Privacy Policy

Last updated: April 2026 1. Information We Collect Account Information: When you create an account with email and password, we collect your email address and a password hash (stored securely via Supabase Auth). If you sign in with a third-party identity provider (Google or Apple), we receive a unique user identifier from that provider and your email address (or, in the case of Sign in with Apple, an Apple private relay email if you choose to hide your real address). We never receive or store your Google or Apple account password. On first sign-in with Apple, you may also choose to share your name; if provided, we store it on your account profile. Usage Data: We collect information about how you use the App, including league participation, roster changes, and trade activity. This data is used to provide the App's core functionality. Device Information: We may collect device identifiers and push notification tokens to deliver notifications you've opted into. 2. How We Use Your Information • To provide and maintain the App's functionality • To authenticate you when you sign in (including via Google or Apple) • To send push notifications you've enabled (draft alerts, trade updates, etc.) • To display league standings, matchups, and statistics • To communicate important account or service updates 3. Data Sharing We do not sell your personal information. We share data only with: • Supabase (database and authentication provider) • Google and Apple (only when you choose to sign in with one of these providers; we exchange authentication tokens with them to verify your identity) • Expo (push notification delivery) • Other users in your league (team name, roster, trade history — as part of gameplay) 4. Push Notifications The App uses push notifications with 11 configurable categories. You can enable or disable each category in Notification Preferences, or disable all notifications from your Profile page. 5. Data Retention Your data is retained as long as your account is active. When you delete your account, we delete your personal data, team data, and push notification tokens. 6. Data Security We use Supabase Row Level Security (RLS) to ensure users can only access data they are authorized to view. Authentication tokens are stored securely on your device. 7. Children's Privacy The App is not intended for children under 13. We do not knowingly collect data from children under 13. 8. Your Rights You have the right to: • Access your personal data (visible in your Profile) • Delete your account and associated data (Profile > Delete Account) • Control push notification preferences • Export your data by contacting us 9. Changes to This Policy We may update this Privacy Policy at any time. We will notify you of material changes through the App. 10. Contact For privacy questions or data requests, please contact us through the App.