Last updated: August 2026
1. Information We Collect
Account Information: When you create an account with email and password, we collect your email address and a password hash (stored securely via Supabase Auth). If you sign in with a third-party identity provider (Google or Apple), we receive a unique user identifier from that provider and your email address (or, in the case of Sign in with Apple, an Apple private relay email if you choose to hide your real address). We never receive or store your Google or Apple account password. On first sign-in with Apple, you may also choose to share your name; if provided, we store it on your account profile.
Content You Create: league and direct chat messages, team names, poll responses, and any images you choose to attach to a message or use as a team logo. Images are read from your camera or photo library only at the moment you select one, and are visible to the members of the league you post them in. Camera and photo library access are optional — every other feature works without them.
League Payment Handles: if you are a commissioner and choose to use the optional league dues tracker, we store the payment handle you enter (for example, a Venmo username) and each member's self-reported paid or unpaid status. We never receive, process, or store payment card details, bank details, amounts transferred, or any transaction record.
Usage Data: We collect information about how you use the App, including league participation, roster changes, and trade activity. This data is used to provide the App's core functionality.
Device Information: We may collect device identifiers and push notification tokens to deliver notifications you've opted into. If you enable notifications, we also store your device's time zone so that times inside a notification (a draft start, a deadline) are shown in your own local time. We do not collect your precise location.
2. How We Use Your Information
• To provide and maintain the App's functionality
• To authenticate you when you sign in (including via Google or Apple)
• To send push notifications you've enabled (draft alerts, trade updates, etc.)
• To display league standings, matchups, and statistics
• To keep leagues safe by screening content and reviewing abuse reports
• To communicate important account or service updates
We do not use your information for advertising, and we do not track you across other companies' apps or websites.
3. Data Sharing
We do not sell your personal information. We share data only with:
• Supabase (database, authentication, and file storage provider)
• Google and Apple (only when you choose to sign in with one of these providers; we exchange authentication tokens with them to verify your identity)
• Expo (push notification delivery)
• PostHog (product analytics — app usage and diagnostic events that help us improve the App)
• Other users in your league (team name, roster, trade history, chat messages, and any images you post — as part of gameplay)
We may also disclose information where required by law, or where necessary to investigate a safety report or protect the rights and safety of our users.
4. Safety and Moderation
To keep leagues safe, we automatically screen chat messages and team names against a prohibited-content filter before they are saved. When you report a message, we retain the reported message, the reason you selected, any details you add, and the identities of the reporting and reported users for as long as we need them to review and act on the report. You can block another user at any time from Profile > Blocked Users.
5. Push Notifications
Push notifications are optional. We ask for your permission before requesting it from your device, and the App works without them.
If you allow them, notifications are broken into individual categories — draft, trades, waivers, injuries, playoffs, direct messages, league chat, and league admin among them — each with its own switch, and some grouped under a parent switch that turns the whole group off at once. Only some are on to begin with: we default to alerts about your own team and league that are low-volume enough to be worth an interruption, and leave the high-frequency ones (league chat, other teams' roster moves, trade rumors, and per-player news) off until you turn them on.
You control notifications in four independent ways:
• Enable or disable any individual category in Profile > Notifications
• Override any category for a single league, without changing your settings in your other leagues
• Silence everything at once with the "Mute All Notifications" switch
• Revoke permission entirely in your device's system settings, which stops all delivery regardless of the settings above
Turning off push notifications in your Profile also deletes the push token stored for your device.
6. Data Retention
Your data is retained as long as your account is active. When you delete your account, we delete your personal data, team data, and push notification tokens. Moderation records relating to a report may be retained after deletion where needed to enforce our Terms.
7. Data Security
We use Supabase Row Level Security (RLS) to ensure users can only access data they are authorized to view. Authentication tokens are stored securely on your device.
8. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, email us at admin@franchisefantasy.co and we will delete it.
9. Your Rights
You have the right to:
• Access your personal data (visible in your Profile)
• Delete your account and associated data (Profile > Delete Account)
• Control push notification preferences
• Export your data by emailing admin@franchisefantasy.co
10. Changes to This Policy
We may update this Privacy Policy at any time. We will notify you of material changes through the App.
11. Contact
For privacy questions or data requests, contact us at admin@franchisefantasy.co.