1. Scope
This Privacy Policy applies to the SportsCred mobile application, website, landing-page quiz, and related services (together, the “Service”) operated by Gibbas Inc., doing business as SportsCred (“SportsCred,” “we,” “us,” or “our”).
It does not cover websites, apps, or services run by others, including Apple, Google, Supabase, sports-data sources, or links that users post. Those services have their own privacy practices.
2. Information We Collect
| Category | What it includes | How we receive it |
|---|---|---|
| Account and authentication | Email address, account identifier, sign-in status, verification information, and encrypted authentication credentials or tokens. Our authentication provider processes passwords; we do not display or store your password in readable form. | From you and our authentication provider when you register, sign in, or verify your email. |
| Profile and preferences | Handle, display name if provided, avatar URL if provided, favorite NFL team, onboarding status, account creation date, and recent activity time. | From you and from your use of the Service. |
| Sports activity and scoring | Picks, game selections, pick timing and results, trivia sessions and answers, response time, match participation, validation stances, ACS events, ACS score, tier, point changes, and related integrity signals. | From your actions and from server-side scoring, grading, and integrity systems. |
| Social and community content | Posts, replies, attachments to games or news, timestamps, friend requests and connections, blocks, reports, report details, moderation status, and interactions with content. | From you, other users, and our moderation systems. |
| Landing-page quiz data | Email address, selected sport, quiz answers and result, quiz score, displayed ACS and tier, attempt count, sharing activity, page URL, browser user agent, and timestamps. | From you, your browser, and the quiz. |
| Device and technical data | IP address, browser or device type, operating system, app version, session information, request and error logs, security events, and local-storage or secure-storage records used to keep you signed in and remember quiz progress. | Automatically when your device communicates with the Service or our providers. |
| Communications | Support requests, moderation appeals, feedback, and other messages you send us. | From you. |
We do not currently request access to precise location, contacts, photos, camera, microphone, or payment-card information through the app. If we add a feature that needs new sensitive data, we will update our disclosures and request permission where required.
3. How We Use Information
We use information to:
- create and secure accounts, authenticate users, and provide support;
- operate profiles, the Zone feed, replies, friendships, blocking, reporting, picks, trivia, matchmaking, and sharing;
- calculate, display, audit, and protect ACS scores, tiers, leaderboards, and the append-only scoring ledger;
- grade picks and trivia, settle eligible activity, prevent answer-key exposure, and protect competitive integrity;
- personalize NFL content using preferences such as a favorite team;
- detect spam, abuse, fraud, collusion, security threats, and violations of our Terms;
- moderate content, investigate reports, enforce restrictions, and respond to safety concerns;
- maintain, troubleshoot, analyze, and improve the Service;
- communicate about accounts, security, support, and material Service changes; and
- comply with law, enforce agreements, and protect SportsCred, users, and others.
4. What Other Users See
SportsCred is built around a public sports record. Depending on the feature, other users may see your handle, display name, avatar, favorite team, ACS score and tier, posts, replies, post validation totals, account age, and summarized performance.
Your picks may remain private before kickoff and become visible after the applicable game begins. Trivia answer choices are not shown to a live opponent before that opponent answers. Friend requests, blocks, private report details, authentication data, and your email address are not public through the normal Service interface.
Anything you post publicly may be copied, shared, or captured by others. Removing content or deleting an account does not remove copies that others made outside the Service.
5. How We Disclose Information
We may disclose information:
- to other users and the public, as described above and as needed for social, competitive, and scoring features;
- to service providers, such as Supabase for authentication, databases, and realtime infrastructure; website and app hosting providers; email delivery providers; and vendors that help us secure and operate the Service;
- to app platforms, including Apple and Google, when needed to distribute, support, or diagnose the app under their terms;
- for legal and safety reasons, when we reasonably believe disclosure is required by law or necessary to protect rights, safety, property, users, or the Service;
- in a business transaction, such as a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate protections; or
- with your direction or consent.
We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising. We do not permit service providers to use personal information for their own unrelated purposes.
6. Retention and Deletion
We keep information for as long as reasonably necessary to provide the Service, maintain the integrity of sports records and scoring, resolve disputes, enforce our Terms, meet legal obligations, and protect the Service. Retention depends on the type of record and why we use it.
You can delete your account from the app’s Profile area or request account and data deletion online, even if you no longer have the app installed. Account deletion is designed to remove your authentication account, profile, ACS ledger, and account-linked activity from active systems. Some limited information may remain temporarily in backups, security logs, fraud-prevention records, legal records, or records we must retain by law. Content copied or shared outside SportsCred is outside our control.
For landing-page quiz data that is not connected to an app account, contact us from the email used for the quiz to request deletion. We may ask you to verify that you control that address.
7. Your Choices and Rights
You may update available profile information, manage friendships and blocks, report content, sign out, or delete your account through the Service. You may also contact us to request access, correction, deletion, or a portable copy of eligible personal information.
U.S. state privacy rights
Depending on where you live and whether the applicable law covers SportsCred, you may have rights to know or access personal information, correct inaccuracies, delete information, obtain a copy, opt out of certain sales or sharing, limit certain uses of sensitive information, and appeal a denied request. You will not receive discriminatory treatment for exercising a privacy right.
Because we do not sell personal information or share it for cross-context behavioral advertising, we do not currently offer a “Do Not Sell or Share” link. If our practices change, we will update this policy and provide required choices, including honoring legally applicable browser-based opt-out signals.
To submit a request, email thesportscred@gmail.com. We may need to verify your identity and authority before acting. An authorized agent may submit a request where allowed by law, but we may require proof of authorization and direct identity verification.
8. Children
The Service is intended for a general audience age 13 and older. It is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child under 13 provided personal information, contact us so we can investigate and delete it as required.
If you are under the age of legal majority where you live, you may use the Service only with permission from a parent or legal guardian.
9. Security and International Transfers
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, server-authoritative scoring, protected authentication storage, and database-level permissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
SportsCred and its providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use legally recognized safeguards for international transfers.
10. Changes to This Policy
We may update this policy as the Service, our practices, or the law changes. We will post the updated version with a new “Last updated” date and provide additional notice when required. Your continued use after the effective date is subject to the updated policy.
11. Contact Us
Questions, privacy requests, and complaints may be sent to:
Gibbas Inc.
Doing business as SportsCred
California, United States
Email: thesportscred@gmail.com