Privacy Policy

1. Information We Collect

Category	What it includes	How we get it
Account Information	Name, email address, profile photo (from Google Sign-In)	When you sign in with Google
League Data	League names, event details, rosters, RSVPs, scores, pairings, payout records	When you or your commissioner enters it into the platform
Payment Information	Plan type, purchase date, Stripe customer ID. We do not store card numbers — Stripe handles all card data.	When you purchase a Commissioner or Pro plan
Device & Usage Data	Push notification tokens (mobile app only), browser type, IP address, pages visited	Automatically when you use the platform
Communications	Emails you send to us, bundle inquiry form submissions	When you contact us directly

2. How We Use Your Information

We use the information we collect to:

• Operate the Service — authenticate your account, store your league data, send event emails and push notifications to your players
• Process payments — verify plan purchases, provision access, and support billing through Stripe
• Send transactional emails — RSVP confirmations, pairings, payment reminders, and welcome emails via SendGrid
• Communicate with you — respond to support requests, send important service updates
• Improve the Service — understand how features are used and where to invest product effort (aggregate, never individual profiling)
• Enforce our Terms — detect and prevent fraud, abuse, and violations of our Terms of Service

We do not use your data for advertising, sell your data to third parties, or use it to train AI models.

3. Third-Party Services We Use

Service	Purpose	Their Privacy Policy
Google Firebase	Authentication, database, cloud functions, and hosting. Your data is stored in Firebase Realtime Database.	firebase.google.com/support/privacy
Google Sign-In	Account authentication. We receive your name, email, and profile photo from Google.	policies.google.com/privacy
Stripe	Payment processing. Card data is handled entirely by Stripe — we only receive a customer ID and payment status.	stripe.com/privacy
SendGrid (Twilio)	Transactional email delivery — RSVPs, pairings, payment reminders, welcome emails.	twilio.com/legal/privacy
Expo (push notifications)	Mobile push notification delivery for iOS and Android.	expo.dev/privacy

Each of these services acts as a data processor on our behalf and is contractually bound to handle your data only as instructed by us.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• With your league members — your name and RSVP status are visible to other members of leagues you belong to, as that is the core function of the platform
• With our service providers — Firebase, Stripe, SendGrid, and Expo as described above
• For legal compliance — if required by law, court order, or to protect our legal rights
• In a business transfer — if Z Squared Enterprise LLC is acquired or merges, your data may transfer to the successor entity, subject to this Privacy Policy

5. Data Retention

We retain your account and league data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or needed to resolve disputes.

League data (scores, pairings, event history) that other users depend on may be retained in anonymized form after account deletion.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and personal data
• Portability — request an export of your league data in a common format
• Opt out of emails — use the unsubscribe link in any marketing email (transactional emails cannot be disabled while your account is active)

To exercise any of these rights, email us at info@plyrapp.golf. We will respond within 30 days.

7. Security

We implement industry-standard security measures including Firebase security rules, server-side validation via Cloud Functions, HTTPS encryption for all data in transit, and restricted access controls. No method of transmission or storage is 100% secure. We encourage you to use a strong password and to protect your Google account with two-factor authentication.

8. Children's Privacy

PLYR is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us at info@plyrapp.golf and we will delete it promptly.

9. Cookies and Tracking

PLYR uses browser local storage and session storage to maintain your login state and preferences. We use cookies set by Firebase for authentication. We do not use third-party advertising cookies or cross-site tracking technologies. You can disable cookies in your browser settings, but this may prevent you from signing in.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of your personal information (we do not sell personal information). To exercise these rights, contact us at info@plyrapp.golf.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of PLYR after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: info@plyrapp.golf
• Website: plyrapp.golf
• Company: Z Squared Enterprise LLC