Privacy Policy

1. Who We Are

Podi is operated by Odunze Onyekachi Emmanuel, doing business as Kempyre Groups, a sole proprietorship based in Ontario, Canada ("we", "us", "our"). Podi ("the Platform") is a software-as-a-service product available at podi.gg.

For all privacy inquiries, contact our Privacy Officer:

Privacy Officer: Odunze Onyekachi Emmanuel
Email: Kachyodunze@gmail.com

2. Scope

This policy applies to all personal information we collect when you visit podi.gg, create an account, use our services, or communicate with us. It does not apply to third-party websites linked from the Platform.

By using Podi, you confirm that you are at least 14 years of age. We do not knowingly collect personal information from anyone under 14.

3. Legal Basis for Collection

We collect and process personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). Users who reside in Quebec may also have rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25); we honour those rights regardless of your province of residence.

We collect your information only when you have given us your consent (either expressly or implicitly through use of the Platform), or when we have a legitimate business purpose to do so that a reasonable person would consider appropriate in the circumstances.

4. Information We Collect

5. How We Use Your Information

We use personal information only for the following purposes:

• To create and manage your account
• To operate the Platform and deliver the features you use
• To send transactional emails where you have provided an email address (password resets, community invite notifications). Transactional emails are not marketing and do not require separate consent under CASL.
• To respond to support requests
• To detect and prevent fraud, abuse, and security incidents
• To comply with our legal obligations
• To improve the Platform (using aggregated, de-identified data — not individual profiles)

We do not sell, rent, or trade your personal information to third parties. We do not use your information for automated decision-making that produces legal or similarly significant effects.

6. Disclosure to Third Parties

We share personal information only with the following service providers, solely to operate the Platform:

All five providers are located outside Canada. Before transferring your information, we assessed that each provider maintains privacy protections substantially similar to those required under PIPEDA. Data processing agreements are in place with each provider. Quebec residents: this assessment also addresses the requirements of Law 25 s. 17.

We may also disclose information if required by a valid court order, subpoena, or applicable law, or to protect the rights, safety, or property of users or the public.

7. Your Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights:

• Right to access — Request a copy of the personal information we hold about you.
• Right to rectification — Ask us to correct inaccurate information.
• Right to withdrawal of consent — Withdraw consent at any time (note: some processing is necessary to provide the service).
• Right to deletion — Request deletion of your account and personal data. We will anonymise your match history records (which are linked to your community's league/tournament history) but will otherwise delete your data. See Section 10 for retention details.
• Right to data portability — Request your data in a structured, commonly used format. Use the 'Export my data' feature in Account Settings.
• Right to be informed of automated decisions — We do not use automated decision-making with significant effects.
• Right to restrict processing — In limited circumstances, ask us to stop using your data while a dispute is resolved.
• Right to lodge a complaint — You may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca. Quebec residents may also contact the Commission d'accès à l'information du Québec (CAI) at cai.gouv.qc.ca.

To exercise any of these rights, contact Kachyodunze@gmail.com. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing your request.

8. Cookies and Tracking

We use strictly necessary cookies and local storage tokens to maintain your login session. These are not optional — without them the Platform cannot function.

We do not use advertising cookies or third-party tracking pixels. We do not sell data to ad networks.

Our error monitoring (Sentry) may capture IP addresses in error reports; this data is used only for diagnosing technical issues and is not used for advertising.

9. Security

We implement industry-standard security measures: TLS encryption in transit, encrypted password hashing (bcrypt), row-level security (RLS) at the database layer, and access controls limiting who can reach production systems.

In the event of a privacy breach that poses a real risk of significant harm, we will notify the OPC and affected individuals as soon as feasible after becoming aware of the incident, as required by PIPEDA. We target notification within 72 hours.

No system is completely secure. You are responsible for keeping your password confidential. Report suspected security issues to Kachyodunze@gmail.com.

10. Retention

We retain your personal information only as long as necessary for the purposes described in this policy or as required by law. Specifically:

• Active account data — Retained for the duration of your account.
• Match history and game records — Retained indefinitely as community records. On account deletion, your name and avatar are replaced with 'Deleted Player' — the match results themselves remain to preserve the community's history.
• Billing records — Retained for 7 years as required by applicable federal and Ontario tax law.
• Support communications — Retained for 2 years after the support ticket is closed.
• Error logs (Sentry) — Automatically purged after 90 days.

11. Children

Podi is intended for users who are 14 years of age or older. We do not knowingly collect personal information from anyone under 14. If we become aware that we have collected information from someone under 14 without parental consent, we will delete that information promptly. Contact us at Kachyodunze@gmail.com if you believe a minor has created an account.

12. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email and by posting a notice on the Platform at least 30 days before the changes take effect. Continued use of the Platform after that date constitutes acceptance of the revised policy.

The current version is always available at podi.gg/privacy. The 'Last Updated' date at the top reflects the most recent revision.

13. Contact

Privacy Officer: Odunze Onyekachi Emmanuel
Email: Kachyodunze@gmail.com
Operating as: Kempyre Groups
Jurisdiction: Ontario, Canada