Privacy Policy — Komplex

1. Introduction

Komplex ("we," "us," or "our") operates the Komplex mobile application and web dashboard. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and optionally your phone number. Authentication is handled by Clerk, a third-party identity provider.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, CVVs, or full card details. We retain only Stripe customer IDs and transaction records (amounts, dates, and order references) for your wallet and order history.

Location Data

We request your device location only during NFC or QR code check-in to verify you are at the facility (geofencing). Location data is transmitted to our server for verification and is not stored persistently.

Device & Usage Data

We collect device identifiers for push notification delivery via OneSignal. We also collect anonymous usage analytics to improve the app experience.

3. Children's Privacy (COPPA Compliance)

Komplex is designed for use by parents, guardians, and adults (age 13 and older). We do not knowingly collect personal information from children under the age of 13. All accounts must be created by a parent or guardian who provides consent during registration. If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information.

4. How We Use Your Information

Process transactions and manage your digital wallet
Deliver concession orders to the correct pickup location
Track loyalty points and tier progression
Send push notifications for order updates and game alerts
Verify facility check-in via NFC or QR code
Display live tournament brackets and scores
Improve our services through aggregated analytics

5. Third-Party Services

Clerk — Authentication and identity management
Stripe — Payment processing (PCI DSS compliant)
OneSignal — Push notification delivery
Amazon Web Services — Infrastructure hosting

Each third-party service has its own privacy policy governing how they handle your data.

6. Push Notifications

We use OneSignal to send push notifications including order status updates, game score alerts, and promotional offers. You can manage notification preferences within the app or through your device settings. You may opt out at any time.

7. Data Retention

We retain your account information and transaction history for as long as your account is active. Wallet transaction records are retained for 7 years for financial compliance. Check-in records are retained for 2 years. You may request deletion of your account and associated data at any time by contacting us.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data at rest, and secure authentication via Clerk. Financial transactions use atomic database operations with row-level locking to prevent race conditions.

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Opt out of push notifications and promotional communications
Export your transaction history

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@komplex.live
Address: Komplex, Russellton, PA