Privacy Policy

1. Introduction

Fairway Fantasy ("we", "our", or "the App") is a fantasy golf application available on iOS and Android. This Privacy Policy explains how we collect, use, store, and protect your information when you use the App.

By creating an account or using the App, you agree to the practices described in this policy.

2. Information We Collect

Account Information

• Email address – used for account identification and login.
• Display name – a user-chosen name shown to other players in leagues.
• Password – securely hashed using bcrypt before storage; we never store plaintext passwords.

Game & League Data

• Leagues you create or join, including league names, invite codes, and team names.
• Lineup selections, roster changes, and trade activity.
• Standings, scores, and related gameplay statistics.

Device-Stored Data

• Authentication token – stored securely on your device using the operating system's secure storage (Keychain on iOS, Keystore on Android) to keep you signed in.

Data We Do Not Collect

We do not collect location data, contacts, photos, health data, financial information, or device identifiers for advertising purposes.

3. How We Use Your Information

• To create and authenticate your account.
• To enable fantasy league gameplay, including lineups, rosters, trades, drafts, and standings.
• To display your display name to other league members.
• To provide real-time golf tournament data within the App.

4. Third-Party Services

The App relies on the following third-party services:

• Supabase (database & backend infrastructure) – Your account and game data is stored in a PostgreSQL database hosted by Supabase. See Supabase Privacy Policy.
• Data Golf API – We retrieve professional golf tournament data, leaderboards, and player statistics from the Data Golf API. No personal user data is shared with Data Golf.
• Render (hosting) – Our backend server is hosted on Render. See Render Privacy Policy.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

5. Data Storage & Security

• User data is stored in a PostgreSQL database managed by Supabase with encryption at rest.
• Passwords are hashed using bcrypt and are never stored in plaintext.
• Authentication tokens are signed using JSON Web Tokens (JWT) and expire after 30 days.
• On-device tokens are stored using platform-native secure storage (iOS Keychain / Android Keystore).
• All communication between the App and our servers is encrypted via HTTPS/TLS.

6. Data Retention & Deletion

We retain your account data for as long as your account is active. If you wish to delete your account and all associated data, please contact us at mvpeav@gmail.com. Upon receiving a verified deletion request, we will permanently remove your personal data within 30 days.

Game data associated with leagues (e.g., historical standings) may be anonymized and retained for the integrity of league records.

7. Children's Privacy

Fairway Fantasy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal data, please contact us at mvpeav@gmail.com.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at mvpeav@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

mvpeav@gmail.com