Privacy Policy

Last updated: 3 August 2026

Pandem is a sports prediction game played with virtual balances. This policy explains what personal data Pandem (“we”) collects when you use the Pandem app and pandem.app, why, and the choices you have.

Who we are

Pandem is operated by Pandem Ltd, which is the data controller for the personal data described in this policy. Pandem Ltd is registered in England and Wales, company number 17376991, and its registered office is at 40 Tierney Road, London, England, SW2 4QS. For any question about this policy, or to exercise any of the rights below, email admin@pandem.app.

What we collect

• Sign-in details. You sign in with Apple, Google, or Discord. Pandem has no passwords of its own. From your chosen provider we receive a stable account identifier, your display name, your email address if the provider shares it (Apple may share a private relay address instead), and a link to your profile photo. We store the photo’s address, not the image, and only show it if you choose it as your avatar.
• Your profile in each group. The display name you use in each group, your avatar choice, and your role in the group (host or member).
• Game activity. The predictions you place (the match, market, selection, play-money stake, odds, outcome, and timestamps), together with your group memberships, your virtual balance, your group’s activity records, and leaderboard statistics derived from settled predictions. This is the game itself: your group’s members can see your display name, avatar, predictions, and standing, because playing together is what Pandem is for.
• Device and notifications. If you enable notifications, a push token for your device and its platform (iOS or Android), plus your notification preferences. Notifications are delivered through Expo’s push service.
• Group chat connections. If a group’s host connects the group to a Discord or Telegram channel, we store the channel details and the invite link the host provides, and we post game activity into that channel as a rendered card showing display names, avatar pictures and prediction updates. Anything posted there is also governed by Discord’s or Telegram’s own policies.
• Diagnostics. Crash and error reports, via Sentry, so we can fix problems. Our error reporting is configured not to attach personal information by default.
• Network address. Our servers work out the IP address a request came from and use it only to limit how many requests can be made in a short window, a defence against abuse and automated attacks. It is never written to our database and never linked to your account. For most actions you take once signed in, these limits are counted against your account rather than your address; signing in itself, and pages anyone can view, are still limited by address alone. We do not use it for analytics, location, or profiling. There is nothing here to delete, because nothing is kept: the count expires within minutes.

What we don’t collect

• No real-money payment information of any kind: Pandem takes no deposits and pays nothing out.
• No passwords, no government ID, no contacts, no precise location.
• No advertising identifiers, and no third-party advertising or analytics SDKs.

How we use your data

To run the game: signing you in, keeping your groups and balances consistent, settling predictions, showing standings to your group, and delivering the notifications you control. To keep the game fair and working: moderating groups (hosts can remove members, and removal records are kept so bans hold) and fixing crashes. We do not sell your data and we show no advertising.

Our lawful bases

Under UK and EU data protection law we need a lawful basis for each purpose we use your data for:

• Performance of a contract (Article 6(1)(b)): signing you in, keeping your groups, memberships and balances, settling predictions, and showing your standing to your group. This is the service you asked for when you created an account.
• Our legitimate interests (Article 6(1)(f)): keeping Pandem working and free of abuse, which covers rate limiting, keeping removal records so that bans hold, and diagnosing crashes; and running the group features a host has chosen to turn on, including posting group activity into a Discord or Telegram channel that a host has connected. Our interest is a service that stays available, cannot be trivially abused, and lets a host run their group the way they want, and we use the least data that achieves each of those.
• Your consent (Article 6(1)(a)): sending push notifications, and using your sign-in provider’s profile photo as your avatar. Both are opt-in, and you can withdraw either at any time in the app.

Who we share it with

• Your group’s members: your in-group profile and game activity, as described above.
• Service providers, acting on our instructions: DigitalOcean (hosting), Sentry (crash diagnostics), and Expo (push notifications). They process data on our behalf and under contract, and may not use it for their own purposes.
• Discord or Telegram, as independent services: if your group’s host connects a channel, your display name, your avatar picture and your prediction activity are posted into it. This happens because your host set that up, not because you turned anything on. Once a message is in that channel it is governed by Discord’s or Telegram’s own privacy policies and we cannot recall it. If you would rather your activity was not posted there, ask your host to disconnect the channel, or leave the group.
• Transfers outside the UK and EEA: some of the service providers above are based in the United States, so running Pandem involves transferring some data outside the UK and EEA. We use providers that publish standard data-protection terms for those transfers, including the standard contractual clauses.

How long we keep it

For as long as your account exists. If you delete your account, we remove the data described on the account deletion page. Deleting from inside the app runs immediately; a request you send us by email is completed within 30 days of that request.

Settled prediction and ledger records are retained because other members’ feeds, standings, and results are computed from them, and moderation records are retained to prevent abuse. See that page for the full statement.

Backups. Our database is backed up automatically, and a backup is a copy of the data as it stood at a moment in time. Data you have deleted can therefore remain in an encrypted backup for up to 30 days after deletion, until the backup holding it is overwritten. Backups are only ever used to restore the service after a failure.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You also have the right to complain to a data protection authority: in the UK that is the Information Commissioner’s Office (ico.org.uk), and in the EU it is the supervisory authority where you live. To exercise any of these, or to ask anything about this policy, email admin@pandem.app. To delete your account, see how to delete your account.

Age

Pandem is rated 18+ and is intended for players aged 18 and over. We do not knowingly collect data from anyone under 18; if you believe someone under 18 is using Pandem, contact us and we will remove the account.

Changes

If this policy changes materially, we will update this page and note the new date at the top.