Privacy Policy

Release transition: ages 13–17 may join using Bips 1.0.4 or later. Earlier app versions remain adults-only until updated. This policy explains the new eligibility information as well as the version-specific measurement controls below.

This policy describes what Bips — operated by Good Till Canceled, LLC d/b/a Bips ("we", "us") — collects when you use the Bips iOS app and this website, and what we do with it. We use account and gameplay information to operate the game, and offer optional consent-based ad measurement as described below. We never access a brokerage account.

What we collect

• Account: when you sign in with Apple, we receive a stable account identifier and, if you share them, your name and email address. Sign in with Apple's "Hide My Email" is supported; prize e-mails go to the address on your account.
• Gameplay: the challenges you enter, the portfolios you build, scores, results, token and Alpha balances, and referral codes you create or redeem.
• Prize eligibility: if you choose to enter drawings, we store your adult-age and U.S.-residency declarations, your confirmation that you are not a Sponsor employee or household member, and the declaration time and rules version. We do not collect your date of birth or identity documents in this flow. Existing accounts onboarded under the former adults-only terms retain their prior declaration as described in the official rules; this is not verified age. Sign in with Apple does not supply proof that you are 18. Contact us to correct eligibility information.
• Notifications: if you enable them, a device push token so we can send standings and results alerts. You can turn these off anytime in the app or in iOS Settings.
• Support messages: what you write to us through the in-app support form, so we can answer it.
• Usage: signed-in foreground sessions, app version, gameplay actions, challenge-entry attempts, results viewed, and notification choices and opens help us understand which features are used and how often people return. These are counted on our own servers using your Bips account identifier. The new result-view, entry-attempt, and notification events are not sent to ad networks. Separately, Bips 1.0.3 and later supports optional Meta ad measurement as described below. We do not use session recording. Stock symbols you search are sent to our servers to return results; we don't build a search history from them.
• Diagnostics: basic server logs (request paths, timestamps, IP address) to keep the service running and fair.

What we don't collect

We do not collect brokerage credentials, bank or payment details, contacts, or device GPS location. Bips 1.0.3–1.0.5 disables collection of Apple's advertising identifier (IDFA) in the Meta SDK. In Bips 1.0.6 and later, we can share the IDFA with Meta only after the permission choices described below. Optional Meta measurement involves device/SDK identifiers and cross-company ad measurement, so it requires Apple's tracking permission.

How we share

• Apple — sign-in and push notifications.
• Aggregate install attribution (Bips 1.0.3 and later) — Bips uses Apple's SKAdNetwork to help measure whether an ad led to an installation. Bips sends Apple a fixed launch-only conversion value; it does not encode your account, holdings, quiz answers, or prize activity. Apple can send delayed attribution reports to eligible ad networks, including Meta, subject to its privacy thresholds. These reports do not include user- or device-specific data. Starting with Bips 1.0.6, Apple may also send Bips copies of winning attribution reports. We verify Apple's signatures and retain only signed campaign/network fields and a receipt date. These details expire after 90 days, with expired records removed during daily cleanup; we retain a one-way transaction hash to prevent duplicate counting. We do not join those reports to accounts, devices or IP addresses. This Apple-mediated measurement does not require tracking permission.
• Optional Meta ad measurement (Bips 1.0.3 and later) — only after you allow tracking through Apple's permission prompt, Bips initializes the Meta SDK to measure our ads. Bips explicitly reports app activation, completed onboarding and your first successful challenge entry, without gameplay parameters. Meta's SDK also processes installation/session information, SDK/device identifiers, device and app characteristics, network information such as IP address, and diagnostic information. Meta may link this information with activity across apps and websites; these SDK reports are not anonymous aggregate reports. Bips does not send Meta your name, email, Bips account ID, holdings, balances, quiz answers or prize details. Automatic purchase logging and advanced matching are disabled. IDFA collection is disabled in versions before 1.0.6; version 1.0.6 can enable it only under the choices below. We configure SDK event-data usage to be limited to analytics and conversions. Learn more in Meta's privacy policy.
• Apple Ads campaign attribution (Bips 1.0.6 and later) — after sign-in, Bips obtains an Apple AdServices token and sends it to our authenticated server, which exchanges it only with Apple for campaign attribution. We do not retain the raw token or send it to Meta or other analytics services. We retain an account-linked record containing the observation date, app version, attribution outcome, and available campaign, ad group, keyword, ad, placement, country, click/view and download/redownload fields. These records expire after 90 days, with expired records removed during daily cleanup. This lets us compare our own Apple campaigns with signup and engagement cohorts. A missing match does not prove organic acquisition. Upgrading Bips does not count as a new installation. Apple controls the detail available according to device and tracking settings; standard attribution is available without tracking permission. Account deletion removes linked attribution records.
• Market data providers — our servers fetch prices and company facts from Twelve Data; those requests carry no personal data — we fetch prices, not people. Company and token logos and news thumbnails are the exceptions: logos load on your device directly from the image host (our own site, Twelve Data, Logo.dev, or CoinCap), and headline images load from the publisher's image host; either host sees your device's IP address the way any image on the web does — never your name, email, or account.
• Prize fulfillment — if you win a drawing, we share your Bips display name and the e-mail on your account with our fulfillment provider solely to deliver your prize.
• Hosting and backups — our servers run on Fly.io, and a daily backup of game state is copied to a cloud storage bucket so a hardware failure can't erase the game. These providers hold the data only to store it for us.
• Legal — if required by law, or to run the sweepstakes lawfully (e.g., winner verification).

We do not sell or rent personal information for money. Optional Meta measurement involves sharing information for ad measurement only with your tracking permission, as described above.

Retention & your choices

Tracking permission does not affect gameplay or your eligibility for rewards. In Bips 1.0.4–1.0.5, optional Meta measurement is off unless an account indicates adulthood, and permission is offered in Account → Privacy. In Bips 1.0.6 and later, signed-in players may receive Apple's native tracking choice while completing onboarding, without having to confirm drawing eligibility. Bips continues to disable optional Meta measurement for accounts known to be under 18, and always respects Apple's denied or restricted permission status. An unknown age is not treated as verified adulthood and no prize eligibility is changed by a measurement choice.

When the updated Apple permission prompt is shown in Bips 1.0.6 or later, choosing Allow permits the disclosed activity and device-identifier measurement, including IDFA. Players who already allowed tracking on an older version keep IDFA collection off unless they separately choose Allow advertising identifier in Account → Privacy; an update notice in Account makes this choice visible. The choice is stored locally for that Bips account, not shared as an age or prize declaration. You may turn IDFA sharing off in the same screen. You can withdraw all tracking permission in iOS Settings → Privacy & Security → Tracking. Bips then stops explicit Meta event calls and does not initialize the SDK on later launches without permission. Signing out or becoming ineligible also stops explicit Meta event calls. The SDK has no shutdown API, so these controls cannot cancel requests already started. Declined, pre-permission and pre-eligibility milestones are not sent later when you opt in. In 1.0.6, a milestone that occurs while permission is already allowed may wait in memory during a background interruption; Bips submits it to the SDK only if the same account remains eligible and authorized when the app returns, and is discarded on sign-out or revocation. Withdrawal does not recall information already sent to Meta; Meta handles its retention and privacy rights under its policy. First-party game analytics and Apple's attribution are separate from this optional SDK measurement.

Account and gameplay data are kept while your account is active. You can delete your account any time in the app (Account → Delete account): it takes effect immediately — your account, sessions, drawing tickets, support requests and pending notifications are removed. Any prize-fulfillment, winner-history or audit records we must keep are stripped of your account identity. Deleting your account forfeits any drawing prize that has not been delivered yet, because the e-mail it would be sent to is removed with the account; if you have a prize on the way, wait for it to land or write to us first. Daily backups are kept for disaster recovery only; every restore is screened against a separate deletion record so a deleted account is not reinstated. To access your data, or to delete it by request instead, email us and we'll handle it within 30 days: support@bips.gg. You can also reach us by mail: Good Till Canceled, LLC d/b/a Bips, 5570 FM 423, Suite 250 #2038, Frisco, TX 75036. California and EU/UK residents may have additional rights (access, correction, deletion, portability) — the same email exercises all of them.

Age and younger players

Bips accounts are for U.S. residents age 13 and older. Players under 18 should have a parent or guardian's permission to join. Players ages 13–17 can use the game, but cannot enter gift-card drawings. Account and gameplay data for these players are used to operate and improve Bips as described above; they are not exempt from first-party analytics. Optional Meta measurement is off for accounts known to be under 18 and whenever Apple does not authorize tracking. Versions 1.0.4–1.0.5 also require an adult declaration; version 1.0.6 removes that additional prerequisite as described above. Apple tracking permission is not proof of a player's age.

Bips is not directed to children under 13 and does not offer under-13 accounts or a parental-consent account system. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact support@bips.gg so we can investigate and delete it. An App Store age rating or Sign in with Apple is not age verification.

Changes

We'll update this page when the policy changes and note the new effective date above. Material changes will be flagged in the app.