Privacy Policy

Last updated: May 26, 2026

Statewide Sports Hub ("we", "us", or "our") operates the Statewide Sports Hub mobile application (the "App") and the related website at statewidesportshub.com. We are based in Arizona, USA, and operate as a sole proprietorship doing business as Statewide Sports Hub. The App is available to users across the United States.

This policy describes what information we collect, how we use and share it, the choices you have, and how to contact us. We have written this policy to match what the App actually does — every category below corresponds to code that runs in our service.

1. Information We Collect

1.1 Account & identity

• Email address — required to create your account and to verify it.
• Password — required at signup. Your password is stored only by Amazon Cognito (AWS), in a hashed form. We never see or store your raw password.
• Email verification code — sent to your email by Amazon Cognito and delivered through Amazon Simple Email Service (SES).

1.2 Profile information

When you complete your profile after signup, you provide:

• Name (required, free text — you choose what to display).
• Gender (required, one of: Male, Female, Prefer not to say). Apple classifies this as "sensitive" personal information; we collect it only because it is used to match you with appropriate tournament divisions.
• Favorite sports (required, one or more).
• Overall skill level (required) and optional per-sport skill levels.
• Profile photo (avatar) — optional. If you upload one, the image is stored in our Amazon S3 bucket and served through Amazon CloudFront. We do not collect any other photos: the camera and photo library permission is requested only for picking your avatar.
• Aggregate statistics computed from your activity (games played, games hosted, average rating, MVP count). These are derived from your other data, not separately collected.

1.3 Content you create in the App

• Matches and tournaments you post or join — sport, location, date, time, description, fees marked as paid or unpaid, registrations, and host messages.
• Match chat messages — sent in the chat for a specific match. Visible to the host and confirmed participants of that match.
• Direct messages (DMs) — only between you and a connection you have accepted. Visible only to the two parties.
• Ratings and reviews — star ratings (1–5), MVP votes, tags, and optional review text you give to other players or hosts after a match. Reviews are visible publicly on the recipient's profile.
• Auction (player draft) data — if you participate in a tournament that uses our live player auction feature, we store the team you captain (if any), the bids you place, and the players assigned to your team.
• Help & Support feedback — when you submit feedback through the App, we store the message text along with your email so we can reply.

1.4 Location

The App uses your device's location only when you explicitly tap "Use current location" while creating a match or tournament. We never read your location in the background and we never track your continuous position. The iOS permission we request is "When In Use" only.

When you tap that button, the App:

• Reads your current GPS coordinates and sends them to Apple Maps (MapKit JS) to search for and reverse-geocode a human-readable address. If Apple Maps returns no results, the App falls back to OpenStreetMap Nominatim for the same purpose.
• Saves the chosen latitude, longitude, and address on the match or tournament record so other players can find the venue. This is the location of the event, not a running record of where you have been.

1.5 Push notifications & device identifiers

If you allow push notifications, we store your device token (issued by Apple Push Notification service on iOS or Firebase Cloud Messaging on Android), the platform name, and a timestamp. We use this token only to deliver notifications to your device. Tokens that have not been refreshed for 90 days are automatically removed.

1.6 Analytics & product usage

In the App Store / Play Store production builds we use Google Firebase Analytics to understand how the App is used. This is disabled in development. The events we record are limited to actions inside the App, such as: screen views, login and signup, profile updates, viewing or posting a game or tournament, sending a connection request, sending a DM (we record that a message was sent, never the content), submitting a rating, viewing the leaderboard, and submitting feedback. We attach your Cognito user ID so we can distinguish unique users; we do not use any cross-app or cross-website tracking SDK.

1.7 Information we do not collect

• We do not collect your phone number.
• We do not collect your date of birth or precise age.
• We do not collect or process payment card, bank, or other financial information. The App does not accept payments. Where a tournament has an entry fee, the host marks it as paid or unpaid manually outside the App.
• We do not collect your contacts, calendar, microphone, or health data.
• We do not record audio or take photos other than the avatar you choose to upload.
• We do not track your browsing history outside the App.

2. How We Use Your Information

• To create and operate your account and authenticate you on each visit.
• To show you matches, tournaments, players, and content relevant to your sports and skill level.
• To deliver chat messages, direct messages, ratings, and notifications.
• To run the live auction feature for tournaments that use it.
• To send transactional emails such as the welcome email, the email verification code, and password reset codes.
• To maintain the App's security, prevent abuse, and debug issues.
• To measure aggregate usage of the App so we can improve features.
• To respond to your support requests.

3. How We Share Your Information

We do not sell your personal information. We share it only with the service providers listed below, and only to the extent needed to operate the App.

We may also disclose information if required to do so by law, by a valid court order, or to protect the rights, property, or safety of Statewide Sports Hub, our users, or the public.

4. Information Other Users Can See

• Your name, avatar, gender, favorite sports, skill level, and aggregate statistics (games played, hosted, average rating, MVP count) are visible to other authenticated users on your public profile.
• Your match and tournament posts are visible in the in-app feed to other authenticated users.
• Reviews you write or receive are visible on the recipient's profile.
• Match chat messages are visible to the host and confirmed participants of that match.
• Direct messages are visible only to you and the connection you sent them to.
• Your email address and password are never shown to other users.

5. Data Storage and Security

All App data is stored in Amazon Web Services regions in the United States. Passwords are stored only by Amazon Cognito and are hashed using industry-standard algorithms. Network traffic between the App and our servers is encrypted with TLS. Push notification tokens and avatar URLs are stored alongside the rest of your profile in our database.

No system is perfectly secure. We work to protect your information using the security practices appropriate to the data we hold, but we cannot guarantee absolute security.

6. Data Retention & Account Deletion

You can delete your account at any time from inside the App: open Settings → Privacy & Data → Delete Account, then follow the prompts (you will be asked to type "DELETE" to confirm).

When you delete your account:

• Your Amazon Cognito login is permanently removed.
• Your profile is anonymized: your name is replaced with "Deleted User" and your email, avatar, gender, sports, and skill level are removed. The profile row is kept as an anchor so historical match references stay valid.
• Your participations, ratings (given and received), connections, registrations, notifications, notification settings, skill records, and statistics are permanently deleted.
• Match chat messages and direct messages you sent are kept (so the conversation remains readable for the other party) but the sender name and avatar are anonymized.
• Push notification tokens for your account are removed.

Push notification tokens that have not been refreshed for 90 days are automatically removed.

If you have additional deletion requests — for example, requesting that we also delete your previously uploaded avatar image from object storage, or requesting deletion of feedback messages you have submitted — please contact us at the address below.

7. Your Rights

7.1 All users

You can:

• Access and edit most of your profile data inside the App.
• Disable push notifications from Settings → Notifications or your device's system settings.
• Delete your account as described in section 6.
• Contact us with questions about your data.

7.2 California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect about you, the right to request deletion, the right to correct inaccurate information, and the right to opt out of "sale" or "sharing" of your personal information. We do not sell or share your personal information for cross-context behavioural advertising. To exercise any of these rights, contact us at the address in section 10.

7.3 Other US states

Residents of other US states with comprehensive privacy laws (such as Colorado, Connecticut, Utah, Virginia, and others) may have similar rights. You can exercise them by contacting us at the address in section 10.

8. Children's Privacy

The App is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, please contact us at the address below and we will delete the account and associated data.

Some tournaments use a "Kids" division for players under 13. This is a category for organizing youth tournaments organized by adult hosts; it is not a self-service signup path for children.

9. Changes to This Policy

We may update this policy from time to time as the App changes. When we make a material change we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App. Your continued use of the App after a change takes effect means you accept the updated policy.

10. Contact

For privacy questions, deletion requests, or to exercise any of the rights described above, contact us at:

Statewide Sports Hub
Email: statewidesportshub@gmail.com
Website: https://statewidesportshub.com