Privacy Policy

Last updated: April 8, 2026

Fantasy Cup ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

1. Information We Collect

We collect the following information when you create an account:

• Email address — used for account identification and password recovery.
• Profile name — your chosen display name visible to other league members.
• Password — stored securely using bcrypt hashing. We never store or have access to your plain-text password.
• Profile picture — optionally uploaded by you.

We also collect:

• Push notification tokens — to send you draft turn and game notifications, only if you grant permission.
• League and draft data — your fantasy league memberships, draft picks, and game-related choices.

2. How We Use Your Information

• To create and manage your account.
• To facilitate fantasy league gameplay (drafts, standings, scoring).
• To send push notifications about draft turns and league updates (with your permission).
• To enable password recovery.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Security

• Passwords are hashed using industry-standard bcrypt with a salt factor of 10.
• Authentication uses signed JWT tokens transmitted over HTTPS.
• All data is transmitted over encrypted connections (TLS/HTTPS).

4. Data Retention and Deletion

You may delete your account at any time through the app's Profile settings. When you delete your account:

• Your email, profile name, profile picture, and password hash are permanently deleted.
• Your league memberships, draft picks, wild card picks, extra credit picks, and push notification tokens are permanently deleted.
• This action is irreversible.

5. Third-Party Services

We use the following third-party services:

• Football-Data.org API — to sync live FIFA World Cup 2026 match schedules and scores. No personal data is shared with this service.
• Expo Push Notifications — to deliver push notifications to your device. Your push token is shared with Expo's notification service.

6. Children's Privacy

This app is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last updated" date above.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: playfantasycup@gmail.com