Privacy Policy

1. Introduction

KUKUA, operated by Diaspora Drop, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. This policy applies to all users of the platform regardless of location, and we are committed to compliance with applicable data protection laws including the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

We collect the following categories of data:

• Account registration data: Your name, email address, and role/user type when you register
• Subscription and payment data: Billing information is processed securely by Stripe. We do not store full payment card details on our servers — only subscription tier and status
• Player profile data: Information submitted by users, admins, or players themselves including physical stats, contact details, and scouting notes
• Usage data: Pages viewed, players viewed, session activity — used to power the "For You" recommendation feed and improve the platform
• Language and preference data: Your selected display language and other UI preferences

3. How We Use Your Data

We use the data we collect to:

• Provide and maintain the platform and its features
• Personalize the "For You" recommendation feed based on your viewing history
• Process payments and manage subscription access via Stripe
• Enforce tier-based access controls on player data
• Detect and prevent unauthorized data access or scraping
• Send transactional communications (e.g. account alerts)

Your data is never sold to third parties.

4. Payment Processing (Stripe)

Subscription payments are processed by Stripe, Inc. When you subscribe, your payment information is transmitted directly to Stripe and is governed by Stripe's Privacy Policy. Diaspora Drop does not store credit card numbers or full payment details on its servers. We receive only your subscription status and anonymised billing identifiers from Stripe.

5. Player Profile Data

Player profiles on KUKUA contain information intended for professional basketball scouting purposes. Access to contact information, scouting intel, and other sensitive fields is restricted based on subscription tier and is not included in API responses for users without the appropriate access level.

Player data rights: Any individual whose data appears on the platform may request correction or removal of their profile by contacting us directly at privacy@diasporadrop.com. We will process requests within 30 days.

6. Cookies & Session Tracking

We use session storage and cookies to maintain your login state and UI preferences. Usage events (e.g. which player profiles you view) are stored to power the personalised "For You" feed.

• We do not use third-party advertising cookies
• We do not share session or behavioural data with ad networks
• Session data for the FYP feed is stored on our platform servers and is not shared externally

You can control cookies through your browser settings, though this may affect platform functionality.

7. Information Sharing

We do not sell your personal information. We may share information only in the following circumstances:

• With your explicit consent
• With service providers (e.g. Stripe, hosting) who assist in operating the Service under strict data processing agreements
• To comply with applicable legal obligations or lawful requests from public authorities
• To protect the rights, property, or safety of Diaspora Drop or its users

8. GDPR & International Users

The KUKUA platform is accessible globally. If you are located in the European Union or European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR) including:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to certain types of processing, including profiling
• Right to restrict processing: Request that we limit how we use your data

To exercise any of these rights, contact us at privacy@diasporadrop.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including tier-based access controls that strip sensitive fields from API responses for unauthorised users. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

10. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with legal obligations. Account data is retained while your account is active. If you delete your account, we will remove your personal data within 90 days except where retention is required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date above.

12. Contact Us

For questions, data requests, or concerns about this Privacy Policy, contact us at: