Privacy Policy

Last updated: May 9, 2026

Picklr ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information the Picklr app collects, how we use it, and the choices you have. It applies to the Picklr iOS app, Android app, and web app at app.picklr.app, plus the marketing site at picklr.app.

Information We Collect

• Account information: Email address and an optional display name when you sign up.
• Sign in with Apple: If you sign in with Apple, we receive your email (or Apple's relay address if you choose "Hide My Email") and your name. We do not receive your Apple ID password.
• Sign in with Google: If you sign in with Google, we receive your email and the name on your Google account. We do not receive your Google password.
• Session data: Player names you add, optional skill levels, optional gender (used for Mixed Doubles team balancing), optional DUPR ratings, match scores, court assignments, queue order, and the optional name and venue location of each session.
• Location (optional): Only when you tap "Use My Current Location" to tag a venue. The location is used once at that moment to look up nearby places — we do not track your location continuously and do not store coordinates beyond the venue you confirm.
• Feedback you submit: If you use the feedback form on picklr.app/feedback, we receive your message, your optional name and email, and the timestamp.

How We Use Your Information

• To run the Picklr app — manage sessions, balance teams, score matches, build leaderboards.
• To sync your session data across your devices (web, iPhone, Android).
• To send account-related emails (signup confirmation, password reset, important service notices).
• To respond to support and feedback messages you send us.
• To improve Picklr — we look at aggregate usage trends, never individual users.

We do not sell your data, share it with advertisers, or use it to build profiles for marketing.

How and Where Your Data Is Stored

• On your device: Picklr is offline-first. Sessions, players, matches, courts, and queues are stored locally in your browser's IndexedDB or your phone's app sandbox so you can keep playing if Wi-Fi drops.
• In the cloud: The same data is also stored on Supabase (PostgreSQL) so you can resume on another device. Each user's rows are isolated by Row-Level Security; no other user can read them.
• Communication between the app and Supabase is encrypted with HTTPS / WSS.

Permissions the App Asks For

The mobile apps only request a permission when you use a feature that needs it. You can decline any of these and the rest of the app keeps working.

• Location — only when you tap "Use My Current Location" to tag a venue.
• Photos — only when you tap "Save to Photos" on a leaderboard, match-history, or stats card snapshot. We never read photos you already have.
• Notifications — only if you start a timed match. We use a single local notification scheduled on your device to remind you when the timer ends. We do not send push marketing.
• Microphone / Speech — Picklr can announce matches with voice (text-to-speech). It uses your device's built-in voice and does not record or transmit audio.

Public "Live View" Sharing

If you choose to share a session's Live View link, anyone with that link can see the live scoreboard for that session — court assignments, scores, and the names of players you've added. This is opt-in: the link only works for sessions where you've enabled live sharing. The view is read-only; viewers cannot modify your data, sign in, or see other sessions.

Third-Party Services

• Supabase — hosts our database and handles authentication. Your account email, password hash, and session data live here.
• Apple Sign-In — optional sign-in method on iOS and web. We receive your email and name only when you choose this method. Apple's "Hide My Email" feature is supported and Apple will forward emails through a relay address you control.
• Google OAuth — optional sign-in method. We receive your email and Google profile name only when you choose this method.
• Google Maps Platform — venue search and place lookup when you type a venue name or use current location. Google receives the search query and approximate location for that lookup.
• Apple App Store / Google Play — ratings prompts use the platform's standard rating UI. We do not see who rates the app.
• Vercel — hosts picklr.app and app.picklr.app. Vercel logs basic request data (IP, user agent, URL) for security and uptime.
• Vercel Web Analytics — used on the marketing site (picklr.app) only, not the app. Captures aggregate page-view counts. Does not use cookies and does not identify individual visitors.
• Gmail SMTP — used to email the team when someone signs up or submits feedback. Only the email address you provided and the message body are forwarded.

Children

Picklr is not directed at children under 13. The App Store and Play Store list it as appropriate for ages 13+. If you believe a child has provided us with personal information, please email us so we can delete the account.

Your Rights

You can:

• Access or correct your account info — edit your display name and player profiles directly in the app.
• Export your session data — every session screen has a CSV / JSON export.
• Delete your account — open Settings → Delete Account in the app, or follow the steps at picklr.app/delete-account. Deletion removes your account and all associated data within 30 days.
• Withdraw consent — sign out and stop using Picklr at any time.

Data Retention

We keep your data while your account is active. After account deletion, data is removed within 30 days from our active database; backups are purged within 90 days.

Changes to This Policy

If we change anything material about how we collect or use your information, we'll update the date at the top and post the new version here. Significant changes will also be highlighted in the app.

Contact

Questions, concerns, or requests? Email us at emman@picklr.app.