Privacy Policy

DRAFT — NOT LEGAL ADVICE. Pre-lawyer draft prepared for review by a licensed attorney. It was not written or reviewed by a lawyer. Bracketed items must be filled in or confirmed before publishing.

Effective date: [EFFECTIVE DATE]
Who we are: [Team Watcher LLC — entity TBD] ("Legacy Team Watcher," "we," "us," "our")
Contact: [CONTACT EMAIL]

This policy covers the Legacy Team Watcher apps for iPhone and Android and the Legacy Team Watcher web app at https://team-watcher.vercel.app (together, the "App"). [VERIFY: final web domain and the public URL where this policy will be posted.]

1. The short version

• No accounts. You never create an account, log in, or give us your name, email, or phone number.
• Your teams, bets, and history stay on your device. We don't keep them on our servers.
• No analytics, no ad networks, no tracking. We don't use analytics tools, advertising SDKs, tracking pixels, or fingerprinting, and we don't track you across other companies' apps or websites.
• Bet-slip photos are read once and not saved. If you choose to scan a slip, the photo goes through our server to an AI service that reads it. Neither we nor the AI service keeps it (details in Section 4).
• We never sell or share your personal information, alone or combined with other people's data.
• Payments go through Apple or Google. We never see your card or payment details.

2. Information stored only on your device

The App saves the following on your device only (in the app's local storage, or your browser's local storage for the web app):

• teams you follow and the league each belongs to;
• bets you enter or confirm from a slip scan: team or selection, opponent, bet type, line, odds, stake, potential winnings, parlay legs, and the sportsbook name printed on the slip (the App stores that name but doesn't show it);
• your bet history and weekly records;
• a cached copy of recent scores and odds so the App works offline;
• settings: light/dark theme, "lite" mode, whether you have agreed to the AI photo notice;
• on the native apps: your alert choices, app-lock setting, and the widget data your device shares between the App and its widgets. [VERIFY once the native apps are built: exact storage method, e.g. Capacitor Preferences or an iOS App Group, and confirm none of it syncs to a server.]

We cannot see, access, or recover this information. It never reaches our servers. Your device's own backup (for example iCloud or Google device backup) may include App data under Apple's or Google's terms, not ours. [VERIFY: whether to exclude App data from OS backups in the native build.]

3. Information our servers handle when the App loads scores

To show scores, lines, and game status, the App asks our server for a whole league's scoreboard (for example, "all NFL games"). It does not send your team list, bets, or any identifier. Every user gets the same answer, and your device picks out your teams itself.

As with any internet request, our hosting provider (Vercel Inc.) automatically receives technical information: your IP address, the type of device and browser (user agent), the page or data requested, and the time. Vercel keeps request logs for a short, limited period under its own settings (runtime logs are currently kept for about one day on our plan) [VERIFY: current Vercel log types and retention for our plan]. We don't add your information to those logs, we have no log exports ("drains") configured, and we don't use this information to identify, profile, or track you.

To prevent abuse of the slip reader, our server briefly holds a scrambled (salted and hashed) version of your IP address in memory for about 60 seconds to count requests. The scrambling key is random, changes regularly, and is never saved.

4. Bet-slip photo reader (optional)

If you choose to scan or upload a bet slip:

1. We ask first. Before your first scan, the App tells you the photo goes to an AI service to read your bet and asks for your OK. If you tap "Not now," nothing is sent. You can use the App fully without the slip reader by entering bets by hand. [VERIFY: the native app lets users withdraw this consent later in Settings; see Section 9.]
2. Your device shrinks the photo and sends it once over an encrypted (HTTPS) connection to our server.
3. Our server passes it to an AI model through Vercel's AI Gateway. Each request requires zero data retention and no use for training. If no provider can meet those terms, the request is refused and nothing is sent. Today the model is Google's Gemini 2.5 Flash-Lite, served through Google Cloud Vertex AI. [VERIFY at launch: the model and provider, and that the provider's zero-retention terms cover this use.]
4. The AI sends back the bet details it reads (team, bet type, line, odds, stake, and so on). Our server returns them to your device, where you review and edit them before saving.
5. The photo is not stored or logged by us. It exists only in memory while the request is handled and is then discarded. Our error logs record only an error type and status code, never the image or its contents.

Tip: slips can show other personal details, such as an account name or balance. Crop them out before you scan. The AI is told to ignore account balances and promotions, but it may still see anything that's in the photo.

On iPhone and Android, the App asks for camera or photo access only when you choose to scan, and only to take or pick the slip photo. [VERIFY: use the system photo picker so the App never gets access to your whole photo library.]

5. Purchases

Legacy Team Watcher is free. It has no in-app purchases, no subscriptions and no ads, so we collect no payment information. If we ever add a paid option, we will update this policy before it goes live.

6. Features handled entirely by your device

• Game alerts are local notifications scheduled on your device. We don't use push notifications and don't collect a push token or device identifier.
• App lock (Face ID, Touch ID, or fingerprint) uses your device's operating system. The App only learns whether the unlock succeeded. We never receive biometric data.
• Widgets load the same league-wide scoreboard as the App and read your teams from storage on your device.
• Haptics, dark/light mode, and offline mode run on the device.

7. Cookies, analytics, and advertising

• The web app doesn't set cookies. It uses your browser's local storage and a service-worker cache so the App loads fast and works offline. Clearing your browser's site data removes it.
• We use no analytics or crash-reporting SDKs, no advertising IDs, no ad networks, no tracking pixels, no session replay, and no fingerprinting. Our web app's security settings block third-party scripts.
• We never show gambling ads, sportsbook links, affiliate links, or promo codes.
• Because we don't track you, the App doesn't show Apple's App Tracking Transparency prompt, and the App doesn't need to respond to "Do Not Track" or Global Privacy Control signals. [VERIFY with attorney: how to describe GPC handling under state laws.]

8. Who receives information, and why

We may disclose information if the law requires it (for example, a valid subpoena), but in practice we hold almost nothing that identifies you. We require service providers to protect data at least as well as this policy does and to use it only to provide their service to us. [VERIFY: provider terms (Vercel DPA, AI provider zero-retention terms) back up this statement.]

We do not sell or "share" personal information as California law defines those terms, and we don't use it for targeted advertising or profiling.

9. Your choices and deleting your data

• Delete everything: use Settings → Delete all my data [DEFAULT CHOSEN — confirm with attorney; this in-app control must be built before launch]. You can also uninstall the App, or on the web clear this site's data in your browser. This permanently removes your teams, bets, history, and settings. We can't restore them.
• There's no account to delete. The App never creates one, so Apple's and Google's account-deletion rules (which apply to apps that let you create an account) don't require an account-deletion flow. We still give you the one-tap delete above.
• Slip reader consent: you can turn off the slip reader in Settings [VERIFY: build this toggle], and you can always enter bets by hand.
• Notifications, camera, and photos can be turned off anytime in your device settings.

10. Your privacy rights (including California and Virginia)

Depending on where you live, laws such as the California Consumer Privacy Act (as amended by the CPRA) and the Virginia Consumer Data Protection Act may give you rights to know, access, correct, delete, or get a copy of your personal data, to opt out of its sale, "sharing," targeted advertising, or profiling, and to appeal our response. We may not be legally required to follow these laws at our size [VERIFY: applicability thresholds with attorney], but we honor these requests anyway:

• We don't sell, share, or use data for targeted ads or profiling, so there's nothing to opt out of.
• Almost all data about you is on your device, where you control it (Section 9). We can't find you in any server data because we keep no account or identifier.
• To ask a question or make a request, email [CONTACT EMAIL]. We'll respond within 45 days. If we deny a request, you can appeal by replying with "Appeal" in the subject line, and we'll answer within 60 days. Virginia residents who disagree with our appeal decision may contact the Virginia Attorney General. [VERIFY: response and appeal deadlines against Va. Code § 59.1-577 and Cal. Civ. Code § 1798.130.]
• We won't treat you differently for using your privacy rights.

Sensitive information: We don't ask for sensitive data. Bet amounts you enter stay on your device.

11. Age limit (21+) and children

The App is only for adults 21 and older and is not directed to children. We don't knowingly collect personal information from anyone under 21, and especially not from children under 13 as defined by the Children's Online Privacy Protection Act (COPPA). Because we keep no accounts or user data on our servers, we have nothing to delete for a minor. If you think a minor is using the App, delete its data on their device (Section 9) and contact us at [CONTACT EMAIL].

12. Security

All traffic uses HTTPS. Our web app uses a strict content security policy that blocks third-party scripts. Slip photos are handled only in memory. No system is perfectly secure, and anyone with access to your unlocked device can see your App data, so turn on the App's lock if you share your device.

13. Where data is processed

We run the App from the United States, and it's intended for users in the United States. [DEFAULT CHOSEN — confirm with attorney: list the App only in U.S. storefronts at launch.] Our providers may process data in the United States or elsewhere under their terms.

14. Changes to this policy

If we change this policy, we'll post the new version with a new effective date and, for material changes, show a notice in the App before the change takes effect. We won't start collecting new types of personal data or sharing it without first updating this policy and, where required, asking your permission.

15. Contact

[Team Watcher LLC — entity TBD]
[CONTACT EMAIL]
[VERIFY: mailing address if required]

Gambling problem? Call or text 1-800-MY-RESET (National Problem Gambling Helpline, free and confidential, 24/7).