Privacy Policy

1. Information We Collect

Account Information

When you create an account via Google, Apple, Facebook, or magic link, we collect your name, email address, and profile picture as provided by the authentication provider.

Game & Player Data

We collect game scores, play-by-play events, player rosters, and statistics that you or your organization record through the platform. Player profiles may include name, jersey number, position, and team affiliation.

Payment Information

Registration and token payments are processed through Stripe. We store your name, email, and transaction amounts. We do not store credit card numbers — Stripe handles all card data directly.

Usage Data

We log IP addresses and user-agent strings for security, rate limiting, and audit purposes. The mobile app stores game data locally on your device for offline use and syncs with our servers when online.

2. How We Use Your Information

- Authenticate your identity and manage your account
- Provide scorekeeping, statistics, and league management features
- Process registration payments and send invoices
- Send transactional emails (magic links, invitations, payment receipts)
- Maintain audit logs for security and dispute resolution
- Enforce rate limits and prevent abuse

3. Third-Party Services

We use the following third-party services:

- Google, Apple, Facebook — authentication (SSO)
- Stripe — payment processing
- Mailchimp (Transactional) — email delivery
- Expo Application Services — mobile app builds and updates
- Amazon Web Services — hosting and data storage

Each service operates under its own privacy policy. We do not sell your data to any third party.

4. Data Storage & Security

Your data is stored on servers hosted by Amazon Web Services in the United States. Authentication tokens on the mobile app are stored using encrypted device storage. We use HTTPS for all data transmission.

5. Data Retention

We retain your account data for as long as your account is active. Game data, statistics, and audit logs are retained indefinitely to preserve league records. If you delete your account, your personal information is removed, but anonymized game records may be retained.

6. Your Rights

You may:

- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and personal data
- Export your data in a portable format

To exercise any of these rights, contact us at the email below.

7. Data Deletion

You can request deletion of your account and all associated personal data by emailing us. We will process deletion requests within 30 days. Some data may be retained where required by law or to maintain league record integrity (scores, statistics) in anonymized form.

8. Children's Privacy

athletical.ly is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the platform. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions or data requests, email us at info@athletical.ly.