Privacy Policy

StatShift ("we," "us," or "our") operates the StatShift mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create a StatShift account, we collect:

• Email address — used for authentication and communication
• Phone number — if used for authentication (optional)
• Display name — shown to other users in your league
• Avatar/profile photo — optional
• Date of birth — used for age verification and league eligibility
• Bio — optional, user-provided

We use a third-party authentication service to manage login credentials. We do not store your password directly.

Profile Information

• Height and weight — used for player profiles (optional)
• Position and jersey number — used for roster identification
• Privacy mode preference — controls visibility of your profile

League, Team, and Game Data

• League information (name, settings, schedules)
• Team information (name, roster, jersey numbers)
• Game data (scores, events, statistics)
• Player statistics (points, rebounds, assists, steals, blocks, turnovers, and other basketball metrics)
• Draft selections, rankings, and season records
• Dispute records and resolutions

Video and Media

• Game videos uploaded by league administrators or coaches are stored on secure cloud infrastructure
• Videos are processed by our AI system to detect game events and generate statistics
• AI-generated highlight clips may be created from uploaded footage
• Player photos and roster images uploaded for identification purposes
• All video and media access is controlled through secure, time-limited URLs

Device and Notification Data

• Device tokens used for push notification delivery
• Device type and platform (iOS or Android)

Billing and Transaction Information

If you subscribe to a paid plan, billing is processed by Stripe and/or the Apple App Store or Google Play Store. We do not store credit card numbers, CVVs, or full payment card details. All payment processing is handled in accordance with PCI-DSS standards. We may store transaction records, subscription status, and billing history for account management and legal compliance.

Communications

• Messages and announcements sent through the Service
• Support requests and correspondence

Diagnostics and Usage Data

• Error reports and performance metrics collected for crash reporting and service reliability
• General usage patterns and feature interaction data to improve the Service

2. How We Use Your Information

• Provide and operate the Service — manage leagues, teams, games, and statistics
• Process game videos — detect events, generate statistics, and create highlight clips using automated analysis
• Send notifications — game updates, league announcements, and stat corrections
• Process payments — manage subscriptions and tier-based feature access
• Monitor and improve reliability — track errors, diagnose issues, and improve performance
• Communicate with you — account-related emails and service updates
• Enforce our Terms of Service — detect and prevent abuse, fraud, or manipulation

We do not sell your personal information to third parties.

3. Categories of Third-Party Service Providers

We share data with the following categories of third-party service providers as necessary to operate the Service:

• Authentication services — to manage user login and identity verification
• Cloud storage and hosting providers — to store application data, video footage, and deliver content
• Payment processors — to process subscription payments and manage billing (Stripe; see Stripe's Privacy Policy)
• Push notification services — to deliver notifications to your device
• Error monitoring services — to collect crash reports and performance data for reliability
• Analytics providers — to understand usage patterns and improve the Service

These providers access only the data necessary to perform their functions and are contractually obligated to protect your information.

4. Data Retention

• Account data is retained for as long as your account is active
• Game data and statistics are retained while the associated league is active, plus 12 months after league closure
• Video footage is retained according to your subscription tier and league settings; deleted videos are purged within 30 days
• Billing records are retained as required by applicable tax and financial regulations
• Diagnostic data is retained for up to 90 days
• Support correspondence is retained for up to 24 months after resolution

5. Account Deletion

You may delete your account at any time through the "Delete Account" option in the app's Settings screen, or by emailing support@statshiftai.com.

When you delete your account:

• Your profile information (display name, email, avatar, bio) is permanently removed or anonymized
• Your league memberships are deactivated
• Game event records you participated in are preserved in anonymized form (aggregate statistical records that do not identify you personally)
• Highlight clips associated with your account are removed from your profile but may persist in league archives in anonymized form
• Any active paid subscription is canceled immediately

Account deletion is permanent and cannot be undone. We will process deletion requests within 30 days. If you wish to use StatShift again after deletion, you will need to create a new account.

6. Your Rights

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete personal information
• Deletion — request that we delete your personal information, subject to the retention requirements described above
• Data export — request an export of your personal data in a machine-readable format
• Opt out of communications — disable push notifications through your device settings; unsubscribe from non-essential emails using the link provided in each email

To exercise any of these rights, contact us at support@statshiftai.com. We will respond to verified requests within 30 days.

California Residents (CCPA/CalOPPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA):

• Right to know — You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to delete — You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale — We do not sell your personal information.
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights.

Do Not Track: We do not currently respond to "Do Not Track" browser signals. There is no uniform industry standard for recognizing or honoring DNT signals.

To submit a CCPA request, email support@statshiftai.com with the subject line "CCPA Request." We will verify your identity before fulfilling your request.

European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing — We process your personal data based on: (a) your consent, (b) the necessity to perform our contract with you, (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.
• Data portability — You may request your personal data in a structured, commonly used, machine-readable format.
• Right to restrict processing — You may request that we restrict the processing of your personal data in certain circumstances.
• Right to object — You may object to the processing of your personal data based on our legitimate interests.
• Supervisory authority — You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

To exercise any GDPR rights, contact support@statshiftai.com.

7. Children's Privacy

StatShift is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@statshiftai.com.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls and authentication for all systems, regular security reviews and monitoring, and secure, time-limited access to stored media.

No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app or email and update the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights:

StatShift
Email: support@statshiftai.com

This Privacy Policy is governed by the laws of the State of Florida, United States.