Your data, plainly.

What we collect

When you sign in

You sign in with Bio-ID, InsurEco's identity service. From it we keep your name, your email, your Bio-ID id and, for the free daily play, whether your phone is verified (a yes or no). We never get or keep your phone number.

When you play

• Your calls: the contest, your pick, the plays you put on it, and how it settled.
• Your contest entries and Trade Draft lineups.
• Your balances of plays and points, and a ledger of every change to them.
• Your free daily play claims, and your free-play championship score. Championship boards show your first name and last initial.

When you answer profile questions

Profile questions are optional and you can skip any of them. Your answers, and the role, trades and loan details you declare so book contests stay fair, are saved only while the matching switch in Profile is on. Agents may also give their agency's name. Every answer is marked self-reported: we do not check it against a record unless you turn on record matching.

Each choice is a separate consent switch, all off until you turn them on. We keep a dated record of each time you turn one on or off.

• Keep my answers. Saves your answers.
• Route me to the right contests. Uses your role, trades and loan answers to pick your rooms and apply the fairness rules.
• Send my answers to InsureBio. See “Who we share it with”.
• Match my records. Lets us match you to RaterSpot and PolicyPay records. We keep the class codes and rooms the match finds and a scrambled fingerprint of your agency, never an agency id.
• Let my agent see my answers.
• Send me renewal quotes and offers.

On your phone

If you turn on notifications in the iOS app, we keep your Apple push token, the app version and your time zone, so the morning results push arrives in the morning. You can turn notifications off in iOS settings.

On the waitlist

Your email, the role you picked, your trade (if you gave one), your state, the box you ticked to agree to be emailed, and where you signed up from.

On this website

We set only the cookies that keep you signed in and that carry the sign-in handshake. The play pages remember your chosen trade room in your browser's local storage, and cache the app shell so it opens offline. Your IP address is used briefly to rate-limit sign-in and waitlist requests and is not saved in our database. We use no analytics, advertising or tracking tools, and no ad identifiers.

Why we collect it

• To sign you in and run your account: identity, balances, calls and the ledger.
• To settle contests and show boards: calls, entries and the ledger.
• To keep book contests fair: the role, trade and loan answers you declare.
• To send the morning results push: the device token and time zone.
• To give the free daily play to people with a verified phone, one per day.
• To tell waitlist people when palozi opens.
• Anything beyond that only with the matching consent switch.

Who we share it with

We do not sell your data and we do not share it for advertising.

• Other players see your name and rank on season boards. They do not see your email or your answers.
• InsureBio, InsurEco's identity record: your profile answers, labelled self-reported, and only if you turn on “Send my answers to InsureBio”. That link is not switched on yet. If you turn the switch off, nothing more is sent. Whatever was already sent is held by InsureBio and follows its own deletion process.
• Your agent sees the answers you gave only if you turn on “Let my agent see my answers”. Without it, they see only who played and their rank.
• RaterSpot and PolicyPay are InsurEco products. Matching you to their records is not running yet; when it is, it runs only if you turn on “Match my records”.
• Renewal quotes and offers come from palozi and its partners only if you turn on that switch.
• Apple delivers push notifications. Apple sees the push and your device token, as it does for any app.
• Bio-ID handles your sign-in. Your Bio-ID account is separate from palozi: manage it at bio.tawa.pro/settings.
• Our hosting. palozi runs on InsurEco's own platform and database.

Contest proofs are public. They hold the rules, the weather and sports data a contest was settled from, and a fingerprint of the result recorded on the InsureBio public chain. They hold no names, emails or player ids.

How long we keep it

• Points expire after 12 months without activity.
• Your profile, answers, consents and push devices stay until you delete your account. A device is also dropped when Apple reports its token no longer works.
• Waitlist emails stay until you ask us to remove yours or you delete your account with the same email.
• Settlement records are permanent. They are what lets anyone check a result. When you delete your account, your calls, entries, ledger lines and lineups are kept but cut loose from you (see below).

Deleting your account

In the iOS app, go to Profile, then Settings, then Delete account. Or email [email protected] from the address on your account.

Removed: your name, email, balances (so any points are forfeited), profile answers, declaration, consents, matched records, push devices, free-play claims, and your waitlist entry.

Kept, anonymised: your calls, entries, ledger lines and lineups are re-keyed to an opaque id that carries no name or email. Season boards then show “Deleted player”. Open calls settle against that id and any winnings are forfeited.

Not covered: your Bio-ID account, which is separate, and anything already sent to InsureBio.

Contact

Questions, access requests or deletion by email: [email protected]. For help playing, see Support.

If we change this policy, we will change the date at the top.