Playbook ONE Privacy Policy

Effective Date: January 1, 2026 Operated by: Blue Liquid Tech LLC ("Blue Liquid Tech," "we," "us," "our") Contact: hello@playbookone.app

1. Who We Are and What This Covers

Blue Liquid Tech LLC operates Playbook ONE, a flag football league management and statistics platform consisting of:

• The League Admin Dashboard (web, for league staff)
• The League Owner Portal (web, access-code authenticated, for league owners/organizers)
• The Player App (iOS/Android/web)
• The Scorekeeper App (iOS/Android/web)

This Privacy Policy explains what personal information we collect across these products, why we collect it, who we share it with, and the choices you have. It applies to anyone who uses Playbook ONE: players, parents/guardians registering a player, scorekeepers, league administrators, and league owners.

It should be read together with our Terms of Service, User Agreement, and Data Usage Disclosure.

2. Information We Collect

2.1 Account & Identity Information

Name, email address, and password (stored in hashed form by our authentication provider, Supabase - we never see or store your plaintext password). Your account role (Player, Scorekeeper, League Admin, or League Owner) and which leagues/seasons/teams you're associated with.

2.2 Player & Roster Information

First and last name, email, gender (used only where a league's scoring format applies gender-differential rules), playing position, jersey number, team assignment, and league/season/division membership. This information is typically entered by a league owner, league admin, or the player themselves during registration.

2.3 Game & Performance Data

Live game events (plays, scores, penalties), aggregated stats at the per-game, per-season, and career level, and performance scores calculated from your league's scoring rules. This is the core statistical record the platform exists to maintain.

2.4 Payment Information

When a league charges registration or season fees through Playbook ONE, payment is processed by Stripe. We do not receive or store your full card number, CVV, or bank account number - Stripe handles that directly. We retain only transaction-level records we need for support and accounting (e.g., amount, date, status, and a payment reference ID).

2.5 Video

Some leagues upload game footage, which is stored and streamed through Cloudflare Stream. Game video may contain the likeness of players who appear in the footage.

2.6 Voice Input (Scorekeeper App)

The Scorekeeper App has a hold-to-speak feature for live stat entry. Speech is converted to text on your device using your phone's built-in speech recognition. We do not record or retain raw audio. The resulting text transcript is sent to our AI provider, Anthropic (Claude), which parses it into a structured play (e.g., "12-yard reception, Jordan Lee"). That transcript, the AI's interpretation, and the scorekeeper's confirm/edit/reject decision are logged in an audit trail (voice_play_audit_log) tied to the game, so any play can be reviewed and corrected later. See Data Usage Disclosure Section 4 for detail.

2.7 Communications

Emails we send you (registration confirmations, correction-request updates, league notices) and any correspondence you send to us.

2.8 Device & Usage Data

Standard technical data generated by using the apps - device type, operating system, app version, crash logs, and basic usage/log data from our hosting (Railway) and mobile build/update infrastructure (Expo/EAS). We do not use this data for advertising.

2.9 What We Don't Collect

We do not collect government ID numbers, Social Security numbers, precise geolocation, biometric identifiers (no facial recognition or voiceprint matching - see Section 7), or health information, and we don't ask for a home address or phone number as part of standard registration.

3. How We Use Information

• Operate the platform: authenticate accounts, run games, calculate and display stats, run league/season administration
• Process payments for league/season registration (via Stripe)
• Power the scorekeeper voice-entry feature (via Anthropic's API, as described above)
• Send service communications (registration confirmations, correction-request status, important account or league notices)
• Investigate and resolve stat correction requests
• Maintain security, prevent abuse, and debug the platform
• Comply with legal obligations

We do not sell personal information, and we do not use player or game data to serve targeted advertising.

4. Who We Share Information With

We share information with the service providers ("subprocessors") who help us run Playbook ONE, and only for the purpose of providing the service:

We also share information within a league as necessary for the platform to function - e.g., a league owner and their admins/scorekeepers can see roster and stat data for their own league, and other players on a team may see teammates' stats and roster info as part of normal use.

We may disclose information if required by law, to protect the rights and safety of Blue Liquid Tech or our users, or in connection with a merger, acquisition, or sale of assets (with notice to affected users).

5. Children's Privacy (COPPA)

Playbook ONE is used by leagues that include players under 13. We take the following approach:

• Playbook ONE does not knowingly collect personal information directly from a child under 13. Player accounts and roster entries for minors are created and managed by the league owner/administrator or by a parent/guardian on the child's behalf - not by the child interacting with us directly.
• League owners and organizers are responsible for obtaining verifiable parental/guardian consent before submitting a minor's information to the platform, as a condition of using Playbook ONE (see the forthcoming League/Organization Agreement).
• The information collected for a minor is limited to what's needed for league operation: name, jersey number, team, and game stats (see Section 2.2-2.3). We do not knowingly enable behavioral advertising to, or ad-targeting of, any user, and especially not a child.
• A parent or guardian may review, correct, or request deletion of their child's information at any time by contacting hello@playbookone.app or their league owner. We will verify the request before acting on it.
• If we learn that a child's personal information was collected without appropriate consent, we will take steps to delete it.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to certain processing. Regardless of location, you can:

• Correct your info: Update your profile in the app, or ask your league admin/owner to correct roster data.
• Dispute a stat: Submit a stat correction request through the app; these are tracked and resolved by league staff.
• Request deletion: Email hello@playbookone.app. Note that deleting a player record that's still linked to a login account, or that has associated game history, may require us to preserve minimal records for league integrity (e.g., we may anonymize rather than fully erase historical game stats tied to completed games).
• Ask what we hold: Email us and we'll provide a summary of the personal information associated with your account.

7. Illinois Biometric Privacy (BIPA) Notice

Because Blue Liquid Tech LLC is based in Illinois, we want to be explicit: Playbook ONE does not collect, store, or use biometric identifiers or biometric information, as those terms are defined under the Illinois Biometric Information Privacy Act. Specifically:

• We do not perform facial recognition on uploaded video.
• We do not create or store voiceprints. Voice input is converted to text on-device; we do not retain the underlying audio.

If this changes in the future (e.g., a facial-recognition highlight-reel feature), we will update this policy and obtain any legally required consent before doing so.

8. Data Retention

We retain personal information for as long as your account or your league's data is active on the platform, plus a reasonable period after for legal, accounting, and league-history purposes (career stats, by design, persist across seasons). If you close your account, we will delete or anonymize personal information that isn't needed for these purposes, consistent with Section 6.

9. Data Security

We rely on industry-standard practices from our infrastructure providers (role-based access control and row-level security in Supabase, encrypted connections, tokenized payment handling through Stripe) and restrict internal access to personal data to what's needed to operate the platform. No system is perfectly secure, and we can't guarantee absolute security.

10. Cookies & Similar Technologies

The web dashboard and owner portal use session cookies/local storage necessary to keep you logged in. We do not use third-party advertising or tracking cookies.

11. International Users

Playbook ONE and its infrastructure are based in the United States. If you access the platform from outside the U.S., your information will be processed in the U.S.

12. Changes to This Policy

We may update this policy as the platform evolves. We'll update the effective date above, and for material changes, we'll provide reasonable notice (e.g., in-app notice or email) before the change takes effect.

13. Contact Us

Questions, requests, or concerns about this policy: hello@playbookone.app

Blue Liquid Tech LLC - governed by the laws of the State of Illinois.