This policy explains what personal information Buddy Pools ("we", "us") collects through buddypools.com and the Buddy Pools app at app.buddypools.com, why, and what you can do about it. Questions: support@buddypools.com.
What we collect
Your account. Your first and last name, email address, time zone and settings, such as whether you get pick reminders. Your password is stored only as a secure one-way hash, never as the password itself. If you turn on two-factor sign-in, we store what is needed to check your codes.
Your pools. The pools you create or join, your entries and their nicknames, your picks, your results, and what organizers record, such as whether an entry fee is marked paid.
A record of changes. Every change in the app (joining a pool, making or changing a pick, renaming an entry, marking a fee paid) is recorded with who made it, when, and from which IP address. This keeps pools fair and settles disagreements.
Technical information. Our servers log requests, including IP addresses and browser details, to keep the service secure and working.
Emails. We keep a record of the emails we send you, such as invites, reminders and pool updates.
Payments (once charging begins). Payments are handled by our payment provider. Card details go straight to them; we never see or store card numbers. We keep a record of what was paid, for which pool, and the provider's reference.
What we don't do
We don't sell or rent your personal information, we don't show ads, and we don't use advertising or analytics trackers.
How we use it
- to run the service: your account, your pools, picks, results and standings;
- to keep accounts secure, including sign-in checks and two-factor sign-in;
- to send emails you need, such as account emails, invites, pick reminders and pool updates (you can turn pick reminders off in My account);
- to prevent abuse and fix problems.
Who can see what
- Other members of a pool see your name (first name and last initial), your entry nicknames, your standing, and your picks once they lock. Picks stay hidden until they lock.
- Organizers of a pool you join see what they need to run it, such as your entries and whether your fee is marked paid.
- Our site administrators can see account and pool information to support the service, and can view the app as a user to help with a problem. Every such action is recorded.
Service providers
We use a hosting provider in the United States, an email delivery provider, and, once charging begins, a payment provider. They handle information only to provide their service to us. Because our servers are in the United States, your information is stored there and may be subject to United States law. Scores come from sports data providers; we send them no personal information.
Cookies
The app uses only the cookies it needs to work: one that keeps you signed in, security cookies that protect forms, and one that remembers a trusted device for two-factor sign-in. We don't use advertising or analytics cookies, on the app or on buddypools.com.
How long we keep it
We keep your account information while your account is open. If you ask us to close your account, we deactivate it. Your name stays in the history of pools you played in, because other members rely on those pools' results and records. Server logs are kept for a limited time for security. Backups are overwritten on a regular cycle.
Your choices and rights
You can update your name, email, time zone and reminder settings in My account. You can ask us what personal information we hold about you, ask us to correct it, or ask us to close your account, by emailing support@buddypools.com. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Security
We protect your information with encrypted connections (HTTPS), hashed passwords, optional two-factor sign-in (required for site administrators) and restricted access to our servers and database. No system is perfectly secure, but we work to keep yours safe.
Children
Buddy Pools is for people aged 18 or older. We don't knowingly collect information from anyone younger.
Changes to this policy
If we change this policy in a way that matters, we will tell you by email or on the site before it takes effect.