Privacy Policy

ScoreIQ is a college football prediction league app. You create or join a league, track a team, and submit a predicted score before each game's picks lock. This policy explains what information the ScoreIQ app and its backend collect to make that work, why, and what control you have over it.

ScoreIQ does not run ads, does not include third-party analytics or advertising SDKs, and does not sell your personal information to anyone.

We collect only what's needed to run your account, your leagues, and pick reminders.

Account information

• Email addressused to sign in and to send password-reset links.
• Username, first & last nameshown to other members of your leagues.
• Passwordstored only as a salted cryptographic hash — ScoreIQ never stores or can read your plain-text password.

League & gameplay data

• Leagues & invitesleagues you create or join, the team a league tracks, and invite codes you generate.
• Picksthe predicted scores you submit for each game, and when you submitted or updated them.
• Rankingspoints and standings calculated from your picks against real game results.

Device & notifications

• Push tokenan Expo-issued device token, used only to deliver your pick-reminder notifications.
• Notification preferencewhether league pick reminders are turned on for your account.

Automatically collected

Our servers log standard request metadata (such as IP address and timestamp) briefly, to operate the API and to rate-limit abusive requests like repeated password-reset attempts. We do not use this for tracking or advertising.

• Create and authenticate your account, and keep you signed in.
• Run league membership, invites, picks, live standings, and season rankings.
• Send a push notification roughly one hour before your tracked team's kickoff if you haven't picked yet, when reminders are enabled.
• Enforce the pick-lock rule (30 minutes before kickoff) fairly and consistently for every league member.
• Investigate abuse, secure accounts, and respond to support requests.

With other league members

Your username, first and last name (if provided), and your submitted picks and rankings are visible to other members of leagues you belong to — that visibility is the point of a prediction league. This is never shared outside a league you've joined.

With service providers

• Expo delivers push notifications to your device using your device's push token. Expo does not receive your picks, email, or league data.
• CollegeFootballData supplies public team schedules, scores, and spreads. This is a one-way lookup — no information about you or your account is ever sent to this provider.
• Our hosting and database providers process data on our behalf, under standard confidentiality obligations, solely to run the service.

We do not

• Sell or rent your personal information.
• Share your data with advertisers or data brokers.
• Use third-party analytics or advertising SDKs in the app.

We keep your account and league data for as long as your account is active, so leagues, history, and season standings stay intact for you and your leaguemates.

You can permanently delete your account at any time from Settings → Delete Account in the app. When you do:

• Your login is disabled immediately and your email and username are anonymized so they can no longer identify you.
• Your device push tokens are deactivated and reminders stop.
• If you owned a league, ownership passes to another active member automatically; if you were the only member, that league is closed.
• Historical picks and points already recorded for leagues you played in remain, tied to the anonymized account, so other members' standings and league history stay accurate.

To request removal of data beyond what account deletion covers, contact us at privacy@scoreiq.app.

• Edit your profile — update your username, first name, and last name from Profile Settings.
• Turn off pick reminders — disable league notifications any time from Notification Settings; this takes effect immediately on our servers.
• Revoke device notifications — disabling notification permission for ScoreIQ in your device's OS settings stops delivery to that device.
• Delete your account — see Retention & deletion above.

ScoreIQ is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us at privacy@scoreiq.app and we will remove it.

• Passwords are hashed with a salted, one-way algorithm — never stored or logged in plain text.
• Sign-in uses signed JWT access tokens; the app stores your token in your device's secure, encrypted storage.
• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Password-reset requests are rate-limited to prevent abuse.

No method of storage or transmission is 100% secure, but we work to protect your information using industry-standard practices.

If we make material changes to this policy, we'll update the effective date above and, where required, notify you in the app before the changes take effect.

Questions about this policy or your data can be sent to privacy@scoreiq.app.