Privacy Policy

Privacy Policy for UltiLines

Last Updated: January 15, 2025

Introduction

UltiLines ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the UltiLines mobile application (the "App").

Information We Collect

Account Information

When you sign in to UltiLines, we collect:

  • Email address (via Google or Apple sign-in)
  • Name (via Google or Apple sign-in)
  • User ID (automatically generated)

App Usage Data

The App stores the following data to provide its core functionality:

  • Team rosters: Player names, tags, attributes, and experience levels
  • Tournament information: Tournament names, dates, and locations
  • Game data: Game scores, points, and statistics
  • Line compositions: Player groupings and line templates
  • User preferences: App settings and default configurations

All of this data is:

  • Stored locally on your device in an encrypted SQLite database
  • Synced to our secure cloud infrastructure (Supabase) for backup and multi-device access
  • Associated with your user account to ensure privacy

Information We Do NOT Collect

We do not collect:

  • Device location or GPS data
  • Contact lists or phonebook data
  • Photos, camera, or microphone data
  • Health or fitness data
  • Financial or payment information
  • Advertising identifiers
  • Analytics or tracking data beyond basic authentication

How We Use Your Information

We use your information solely to:

  1. Authenticate your account using Google or Apple OAuth
  2. Sync your data across your devices
  3. Provide app functionality including roster management, game tracking, and statistics
  4. Backup your data to prevent loss
  5. Provide customer support if you contact us

We do NOT:

  • Sell your data to third parties
  • Use your data for advertising
  • Share your data with anyone except as required by law
  • Track your behavior across other apps or websites

Data Storage and Security

Local Storage

  • All data is stored locally on your device in an encrypted SQLite database
  • Data persists on your device even when offline

Cloud Storage

  • Data is synchronized to Supabase (our cloud backend provider)
  • All data transmitted is encrypted using HTTPS/TLS
  • Cloud data is stored with industry-standard encryption at rest
  • Access to your data is protected by Row Level Security (RLS) policies - only you can access your data

Authentication

  • We use OAuth 2.0 for secure authentication via Google and Apple
  • We do not store or have access to your Google/Apple passwords
  • Session tokens are stored securely on your device

Data Sharing and Third Parties

Third-Party Services

We use the following third-party services to operate the App:

  1. Supabase (Database and Authentication)

    • Purpose: Cloud database, authentication, and data sync
    • Data shared: Email, name, user ID, and all app data (rosters, games, stats)
    • Privacy Policy: https://supabase.com/privacy

  2. Google OAuth (Authentication - if you choose to sign in with Google)

    • Purpose: Secure authentication
    • Data shared: Email and name
    • Privacy Policy: https://policies.google.com/privacy

  3. Apple Sign In (Authentication - if you choose to sign in with Apple)

    • Purpose: Secure authentication
    • Data shared: Email and name (or relay email if you choose to hide your email)
    • Privacy Policy: https://www.apple.com/legal/privacy/

We do NOT share your data with any other third parties for marketing, advertising, or analytics purposes.

Your Data Rights

Access and Export

  • You can export your game data as CSV files directly from the App
  • You can request a complete copy of your data by contacting us

Deletion

You have the right to delete your data at any time:

  • Sign out: Clears all local data from your device
  • Account deletion: Contact us to permanently delete your account and all associated cloud data

Portability

  • You can export your game statistics and rosters as CSV files
  • Data is stored in open formats for easy migration

Data Retention

  • Active accounts: We retain your data as long as your account is active
  • Inactive accounts: We may delete data from accounts that have been inactive for more than 2 years
  • Deleted accounts: Data is permanently deleted within 30 days of account deletion request

Children's Privacy

UltiLines is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Posting a notice in the App (for material changes)

Your continued use of the App after changes constitutes acceptance of the updated policy.

International Data Transfers

Your data may be stored and processed in any country where Supabase operates data centers. By using the App, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection rules.

Your Consent

By using UltiLines, you consent to this Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us:

Email: support@ultilines.com Website: https://ultilines.com