iPhone — Settings → Privacy & Security → Tracking, then turn off Allow Apps to Request to Track
- •Android — Settings → Google → Ads (or Settings → Privacy → Ads), then delete your advertising ID
You can also object to this processing by emailing hello@group-acca.com.
11. Monzo Integration
The optional Monzo username field is used solely to generate a deep link to the Monzo app for settling payments between group members outside of Group Acca. Group Acca does not process, facilitate, or intermediate any financial transactions. Providing your Monzo username is entirely optional and can be removed at any time from your profile settings.
12. Age Restriction
Group Acca is intended for users aged 18 and over. By registering, you confirm that you are at least 18 years of age. We do not knowingly collect personal data from anyone under the age of 18.
13. Data Retention
We retain your personal data for as long as your account remains active. If you delete your account, we will permanently delete your personal data within 30 days, except where required by law.
14. Data Security
We implement appropriate technical and organisational measures to protect your data. Your data is stored on Supabase's secure, encrypted infrastructure.
15. Your Rights Under UK GDPR
- •Right of access — request a copy of your personal data
- •Right to rectification — request correction of inaccurate data
- •Right to erasure — request deletion of your personal data
- •Right to restriction — request restriction of processing
- •Right to object — object to processing based on legitimate interests
- •Right to data portability — request your data in a machine-readable format
- •Right to withdraw consent — withdraw at any time where processing is consent-based
To exercise these rights, contact: hello@group-acca.com. You also have the right to lodge a complaint with the ICO at ico.org.uk.
16. International Data Transfers
Our team operates across the UK and the United States. Where personal data is accessed by US-based team members, appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses where applicable. Some of our service providers, including Meta and Google, may also process data in the United States.
17. Changes to This Privacy Policy
We may update this Privacy Policy as the App evolves. Material changes will be reflected by an updated "Last updated" date and notified through the App where appropriate.
18. Contact Us
Email: hello@group-acca.com
