Privacy Policy

1. Who We Are

This Privacy Policy describes how Fantera, Inc. (“Fantera,” “we,” “us”) collects, uses, discloses, shares, and sells personal information when you use the Fantera mobile app, our website, and related services (the “Service”). Fantera is a fan engagement platform for college athletics. Fans earn Fan Reward Tokens (“FNR”) by attending games, completing challenges, making predictions, and interacting with the community. The Service uses the Ovatra blockchain as an audit layer for certain events, such as consent records and FNR issuance.

This policy is designed to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and the Texas Data Privacy and Security Act (“TDPSA”). We extend the core rights it describes to all users of the Service regardless of where you live, subject to identity verification and applicable law.

2. Information We Collect

2.1 Information you give us

• Account information: your mobile phone number and/or email address (used to sign in with a one-time passcode), a display name, and a username. Contact identifiers are stored in encrypted form and as one-way hashes.
• Date of birth: collected to confirm you meet our minimum age and to set age-appropriate defaults.
• Optional profile details: if you choose to provide them, demographic fields such as birth year, gender, ZIP code, and similar. These are optional and self-reported.
• Content you create: posts, poll votes, predictions, replies, reactions, photos you upload, reports you file, and profile text such as a bio.
• Contacts you choose to match (“Find Friends”):if you use Find Friends, the app reads the phone numbers in your device contacts and sends only one-way cryptographic hashes of those numbers to our server to look for people already on Fantera. We never receive your contacts’ names, emails, or actual phone numbers, and we do not store the hashes of people who are not on Fantera. This feature is optional and you can skip it.

2.2 Information we collect automatically

• Activity data: check-ins, game attendance, challenge and prediction activity, interactions with content, and other in-app events, along with metadata such as timestamps and the team context of an action.
• Location:with your permission, we use your device’s location to verify that you are physically at a venue when you check in or post a location-tagged photo. Precise location is used for that verification; we treat it as sensitive information (see Section 7).
• Device and usage information: app session and diagnostic information and an internal device identifier used for security. We do not use advertising identifiers (such as the IDFA) and we do not include any third-party advertising or analytics tracking SDKs in the app.

2.3 What we do NOT collect

We do not collect Social Security numbers, driver’s license or passport numbers, payment card numbers, account passwords, genetic or biometric data, the contents of your private communications for advertising, or health information. We do not use tracking technologies that link your data with other companies’ data for advertising.

3. Sources of Information

We collect information (a) directly from you when you create an account, provide profile details, or use the Service; (b) automatically as you use the Service; (c) if you use Fantera in connection with an athletic program, from that program and from venue ticketing systems, which may confirm that a linked ticket was scanned at a gate; and (d) from the Ovatra blockchain, which records certain events tied to an internal pseudonymous identifier.

4. How We Use Information

4.1 Operate the Service

To create and authenticate your account, credit FNR, track challenge and tier progression, power the feed and predictions, deliver in-app notifications, operate leaderboards, respond to support, and keep the Service secure.

4.2 Share individual fan data with an athletic program you engage with

If you use Fantera in connection with an athletic program — for example, a school whose team you follow on the Service — then, with your Partner Sharing consent (Section 8, on by default and able to be turned off), we may share fan profile and engagement information — such as your name, attendance records, purchase and spending behavior, engagement history, tier, and any demographic details you provided — with that program. A program may use this for fan engagement, ticketing outreach, and development and alumni relations.

4.3 Build and sell aggregated, de-identified datasets

Fantera builds and sells datasets derived from fan behavior.These are offered to advertisers, sponsors, and research firms and cover topics such as attendance, spending, cross-sport affinity, and fan demographics. Before any dataset is sold, it is aggregated and de-identified using k-anonymization: every published row represents at least 50 indistinguishable fans, precise fields (such as exact age or ZIP) are replaced with coarse ranges, and no direct identifier — no name, phone number, email, or fan identifier — is ever included. Whether your activity is used to build these datasets is controlled by your Partner Sharing consent. When you opt out, your future activity is excluded from new datasets, but data already included in a dataset that was built or sold cannot be recalled (see Section 8).

4.4 Personalize, improve, prevent fraud, and comply with law

To personalize what you see, test and improve features, detect and prevent fraud and reward abuse, and comply with legal obligations and enforce our terms.

4.5 Communicate with you

To send account messages such as sign-in codes. See Section 10 for our SMS practices.

5. Who We Share Information With

• An athletic program you engage with may receive individual fan profile and engagement data as described in Section 4.2, subject to your Partner Sharing consent.
• Advertisers, sponsors, and research firmsreceive aggregated, de-identified datasets as described in Section 4.3 — never direct identifiers.
• Service providers who process data on our behalf, under contract and only for the purposes we specify. Today these include: Twilio (SMS delivery), SendGrid (email delivery), OpenAI and Google’s Perspective API (automated content moderation of posts and images), Anthropic (summarizing public sports news — no fan data is sent), and Amazon Web Services (encrypted cloud storage). We also use public sports-data sources such as ESPN as inputs; we do not send them information about you.
• Legal, safety, and successors: we may disclose information where required by law, to protect safety, or in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third-party data brokers such as Acxiom or Experian. Fantera is the first-party collector and seller of the data described here.

6. Sale and Sharing of Personal Information (CCPA/CPRA and TDPSA)

Fantera “sells” and “shares” personal information as those terms are defined under the CCPA/CPRA and the TDPSA. Specifically, we sell aggregated, de-identified datasets derived from your activity, and we share individual fan profile and engagement information with an athletic program you engage with. You have the right to opt out of this sale and sharing. To opt out:

• In the app: open Profile → Data Rights and turn off Partner Sharing. This is your “Do Not Sell or Share My Personal Information” control.
• By email: write to privacy@fantera.netwith the subject “Do Not Sell or Share.”
• Global Privacy Control: we honor valid GPC signals where technically feasible.

Opting out is forward-looking: we stop future sale and sharing, but information already shared with an athletic program or already included in a dataset that was built or sold cannot be recalled. To go further, use your right to delete (Section 9).

7. Sensitive Information

The main category of sensitive personal information we handle is precise location, used to verify venue check-ins and location-tagged photos. Location sharing is off until you grant permission, and you can turn it off at any time in your device settings, which stops future collection. You have the right to limit our use of sensitive personal information; turning location off is your control for that right.

8. Consent and the Three Tiers

You can review and change your consent any time in Profile → Data Rights:

• Basic (required):the account and activity data the Service needs to function. If you don’t want to share this, please don’t create an account.
• Partner Sharing (on by default, opt-out): sharing individual fan data with an athletic program you engage with (Section 4.2) and including your activity in the aggregated datasets we sell (Section 4.3).
• Precise Location (off by default, opt-in): precise location, treated as sensitive.

We record your consent choices on the Ovatra blockchain as a tamper-evident history, along with a timestamp and the prior and new state. That record does not contain your name, phone number, or email. Withdrawing consent is forward-looking, as described in Section 6.

9. Your Rights and How to Exercise Them

Subject to verification and applicable law, you have the right to:

• Know and access the categories and specific pieces of personal information we have collected, used, and shared;
• Delete personal information we collected from you (see below and our Account Deletion page);
• Correct inaccurate personal information;
• Opt out of the sale and sharing of your personal information (Section 6);
• Limit the use of sensitive personal information (Section 7);
• Data portability— receive a copy of your information in a portable format; and
• Non-discrimination— you will not be penalized for exercising these rights (see Section 11).

You can delete your account directly in the app under Profile → Data Rights. To make an access, portability, correction, or other request, email privacy@fantera.net from the address on your account, or write to us at the address in Section 13. We respond within the time required by law (generally 45 days, extendable with notice). You may use an authorized agent. There is no charge unless a request is excessive.

10. Your Mobile Phone Number and SMS

We use your mobile phone number to send one-time sign-in codes and to identify your account. We do not send marketing text messages.

Fantera, Inc. does not share, sell, or rent your mobile phone number or your SMS consent with any third party.

Message frequency varies based on your sign-in activity. You may receive up to 4 messages per month. Message and data rates may apply. You can reply STOP to opt out and HELP for help. Full details are on our SMS Terms page.

11. Non-Discrimination and the Tier Program

Fantera operates a tier program (Bronze, Silver, Gold, Platinum, MVP) based on FNR earning and engagement. Consistent with California Civil Code § 1798.125(b), certain tier progression is tied to Partner Sharing: only FNR earned while Partner Sharing is on counts toward progression, reflecting that Partner Sharing enables the value that funds the rewards. Importantly: fans who opt out still earn FNR at the base rate, are not demoted from a tier already reached, still get the core Service, and are never charged for exercising their rights.

Seasonal reset.The tier ladder and your FNR balance both reset at the start of each athletic season (August 1, subject to change): every fan returns to Bronze and every FNR balance is zeroed. Your FNR balance does not carry over between seasons. Lifetime totals and history are preserved for your records and for analytics but do not affect the new season’s balance or tier.

12. Retention, Security, Children, and Other Terms

12.1 Retention

We keep personal information for as long as necessary for the purposes in this policy or as required by law. Encrypted contact identifiers (phone, email) are kept until you delete your account. Precise location coordinates attached to a check-in or photo are kept for a limited period (currently about 30 days) for fraud and moderation review, after which the precise coordinates are removed from the active record, leaving only a general location reference (such as “posted from the stadium”). Activity and de-identified analytics records, and audit and moderation logs, are retained on a longer-term basis for analytics, security, legal compliance, and dispute resolution. Datasets already sold are governed by the buyer’s terms and cannot be recalled. Records on the Ovatra blockchain are tamper-evident by design and cannot be deleted; they do not contain direct identifiers.

12.2 Security

We use administrative, technical, and physical safeguards, including encryption of contact identifiers at rest, TLS in transit, access controls, and audit logging. No system is perfectly secure. If you believe your account was compromised, contact privacy@fantera.net.

12.3 Children’s Privacy

The Service requires you to be at least 13 years old. We collect your date of birth when you create an account and do not permit accounts for anyone under 13. We do not knowingly collect personal information from children under 13; if you believe we have, contact privacy@fantera.net and we will delete it. If you are between 13 and 17, please use the Service only with the involvement of a parent or guardian.

12.4 U.S. Users, GPC, and Do Not Track

The Service is intended for users in the United States; your information is processed here. We honor Global Privacy Control signals where feasible (Section 6). Because there is no common standard for “Do Not Track” browser signals, we do not currently respond to them.

12.5 Changes to This Policy

We may update this policy. For material changes we will update the date above, post a notice in the app, and provide any notice required by law. Your continued use after the effective date constitutes acceptance to the extent permitted by law.

13. Contact Us