Ballboy Privacy Policy

Last updated: April 25, 2026

This Privacy Policy describes how Ballboy (“we,” “us,” or “our”) collects, uses, and shares information when you use the Ballboy mobile application (the “App”). By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information you provide

When you create an account or use the App, we collect:

• Account information: email address, username, password (stored hashed by our authentication provider), first name, last name, and country.
• Profile information: optional profile avatar image you choose to upload.
• League and gameplay data: the leagues you create or join, your team selections, draft picks, trades, and other in-game activity.
• Chat messages: messages you send in league chat rooms.
• Reports: information you submit when reporting another user’s message, including the reason and any details you provide.

1.2 Information collected automatically

• Device and push notification tokens: if you grant permission, we store an Expo push token associated with your device so we can send you notifications about trades, drafts, and chat messages.
• Usage data: basic logs about App requests (timestamps, endpoints, error states) used for debugging and abuse prevention.

1.3 Information from third parties

The App displays publicly available tennis match data, player statistics, and live scores sourced from third-party tennis data providers. This information is not personal data about you.

2. How We Use Information

We use the information we collect to:

• Create and maintain your account.
• Provide core App functionality: leagues, drafts, trades, scoring, chat, and live scores.
• Send push notifications you have opted in to receive (you can disable any category at any time in the Profile screen).
• Investigate and respond to user reports of inappropriate content or behavior.
• Detect, prevent, and address abuse, fraud, or technical issues.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for third-party advertising or marketing.

3. How We Share Information

We share information only as described below:

• Service providers: we use third parties to operate the App. These providers receive only the data needed to perform their function and are required to protect it.
  • Supabase — authentication, database hosting.
  • Expo Push Notification Service — delivery of push notifications.
  • Tennis data providers — supply public match data to the App (we do not share your personal data with them).
• Other users: your username, country, profile avatar, league activity (team picks, trades, scores), and chat messages are visible to other users in the leagues you join.
• Legal requirements: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Ballboy or its users.

4. Data Retention and Deletion

We retain your account information for as long as your account is active.

You can delete your account at any time directly from within the App: Profile → Delete Account. When you delete your account, we permanently remove your profile information, push tokens, and authentication record. League and chat content you previously generated may be retained in anonymized form for league integrity (so historical leagues remain consistent for other participants), but will no longer be associated with your identity.

You can also withdraw consent for any optional data collection (e.g., push notifications) at any time from the Profile screen.

5. Your Rights

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or CCPA (California), including the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (see Section 4).
• Withdraw consent for data processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at the email below.

6. Children’s Privacy

Ballboy is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Security

We use industry-standard measures to protect your information, including encrypted transport (HTTPS) and authentication tokens managed by our authentication provider. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Users

Ballboy is operated from the United States. If you use the App from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy at this URL and revise the “Last updated” date. If we make material changes, we will notify you in the App.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: runballboy@gmail.com