Privacy Policy

Not yet written. This page is a placeholder so the app's links resolve during development. It is not a legal document and nobody should rely on it.

Before launch this needs to be written or reviewed by someone qualified, covering at least the points listed below. The app already promises these documents on its sign-in screen, and both the App Store and Google's OAuth consent screen require them to exist at a stable URL.

What it has to cover

• What is collected: email address, display name, date of birth, self-declared province or state, and the consent records for each.
• Why the date of birth is held — age eligibility — and that it is not used for anything else.
• Sign-in identities from Google or Apple, and what comes back from them.
• That passwords are stored only as argon2id hashes, never in the clear.
• Who the processors are: the hosting provider, the database, the email sender, and the sports-data provider.
• Retention, deletion on request, and how to ask.
• Canadian PIPEDA and BC PIPA obligations, plus GDPR if anyone in the EU can sign up.
• CASL: marketing email is opt-in and defaults to off, which is what the sign-up screen already does.
• A contact address for privacy requests.