Privacy Policy

1 Who We Are

KnightBingo is developed and operated by wstackd, an independent developer. The app is made available to Fairview High School (Boulder Valley School District) students as a school activities program. It is not an official BVSD or Fairview High School product.

2 Information We Collect

We collect only what is necessary to operate the program:

• Full name (as entered by you)
• School email address (@bvsd.org)
• A device identifier generated on your device, stored in the device keychain, and transmitted to our server solely to bind your account to your device. It is never linked to your Apple ID and never shared with any third party.
• A record of which school events you attended

Device permissions: The app requests access to your device camera solely to scan QR codes at school events. Camera images are processed locally on your device and are never stored, transmitted, or retained by KnightBingo.

No cookies or tracking technologies are used. We do not employ tracking pixels, fingerprinting, or any cross-app or cross-site tracking mechanisms.

3 Biometric Authentication (Face ID / Touch ID)

KnightBingo optionally lets you use Face ID or Touch ID, provided entirely by Apple's operating system, to unlock your bingo card or (for administrators) the admin portal. This feature is off by default and only activates if you turn it on in the app's settings.

KnightBingo never has access to your face, fingerprint, or any other biometric data — Apple's LocalAuthentication framework simply tells the app whether you passed or failed the on-device check. No biometric data is collected, transmitted, or stored by us.

If an administrator enables this feature, their session token is stored only in the device's secure Keychain (protected by the device passcode/biometrics) so it never leaves the device; it is removed automatically if the feature is turned off, the admin signs out, or the session expires.

4 How We Use Your Information

Your information is used solely to operate your KnightBingo card, record event attendance, display the school leaderboard, and allow Fairview Student Council administrators to manage the program. We do not use your data for advertising or any commercial purpose.

5 Who Can See Your Data

Fairview Student Council members with administrator access can view student records. Your name (or nickname if you have set one) and stamp count appear on the in-app leaderboard visible to other users of the app. This information is linked to your app profile but is never used to track you across third-party websites or services. Your email address is never displayed to other students.

6 Data Storage and Security

Data is stored in a Supabase cloud database with row-level security policies that enforce access controls. Only authenticated administrators can modify records. Your device identifier is stored in your device's secure keychain and is never transmitted to third parties.

7 Third-Party Services

We use Supabase (supabase.com) for database infrastructure. We do not share your data with any other third party, advertiser, or analytics provider. We do not share, sell, or transmit user data to any third-party advertising networks, analytics trackers, or artificial intelligence (AI) model training providers.

8 Data Retention and Deletion

Your account remains active while you are enrolled at Fairview High School. Attendance records are reset each school year. To delete your account and all associated data instantly, open the app and go to More → Delete My Account. Deletion is permanent and immediate. You may also submit a deletion request by emailing sam@wstackd.com.

9 Children's Privacy (COPPA)

KnightBingo does not knowingly collect or solicit personal information from anyone under the age of 13. In the event that we learn we have collected personal information from a child under age 13 without verification, we will delete that information as quickly as possible. Parents or guardians who believe their child under 13 has registered may contact sam@wstackd.com for immediate deletion. We will verify and remove the account within 48 hours of a confirmed request.

10 Your Rights

You may request to view, correct, or delete the personal information we hold about you at any time by emailing sam@wstackd.com. You may also sign out of the app at any time, which removes your saved session from your device. Upon request, we will provide a copy of the personal data we hold about you in a commonly used electronic format.

11 No Cross-App Tracking

KnightBingo does not track you across third-party apps or websites. We do not use Apple's Advertising Identifier (IDFA) or any equivalent identifier for advertising or cross-app tracking purposes. We do not participate in any advertising network.

12 Security Incidents

In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected users by email within 72 hours of becoming aware of the incident, where feasible. Notification will describe the nature of the breach, the data affected, and the steps taken to address it.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective" date at the top of this page. If changes are material, we will notify you via a notice inside the app or by email to your registered address. Continued use of KnightBingo after changes are posted constitutes acceptance of the updated policy.

14 Governing Law

This Privacy Policy is governed by the laws of the State of Colorado, United States, without regard to its conflict-of-law provisions. Any disputes arising under this policy shall be resolved in the courts of Boulder County, Colorado.

15 Data We Store on Our Servers

The following fields are saved to our Supabase database:

• Full name
• School email address
• Device identifier (for account verification only)
• Attended events list
• Prize claimed status

Your nickname, if set, is stored locally on your device only and is never transmitted to our servers.

16 Data Minimization

We collect only the minimum information necessary to operate the program. We do not collect location data, contacts, browsing history, purchase history, health data, financial information, or any sensitive personal information.

17 Your California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, email sam@wstackd.com.

18 International Users

KnightBingo is operated in the United States. If you are accessing the app from outside the United States, your information will be transferred to and processed in the United States. By using the app you consent to this transfer.

19 Contact

This policy was last reviewed for Apple App Store compliance on June 2, 2026.

Privacy questions or data requests:
sam@wstackd.com