Privacy Policy

This Privacy Policy explains how PikSheet collects, uses, shares, and protects information when you use our websites and mobile apps. PikSheet is a pool management and scoring service for sports pools.

1. Information we collect

• Account information: email address, username, display name, avatar, authentication provider identifiers, and account settings.
• Pool and gameplay information: pools you create or join, invite and membership records, entries, picks, tiebreakers, standings, box squares, commissioner actions, and scoring history.
• Payment and billing records: platform billing status, Checkout session references, payment status, and commissioner-managed payment ledger entries. Card numbers and other payment credentials are entered with Stripe and are not stored by PikSheet.
• Device and notification information: push notification tokens, platform, notification preferences, and notification delivery state when you enable mobile push notifications.
• Diagnostics and technical information: logs, error reports, performance data, IP address, device/browser details, and similar information needed to secure, debug, and operate the service.
• Support communications: messages you send to us and the contact information needed to respond.

2. How we use information

• Operate the service, authenticate users, and keep accounts secure.
• Create pools, record picks, score games, show standings, and run commissioner tools.
• Send service messages, account emails, and push notifications you choose to receive.
• Process platform billing, detect payment status, and support billing issues.
• Monitor reliability, investigate errors, prevent abuse, and improve the product.
• Comply with legal, security, tax, accounting, and App Store obligations.

3. Visibility inside pools

Pool activity is shared with the people who need it for the pool to work. Members of a pool can see pool names, entries, picks when they become visible under that pool's rules, standings, and box activity. Commissioners and co-commissioners can see member and entry details needed to administer the pool. Platform admins can access operational and billing information when needed to provide support or protect the service.

4. Service providers

We use service providers to run PikSheet, including Supabase for database, authentication, realtime, and edge functions; Vercel for web hosting; Sentry for error monitoring; Stripe for platform billing; Apple and Google for sign-in or platform services where you choose to use them; APNs for iOS push delivery; and api-sports.io for sports data. These providers process information for us under their own terms and privacy commitments. We do not sell personal information, run ads, or use your information to track you across apps or websites owned by other companies.

5. Cookies and local storage

PikSheet uses cookies, local storage, and similar browser or device storage for authentication sessions, app preferences, push token caching, security, and reliability. We do not use advertising cookies.

6. Push notifications

Push notifications are optional. If you allow notifications, we store a device token so we can send reminders and pool activity notifications. You can change notification preferences in the app and can disable notifications in iOS settings at any time.

7. Data retention

We keep account, pool, pick, scoring, payment, and billing records as long as needed to provide the service, preserve pool history, resolve disputes, meet legal or accounting obligations, and protect the service. Diagnostic logs and error reports are kept for a shorter period unless they are needed to investigate a security, reliability, or support issue.

8. Your choices

• You can update your display name and notification preferences in the app.
• You can delete your account from the Profile screen in the app.
• You can request access to or correction of your information.
• When you delete your account, your sign-in, email, display name, and notification devices are removed or anonymized. Some pool history may remain visible to commissioners or other pool members when needed to preserve completed pool records, standings, payments, audits, or dispute history.

9. Security

We use technical and organizational safeguards designed to protect your information, including authentication controls, database row-level security, limited admin access, and encrypted transport. No online service can guarantee absolute security.

10. Children

PikSheet is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children.

11. International users

PikSheet and its providers primarily process and store information in the United States. If you use the service from another country, you understand that your information may be processed in the United States.

12. Changes

We may update this policy from time to time. If changes are material, we will provide reasonable notice through the service, by email, or by other appropriate means.

13. Contact

Questions or privacy requests: support@piksheet.com.