Privacy Policy

1. Who We Are

OutPick ("we", "us", or "our") is a sports pick'em application that lets players make spread-based picks on football and basketball games and player picks on golf tournaments, compete in private leagues, and follow live standings. By using OutPick, you agree to this Privacy Policy.

2. Information We Collect

We collect the following types of information:

• Account information: Your name and email address when you create an account.
• Sign-in information: You can sign in with email, with Sign in with Apple, or with Google. When you use one of those, we receive and store only what is needed to operate your account — a provider account identifier, your email address, and the name you choose to share. If you use Apple's Hide My Email option, we receive an Apple private relay address instead of your personal address and use that for account email. For Sign in with Apple we also store the Apple identifier and token needed to revoke your Apple authorization if you delete your account.
• Profile information: Your display name, profile photo, and any other profile data you voluntarily provide.
• Game activity: Your picks, weekly scores, standings, achievements, and Rivalries results.
• League data: Leagues you create or join, your league roles, and league chat messages you send.
• Notification preferences: Your email and push notification settings, and push subscription tokens if you enable push alerts.
• Purchase information: Purchases made on the web are handled by Stripe; purchases made in the iOS app are handled by Apple. We never receive or store your card number. From Stripe we receive a customer and subscription reference; from Apple we receive transaction identifiers, the product purchased, the store environment, and renewal, expiration or refund status. We use this only to verify the purchase and to keep your access (for example an OutPick+ weekly or annual subscription, or a league you paid for) working on every device you sign in on.
• Usage data: How you interact with the app, for improving the service.
• Diagnostics: When something goes wrong, our app and the hosting platform we run on record technical error and performance information — such as the error message, the screen it happened on, and basic device and app details — so we can find and fix crashes and failures. These records are used for reliability, not advertising.

3. How We Use Your Information

• To provide and personalize the OutPick service, including AI-powered features for OutPick+ subscribers.
• To process league purchases and subscriptions via Stripe.
• To send you account-related notifications (pick reminders, game start alerts, weekly results, league announcements) based on your preferences.
• To improve our product and develop new features.
• To comply with legal obligations.

4. League Data Sharing

OutPick is built around private leagues. When you join a league, other members of that league can see your display name, profile photo, standings position, weekly results, and achievements. Your picks remain hidden from other members until each picked game has started, after which they become visible to league members. Chat messages you send are visible to all members of that league. Data is never shared across leagues you are not a member of.

5. AI Features & Data Processing

OutPick uses AI in a few places: game analysis and Edge Scores, Build My Picks, Pick Coach, the Ask OutPick assistant, Your Week recaps, and league banner generation. Ratings and scores themselves are produced by our own scoring engine, not by a language model; the AI turns those already-calculated facts into plain-English writing.

Requests are sent through the Lovable AI Gateway, which routes them to one of several model providers; the provider used can change over time. What we send is limited to what the feature needs: game and matchup data, your own picks and results, your display or first name, your league's settings and your role in it, and — for Ask OutPick — the messages you type. Anything you could not already see in the app is filtered out before the request is made, so another member's hidden pick is never sent. We do not send your email address, payment details or sign-in tokens.

We do not train any model on your data ourselves, we do not sell your data, and we do not send OutPick content to any provider for the purpose of model training. Model providers reached through the gateway handle requests under their own terms, which we do not control. Ask OutPick conversations and generated recaps are stored in your account so you can return to them, and are deleted when you delete your account. Universal game analysis is shared across subscribers; your personal fit scores, coaching insights and recaps are private to you.

6. Data Security

All data is stored securely using industry-standard encryption. Access is controlled through Row Level Security policies that ensure picks stay private until game start and that league data is only accessible to that league's members. We use secure authentication and HTTPS for all data transmission.

7. Data Retention & Account Deletion

You can permanently delete your account yourself, at any time, from Profile → Settings → Account → Delete Account. You do not need to email us. Deletion is permanent and cannot be undone.

When you delete your account:

• Your profile is de-identified — name, email, photo and other profile details are removed and the account is shown to other members only as "Deleted User".
• Your sign-in identities, sessions and tokens are deleted. If you used Sign in with Apple, we also revoke your Apple authorization.
• Your notification settings and any push/device tokens are deleted.
• Your Ask OutPick conversations, AI recaps, personal AI scores and generated images are deleted.
• Your chat messages, reactions, reports, feedback, support cases, invitations and billing references are deleted.
• Analytics records are stripped of your user identifier.
• Leagues you run are handed to another member automatically; a league with no other members is deleted.

Completed competition results — picks, scores, standings, rivalry results and championships — are kept in anonymized form, attached to "Deleted User" rather than to you. This is necessary so other members' standings and league history stay correct. We also keep a minimal record that the deletion happened, and any information we are legally required to retain.

While your account is active we retain your data for as long as you use OutPick. After deletion, residual copies may remain in encrypted backups for a limited period in line with our backup and retention processes. Those copies are not restored to active use except as necessary for system recovery, security, or to meet a legal obligation, and they age out as backups are rotated.

8. Cookies & Tracking

We use essential cookies and local storage to maintain your session and app preferences. We do not use advertising trackers, and we do not sell your data to third parties. No ads. No data sales. Ever.

9. Your Data Rights

Regardless of where you live, we believe you deserve full control over your personal data. Here are the rights we guarantee to every OutPick user:

• Right to Access: You can view the data we hold about you directly within the app — your profile, picks, results, and league memberships are always available to you.
• Right to Data Portability: You can request a copy of your personal data in a machine-readable format by contacting us.
• Right to Rectification: You can update or correct your personal information directly in your profile at any time.
• Right to Erasure: You can permanently delete your account yourself from Profile → Settings → Account → Delete Account, as described in section 7.
• Right to Restrict Processing: You can choose what notifications you receive and what optional profile data you share through your settings.
• Right to Object: You may object to specific uses of your data by contacting us. We will honor your request promptly.
• Right to Withdraw Consent: Where we rely on your consent (e.g., optional profile fields, push notifications), you can withdraw it at any time by removing that data or disabling the setting.

We aim to respond to all data rights requests within 30 days. For EU/EEA residents, these rights are guaranteed under the General Data Protection Regulation (GDPR). For California residents, equivalent rights are provided under the CCPA/CPRA.

10. International Data Transfers

Your data is stored on secure cloud infrastructure. If data is transferred outside your region, we ensure appropriate safeguards are in place, including encryption in transit and at rest.

11. Children's Privacy

OutPick is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or an in-app notice. Continued use of OutPick after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@outpick.me.