Privacy policy

Pick'em With Friends · Last updated 2026-08-21

This is a private football pick'em league run for a small group of friends. This policy explains what we collect, why, and what you can do about it. We don't sell your data, we don't advertise, and we don't use analytics or tracking tools.

Who runs this

Pick'em With Friends is operated by the league commissioner. Contact: PicksWithFriendsCommish@gmail.com

What we collect

You give us directly

  • Name and email — to identify you on the roster and sign you in. Sign-in uses a one-time code sent to your email; we never store a password.
  • Phone number (optional) — only if you provide it. Visible to commissioners only, used to reach you about the league. Other players cannot see it.
  • Profile picture (optional)— if you upload one, it's resized to a 512×512 image and stripped of all metadata, including any location data your camera embedded. The original file is discarded and never stored. Your picture is visible to everyone in the league.
  • Your picks, scores, and message board posts — the substance of the league, visible to other players per the league rules.

Collected automatically

  • Push notification identifier — if you enable notifications in the mobile app, our push provider issues an identifier for your device, which we store so we can send you announcements and pick reminders. It contains no personal information and you can turn notifications off at any time in your device settings.
  • Device platform (iOS or Android) — so notifications are formatted correctly.
  • Standard server logs — our hosting provider records IP addresses and request details for security and troubleshooting.

We do not collect location, contacts, photos beyond a picture you deliberately upload, advertising identifiers, or any behavioral tracking data.

How we use it

To run the league: sign you in, record and score your picks, show standings, deliver announcements and reminders, and let commissioners administer the roster. That's all. We do not use your information for advertising or sell or rent it to anyone.

Who we share it with

We use a small number of service providers who process data on our behalf:

ProviderPurposeWhat it handles
SupabaseDatabase, sign-in, image storageAccount and league data
VercelWebsite and app hostingRequests and server logs
ResendEmail deliveryYour email address and message content
OneSignalPush notificationsDevice push identifier
Apple / GoogleApp distribution and push deliveryPush messages in transit

We don't share your information with anyone else, except where required by law.

Commissioner visibility

Commissioners can see the full roster including email addresses and any phone numbers provided, and can view and moderate message board posts and profile pictures. Commissioner actions are recorded in an internal audit log.

How long we keep it

We keep your information while you're in the league. If you delete your account, your roster entry, picks, scores, message board posts, profile picture, and phone number are deleted permanently and immediately. Announcements posted by a commissioner remain as league records, showing only the name that was attached when posted. Server logs and email delivery records held by our providers expire on their own schedules.

Deleting your account

You can delete your account at any time: Profile → Delete my accountin the app or on the website. This is immediate and permanent — deleted picks and history cannot be recovered. You don't need to email anyone or ask permission.

If you're a commissioner, hand the role to another player first so the league isn't left without an administrator.

Your choices

  • Notifications — turn push off in your device settings, or email us to stop reminder emails.
  • Phone number and picture — both optional; remove them from your profile at any time.
  • Access or correction— email us and we'll help.

Children

This league is intended for adults. It is not directed at children under 13, and we don't knowingly collect their information.

Security

Data is encrypted in transit. Access is enforced at the database level so players can only read what the league rules allow. No system is perfectly secure, but we don't store passwords or payment information — league dues are handled directly between players via Venmo, and we never see those transactions.

Changes

If this policy changes materially, we'll say so in the app. The date at the top always reflects the current version.

Back to the appLeague terms