Privacy Policy

Pick'em ("we," "our," or "us") operates the Pick'em mobile application and website at pickem.fan (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

By using Pick'em, you agree to the collection and use of information as described in this policy.

Account Information

When you create an account, we collect your email address and display name. If you sign in with Google, we receive your name, email address, and profile photo from your Google account.

User-Generated Content

We store the content you create while using the Service, including your weekly picks, league settings, chat messages, and profile information (display name, avatar preference).

Usage Data

We collect anonymized performance and usage data through Vercel SpeedInsights to help us improve app performance. This does not include personal information or tracking across other websites.

Device and Diagnostic Data

If you turn on push notifications, we store a notification token issued by Firebase Cloud Messaging for each device you enable them on. The token is what lets us deliver a notification to that device; it is deleted when you turn notifications off or delete your account.

When the app crashes or hits an error, Sentry receives a diagnostic report containing the error, where in the app it happened, and the app and device version. We have configured Sentry not to attach personal information to these reports.

Our servers record the IP address of requests to enforce rate limits and block abuse, and Google reCAPTCHA receives signals from your browser on sensitive actions — such as requesting account deletion — to distinguish people from bots.

• To operate and maintain the Service, including managing your account, leagues, and picks
• To display leaderboards, standings, and pick comparisons within your leagues
• To send transactional emails such as league invitations and pick reminders when initiated by your league commissioner
• To monitor and improve app performance and reliability

We do not sell, trade, or rent your personal information to third parties. Your information is shared only in the following circumstances:

• Within your leagues — your display name, avatar, picks, and standings are visible to other members of leagues you join
• Service providers — we use Supabase for authentication and data storage, Firebase Cloud Messaging for push notifications, Vercel for hosting, and Resend for email delivery. These providers process data on our behalf under their own privacy policies
• Legal requirements — we may disclose information if required by law or to protect the rights and safety of our users

Your data is stored in Supabase (a managed PostgreSQL platform) and secured with Supabase Authentication. We use HTTPS encryption for all data in transit and follow industry-standard practices to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

We use the following third-party services:

• Supabase — authentication and database (PostgreSQL)
• Firebase Cloud Messaging (Google) — push notification delivery
• Vercel — web hosting and anonymized performance analytics
• Resend — transactional email delivery
• Google Sign-In — optional authentication method
• Sign in with Apple — optional authentication method
• Sentry — crash reporting and error monitoring
• Google reCAPTCHA — abuse prevention on sensitive requests (subject to the Google Privacy Policy and Terms of Service)

Each service operates under its own privacy policy. We encourage you to review them.

We keep your account information for as long as your account exists. If you delete your account, deletion takes effect after a 7-day grace period during which you can cancel it; after that, your profile, email address, and login credentials are removed permanently.

Some records survive that deletion in a form that is no longer linked to you. Picks, standings, parlays, and chat messages you left in a league are kept but detached from your identity — the name on them is replaced with an anonymous placeholder — because deleting them outright would change the results and history of leagues other people are still playing in. We keep a minimal record of the deletion itself, and the reports and moderation decisions made about content in your leagues, for as long as we need them to run the Service safely and to meet our legal obligations.

You can ask us what we hold about you, or ask us to delete something specific, at support@pickem.fan.

• Access and update — you can view and update your profile information at any time from the Profile page
• Delete your account — request deletion at any time from your profile settings. Deletion takes effect after a 7-day grace period during which you can cancel; after that, your account and associated data are permanently deleted. You can also email support@pickem.fan with the subject "Delete my account"
• Leave a league — you can leave any league at any time, which removes your data from that league

You must be at least 17 to use Pick'em, because the Service includes simulated sports-betting mechanics. It is not directed at children, and we do not knowingly collect personal information from anyone under 17. If you believe a child has provided us with personal information, please contact us at support@pickem.fan and we will delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, contact us at support@pickem.fan