Privacy Policy

• Account details. When you sign up with email, Apple, or Google we receive your email address and display name. Passwords are stored only as a salted hash — we never see your plaintext password.
• Player profile & cards. A profile photo, display name, and preferred position for each team, plus optional details you choose to add: country and city, age, height, fitness level, and your level and position in each sport.
• Stat votes. The ratings you give teammates. You cannot vote on your own card.
• Chat & games. Messages, photos, and videos you send in a team chat, and the time, location, and RSVPs for games you create or join.
• Venue terms & waivers. When a venue asks you to accept its terms or a waiver, we record which document and version you accepted, when, and, if the venue requires it, the name you typed to sign.
• Prize claims. If you win a season prize and claim it, we collect what that prize needs to reach you: your full name, email address, phone number, and, for physical prizes, a shipping address.
• Payments & subscriptions. Venue fees and memberships are paid through Stripe, and Pro and Max subscriptions through the App Store or Google Play. Your card details go directly to those providers; we never receive or store them. We keep a record of what you bought, its status, and its amount.

• Location.If you allow it, the apps use your device's precise or approximate location to show games, teams, and venues near you, to suggest your city during setup and for local rankings, and to center maps when you pick a game location. We only read it while the app is open, never in the background. You can turn location off at any time in your device settings and choose an area by hand instead.
• Usage & diagnostics. App interactions (such as which screens you open and which features you use), app version, device type, and crash reports, so we can keep the app working and improve it.
• Device identifiers.A push-notification token and the language of your device, so we can send you notifications in your language, plus the app-instance identifiers our analytics and crash-reporting tools use. We do not collect your device's advertising ID.

We do not show ads, we do not use your data to build advertising profiles, and we do not sell your personal data.

• To create your account and show your cards, votes, and teams to your teammates.
• To deliver team chat, game scheduling, leagues, rankings, and notifications, including emails about your account or venue staff roles.
• To process payments, subscriptions, and prize deliveries.
• To generate balanced lineups. When you use the AI team-shuffle feature, players' display names, positions, ratings, sport level, and any age, height, and fitness level they have added are sent to Google's Gemini API to suggest balanced teams.
• To create MVP posters. When you generate one, your player card image is sent to Google's Gemini API to produce the poster.
• To understand how the apps are used, fix crashes, and improve features.
• To maintain security, prevent abuse, and comply with the law.

Data sent to the Gemini API is not used to train models.

Your card, ratings, and chat messages are visible to members of the teams you join. Teams marked public or private may appear in the Discover directory; unlisted teams stay invite-only. When you join a venue's league, game, or membership, that venue's staff can see your profile, your entries and payment status, and your acceptance of their terms and waivers.

We do not share your personal data with any other third parties except the service providers below, who process it on our behalf.

• Google — Firebase (authentication, database, file storage, hosting, push notifications, analytics, and crash reporting), the Gemini API (AI features), and Google Maps (maps and place search). See Google's privacy information.
• Stripe — payments to venues. See Stripe's privacy policy.
• Apple and Google Play — in-app subscriptions.
• Twilio SendGrid — transactional emails.

We keep your data while your account is active. You can remove your card, leave a team, or delete your account at any time from your account settings in the app or at pickupcard.app/account. You can also request full deletion of your account and associated data by emailing admin@pickupcard.app; we will process it within 30 days. Payment records may be kept longer where the law requires it.

All data is encrypted in transit between the apps and our servers, and access to it is restricted by account.

Pickup Card is not directed to children under 13, and we do not knowingly collect personal information from them.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. Contact us at the address below to exercise these rights.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about this policy or your data? Email admin@pickupcard.app.