Privacy Policy

Introduction

Moneyball Pickleball Pro (the "App") is operated by Moneyball Brackets L.L.C. ("we," "our," or "us"). The App is a cross-platform tournament management application for pickleball events, available on iOS, Android, and Web. It supports single-day tournaments, multi-day events with divisions, progressive tour series with cumulative points and Grand Finals qualification, pool play scheduling, playoff bracket management, remote scorecards, sponsor tracking, payout management, and player communications.

We are committed to protecting your privacy and being transparent about the data we collect. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address — used for authentication, account recovery, and tournament notifications
• Password — securely hashed using bcrypt; we never store plaintext passwords
• Subscription tier — Player, Host, Operator, or Empire, tracked to gate features appropriately

Player Registration Information

When you register for a tournament (or are registered by an organizer), the following may be collected:

• Full name
• Email address
• Mobile phone number — used for optional match notifications via SMS when opted in
• Skill rating (DUPR) — used for balanced pool placement via snake-draft seeding; also used by organizers as a filter criterion when sending targeted mid-event messages to a specific skill bracket
• Gender — used for division placement and mixed doubles formatting; also used by organizers as a filter criterion when sending targeted mid-event messages to a specific gender group
• Age group / age range — used for age-group division placement and eligibility gating when configured by the organizer; also used by organizers as a filter criterion when sending targeted mid-event messages to a specific age bracket
• Partner preference — for fixed doubles events, whether you have a partner or are looking for one
• Payment status — paid, unpaid, or refunded, tracked per registration

Profile Information

When you create or edit your profile, you may optionally provide:

• Display name — shown to other users and tournament organizers
• Profile photo — uploaded and stored on our servers as a base64-encoded data URL in the database; displayed on your profile and player listings. Images are stored directly on the platform server and are not hosted via a third-party CDN.
• Phone number — used for optional SMS notifications when opted in
• DUPR account link — connected via DUPR Single Sign-On (SSO) for automatic rating lookup and display
• DUPR rating — singles and doubles ratings retrieved from DUPR and stored for pool seeding and profile display

Tournament & Event Data

When you create or manage events, we store:

• Tournament name, date, format, and rules configuration
• Event type (single-event, multi-day, or progressive tour stop)
• Venue name and address
• Contact email for the tournament organizer
• Match scores, pool standings, and playoff bracket results
• Player payment status (paid/unpaid/refunded tracking)
• Entry fee amounts and prize distribution settings
• Payout configuration — payout amounts per finishing place, tied to the tournament's prize pool
• Re-registration history — when a previously withdrawn player re-registers, we store previousWithdrawnAt (timestamp of their most recent withdrawal), previousHasPaid (whether they had paid at the time of withdrawal), and previousRefundStatus (whether a refund was issued). These fields are used solely to display re-registration history on the organizer's player card and are not shared with other players.
• Age group divisions — minimum and maximum age thresholds (ageMin / ageMax) configured per event for eligibility gating
• DUPR rating limits — minimum and maximum DUPR rating thresholds (duprMinRating / duprMaxRating) configured per event to restrict registration to a specific skill range
• Gender mode — whether the event accepts both genders (Coed), men only, women only, or a mixed open bracket (Co-Ed Singles); used to gate registration and pool placement
• Combined Team Age limits — minimum and maximum combined age thresholds (sum of both partners' ages) configured per doubles event for team eligibility gating
• Combined Team DUPR limits — minimum and maximum combined DUPR rating thresholds (sum of both partners' DUPR doubles ratings) configured per doubles event to restrict registration to a specific combined skill range
• Tournament logos and images (uploaded by the organizer)
• Event Manager assignments — email addresses of users invited as co-organizers, stored to grant management access to the tournament
• Sponsor information — sponsor names, logos, website links, tier placement, and contribution amounts added by the organizer during tournament creation or editing
• Court assignments — match-to-court mappings generated during pool play and playoffs
• Scorecard access links — unique URLs associated with each match for remote score entry via QR code
• Court / Facility Cost configuration — cost mode (none, fixed total, or per hour per court), fixed amount, hourly rate, cushion type (percentage buffer or additional hours), and cushion value stored per tournament for organizer financial planning and revenue tracking. These are estimates entered by the organizer; actual costs are never charged through the platform.

Progressive Tour Data

For progressive tour series, we additionally store:

• Tour name, season dates, and format groups
• Cumulative player points across tour stops
• Grand Finals qualification status and point thresholds
• Tour leaderboard standings per format group
• Tour-level branding (logo, banner) uploaded by the organizer
• Stop scheduling data — day number (eventDay) and computed date assigned per division within a stop, used to schedule multi-day stops and displayed to organizers in the tour management view
• Grand Finals invite records — invitation status (pending, accepted, declined, expired) per player per division, used to manage the championship invite flow, trigger roll-down, and notify players. Invite status is visible to the tour organizer and to the invited player.
• Wildcard buy-in data — when a player submits a wildcard buy-in application, we store: the division they applied for, their points deficit relative to the auto-qualify cutoff, the fee charged, the Stripe payment reference, the application status (pending/approved/rejected), and the timestamp of each state change. This data is accessible to the tour organizer and the applying player only. Wildcard fee payments are processed entirely by Stripe; we do not store card or bank details.
• Grand Finals roster — the list of players confirmed for the Grand Finals bracket, including their qualification method (auto-qualified, wildcard, manual invite, or LCQ), used for seeding and bracket generation.
• Last Chance Qualifier (LCQ) data — when a tour stop is designated as an LCQ event, we store: the isLcq flag on the event, the configured bid count (number of Grand Finals spots available through LCQ play), the LCQ prize purse amount, and the qualification outcomes for players who competed. LCQ data is visible to the tour organizer and to players registered for that event.

Leaderboard visibility: On tours configured as public, cumulative point totals and leaderboard rankings are visible to all registered tour participants and their invited guests. On private tours, leaderboard data is visible to the organizer and registered participants only. Leaderboard standings are used by the platform to determine Grand Finals invitation eligibility and to send invitations — this is an automated process based on the criteria the organizer configures.

Payment & Platform Fee Information

If an organizer has connected Stripe for online payments:

• Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers.
• We store a record that a payment was made (transaction reference, amount, and status) for the organizer's revenue tracking.
• For tournaments with online payments enabled, registration is held in a pending state until payment is completed. We periodically check payment status using your player ID and registered email address to confirm your registration once payment is received.
• Platform application fees — Moneyball Brackets L.L.C. collects a per-player platform fee (applied automatically via Stripe Connect) when online registration payments are processed. The fee amount is disclosed to organizers during event setup.
• Manual registration fees — A separate per-player platform fee is assessed on in-person or cash-based registrations and collected through a separate Stripe checkout flow initiated by the organizer after the event.
• Host credit purchases — Organizers on the Host plan may purchase event credits through Stripe. These purchases are recorded and tracked on the organizer's account.
• Stripe may collect additional information as described in their privacy policy.

Prize Payout Data

When an organizer uses the prize payout system, the following data is collected and stored per finishing place:

• Payout request method — the payment method the organizer selected (Venmo, Zelle, Cash App, Stripe, Cash, or Other)
• Request timestamp — when the payout request was initiated
• Player payment handle — the player's Venmo username, Zelle phone/email, or Cash App tag, provided voluntarily by the player when prompted. Payment handles are one-time-use and are never saved to the player's permanent profile. They are stored only on the specific payout record and used solely to route that single payment.
• Handle-provided timestamp — when the player submitted their handle
• Payment completion status — whether the organizer has marked the payout as paid
• Player confirmation — whether the player confirmed receipt of payment, and the timestamp of that confirmation
• Issue report — whether the player reported a problem with the payout, and the timestamp of that report

For non-Stripe payout methods, Moneyball Brackets L.L.C. facilitates the request-and-confirmation workflow only. The actual transfer of funds occurs outside the platform through third-party apps (Venmo, Zelle, Cash App). We do not process, hold, or have access to those fund transfers.

Organizer Configuration Data

Organizers may optionally provide the following in their Settings:

• Stripe Connect credentials — used to process player entry fee payments on behalf of the organizer
• Twilio credentials (Account SID, Auth Token, phone number) — used to send automated SMS match notifications via the organizer's Twilio account
• Notification message templates — customized text for match notifications, qualifier alerts, and reminder messages
• Scheduled reminder settings — advance notice timings and recipient filters for automated pre-tournament reminders

Device Information

• Device identifier — a randomly generated ID stored locally on your device, used for backward-compatible tournament ownership and cross-device sync
• Push notification token — if you enable push notifications, we store your device's push token (Expo Push Token or Web Push subscription) to deliver real-time alerts for court assignments, score updates, and tournament announcements
• Passkey credential data — if you choose to set up a passkey (Settings → Account Security → Passkeys), we store your passkey's public key and a platform-assigned credential ID on our servers so we can verify future sign-ins. Your private key is generated on your device and never leaves it — it lives in your device's secure enclave, iCloud Keychain (iOS), or Google Password Manager (Android). Moneyball Brackets L.L.C. never has access to your private key or your raw biometric data. The passkey record also stores the device/platform name (e.g., "iPhone 15") and the date it was created so you can identify and remove specific passkeys from Account Security settings.
• Biometric app lock — if you enable the Biometric App Lock in Account Security settings (separate from passkey login), Face ID or Touch ID is used to lock and unlock the mobile app. Biometric data is processed entirely by your device's operating system (Apple Face ID / Touch ID or Android BiometricPrompt). Moneyball Pickleball Pro never accesses, stores, or transmits your raw biometric data — the app only receives a pass or fail result from the OS.

Partner Matching Data

When you use the Find a Partner feature for Fixed Doubles events:

• Partner status — whether you have marked yourself as "Looking for a Partner" or "I Have a Partner," visible to other registered players in the same event
• Partner invitations — records of partner requests sent and received (including the target player's name and email or user ID), stored to facilitate team formation
• Player directory visibility — when an organizer searches the player directory to invite partners, your name, email, profile photo, and DUPR rating may be visible to that organizer
• Platform user search — when a player uses the partner search to find teammates, your display name, email, and DUPR rating may appear in search results if your account exists on the platform; this search is limited to players who meet the event's gender and age requirements

Optional Multi-Factor Authentication

If you enable MFA, we store a TOTP secret key associated with your account to generate time-based verification codes via authenticator apps such as Google Authenticator.

How We Use Your Information

Purpose	Data Used
Account authentication & session management	Email, password hash, session tokens
Tournament & event management	Event details, player registrations, match scores
Age-group division placement & eligibility	Age range, date of birth (when provided)
Payout tracking & prize distribution	Finishing place, payout configuration, payment status
Progressive tour tracking	Cumulative points, format groups, leaderboard standings
Grand Finals qualification & invitations	Tour leaderboard rankings, cumulative points, division, invite status (pending/accepted/declined/expired)
Wildcard buy-in processing & approval	Points deficit, wildcard fee, Stripe payment reference, application status, organizer approval decision
Match notifications (SMS, email)	Email address, mobile number (when opted in)
Targeted broadcast messaging (organizer-initiated via Message Players)	Player name, email address, push token (when opted in), mobile number (when opted in for SMS — Empire tier only, active events only)
Push notifications	Push token (Expo or Web Push), notification preferences
Scheduled tournament reminders	Email address, phone number (when opted in), reminder configuration
Registration confirmations & updates	Email address, player name
Event eligibility enforcement	Gender, age, DUPR rating, combined team age, combined team DUPR — validated at all registration entry points (self-registration, organizer in-app add, admin CSV import, and partner invitation acceptance) to block players or teams who do not meet the event's configured requirements
Balanced pool placement	Skill rating, DUPR rating, gender
Online payment processing	Stripe handles payment data; we store transaction references
Platform fee collection	Registration count, payment mode, Stripe Connect account
Host credit tracking	Purchase records, organizer account
Payment-gated registration confirmation	Player ID, registered email address, payment status
Revenue tracking & reporting	Entry fee amounts, payment status, platform fees collected
Court / facility cost estimation & financial reporting	Court cost mode, fixed amount, hourly rate, cushion type and value, number of courts, tournament format and scoring
Prize payout distribution & tracking	Finishing place, payout configuration, payment method, player-provided payment handle (one-time use), payment completion status, player confirmation status
Passkey authentication	Passkey public key and credential ID (stored server-side); private key and biometric data remain on device only
Biometric app lock	Pass/fail result from device OS only — no raw biometric data is accessed or stored by the platform
QR code remote scorecards	Match and score data
Live spectator results pages	Match scores, standings, bracket data
Distance-based tournament discovery	Device GPS coordinates (in-session only, never stored)
Cross-device sync	Device identifier, 6-digit pairing code
Calendar event generation	Tournament name, date, location
Partner matching	Player profile, skill rating, DUPR rating, partner preferences
Profile display	Name, profile photo, DUPR rating
Event Manager delegation	Email address of invited co-organizer
Sponsor display & tracking	Sponsor name, logo, tier, website, contribution amount
DUPR rating sync	DUPR account ID, singles and doubles ratings
Account deletion processing	Email address, user ID, deletion request token, request timestamp, scheduled deletion date, confirmation timestamp

Location Data

The App may request access to your device's location (GPS) solely to power the distance-based tournament filter in the Discover tab. This allows you to find events within a chosen radius of your current location (e.g., 25 miles, 150 miles, or a custom distance up to 300 miles).

• Location access is requested only when you actively select a distance filter (anything other than "Everywhere") in the Discover tab.
• Your coordinates are used in real time to calculate distances to events and are never stored on our servers.
• You can use all other features of the App — including registration, match scoring, and tournament management — without ever granting location permission.
• You can revoke location permission at any time through your device's system settings.

Data We Do NOT Collect

• We do not access your contacts or microphone. Camera and photo library access is requested only when you choose to upload a profile photo or tournament logo, and is never accessed without your explicit action.
• We do not use advertising trackers or third-party analytics SDKs
• We do not sell, rent, or share your personal data with third parties for marketing
• We do not store credit card numbers or bank account details — all payment processing is handled by Stripe
• We do not store your GPS coordinates — location data is used only in-session to calculate event distances and is never persisted

Third-Party Services

The App integrates with the following third-party services:

• Stripe — Moneyball Brackets L.L.C. uses Stripe Connect to process entry fee payments on behalf of tournament organizers. Stripe handles all sensitive payment data (card numbers, bank details) according to their privacy policy. We only receive transaction confirmation and amounts for revenue tracking. Platform fees are collected via Stripe's application fee mechanism.
• Twilio — When an organizer configures Twilio for automated SMS, we use the Twilio API to send match notifications and reminders to players' phone numbers. Twilio processes messages according to their privacy policy. Twilio credentials are provided by the organizer and stored securely. Moneyball Brackets L.L.C. also operates a shared Twilio toll-free number for platform-level notifications to opted-in users.
• Resend — We use Resend to send transactional emails such as registration confirmations, match notifications, tournament updates, partner invitation alerts, and prize payout notifications. Prize payout emails are sent to all registered players with an email address when an organizer initiates a payout — this ensures winners are reached even if they do not have the app installed or push notifications enabled. Only your email address and message content are shared with Resend for delivery purposes.
• Stripe Subscriptions — Moneyball Brackets L.L.C. uses Stripe to manage optional subscription plans (Player, Host, Operator, Empire). Subscription management is handled through the web dashboard. Stripe processes subscription data according to their privacy policy.
• DUPR — Players may optionally link their DUPR account via DUPR SSO to automatically retrieve and display their singles and doubles ratings. DUPR data is used for pool seeding and profile display. DUPR's use of your data is governed by their own privacy policy.
• Expo Push Notifications — We use Expo's push notification infrastructure to deliver real-time court assignment, score update, and tournament announcement alerts to your device. Push tokens are stored securely and used only to route notifications to your device.

SMS Communications

Moneyball Brackets L.L.C. may send SMS text messages to users and tournament players who have explicitly opted in. SMS consent is collected separately from other notification preferences and is never a condition of using the App or registering for a tournament. Full details and opt-in instructions are available at moneyballpickleball.moneyballbrackets.com/sms-opt-in.

Types of SMS Messages

• Match notifications (upcoming matches, score updates, court assignments)
• Tournament schedule changes and announcements
• Playoff advancement and elimination alerts
• Pre-tournament reminders (when scheduled by the organizer)
• Organizer alerts (disputes, forfeits, automation updates) if the organizer has opted in
• Organizer-initiated targeted broadcasts — custom messages sent by an Empire-tier organizer to a selected audience (all players, a division, individuals, or players assigned to a specific day) during an active event (pool play or playoffs). These messages are only delivered to players who have explicitly opted in to SMS.

Opt-In Disclosure Language

Wherever SMS consent is collected, the following disclosure is presented:

"By opting in, you consent to receive SMS text messages from Moneyball Pickleball Pro (Moneyball Brackets L.L.C.) for match updates, schedule changes, and tournament alerts. Msg frequency varies. Msg & data rates may apply. Reply STOP to unsubscribe or HELP for help. Consent is not a condition of purchase or use of the app."

How Consent Is Obtained

SMS opt-in consent is collected as a standalone, separate action at each of the following touchpoints. It is never bundled with or required by any other agreement:

• Keyword opt-in (SMS) — Texting JOIN (or YES, START, SUBSCRIBE) to the Moneyball Pickleball Pro SMS number opts in the phone number and links it to the associated account. A confirmation reply is sent immediately.
• In-app profile toggle — The SMS Notifications toggle in account profile settings is off by default. Enabling it opts in the account, independent of any registration.
• Account registration checkbox — When creating a new account and providing a phone number, an optional, unchecked-by-default checkbox with the full opt-in disclosure is presented.
• Public tournament signup — On the public registration page, an optional, unchecked-by-default checkbox appears when the player provides a phone number.
• Mobile app registration — When registering for a tournament through the mobile app, the same optional opt-in checkbox is presented alongside the phone number field.

Consent is stored on the user account and/or the individual player registration record. Each consent event is recorded independently.

How to Opt Out

• Reply STOP to any SMS message to immediately unsubscribe (also STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT)
• Reply HELP to any SMS message for assistance and support information
• Toggle the SMS opt-in setting off in your profile at any time — the change takes effect immediately
• Uncheck the SMS opt-in checkbox on the tournament signup page when registering for a new event
• Visit /sms-opt-in for full opt-in and opt-out details
• Contact us at the email below for help with opt-out

Message Frequency & Data Rates

Message frequency varies based on tournament activity (typically a few messages per tournament day). Message and data rates may apply depending on your mobile carrier and plan. Moneyball Brackets L.L.C. does not charge for sending SMS messages, but your carrier may.

Consent Is Not Required

SMS opt-in is not a condition of purchasing any goods or services, registering for a tournament, or using the App. You may use all features of the App without opting in to SMS notifications. The opt-in checkbox is always unchecked by default and must be actively selected by the user. Keyword opt-in (texting JOIN) is always voluntary.

Push Notifications

The App supports push notifications on iOS, Android, and Web. If you grant notification permission, we store your device's push token to deliver real-time alerts including court assignments, score updates, match start reminders, and tournament announcements.

• Push notification permission is requested in the App and is never granted without your explicit action.
• You can disable push notifications at any time through your device's system settings or within the App's notification preferences.
• Push tokens are stored securely and used only to route notifications to your device. They are never shared with third parties for marketing.

Data Storage & Security

• All data is stored in a secure PostgreSQL database managed by Moneyball Brackets L.L.C.
• Passwords are hashed using the bcrypt algorithm and are never stored in plaintext
• Session tokens are unique, randomly generated, and expire automatically
• We enforce single active session per account for security
• All network communication uses HTTPS encryption
• MFA secrets are stored securely and used only for TOTP verification
• Stripe payment credentials are managed through Stripe Connect — we do not store raw payment credentials
• Twilio credentials provided by organizers are stored server-side and used only for SMS delivery
• Profile photos and tournament images are stored on our servers with access-controlled URLs

Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Tournament data, tour standings, payout records, and match history are retained for historical records, leaderboards, and statistics.

Account Deletion: You may request deletion of your account and personal data at any time from the Settings screen in the app or via /data-deletion. When a request is submitted, your account is queued for a 14-day review period. On day 14 you will receive a confirmation email — deletion only executes after you click the confirmation button in that email. You may cancel the request at any time before confirming by contacting support or replying to the email. Upon execution, your user account, credentials, profile photo, push notification tokens, passkey credential records (public keys and credential IDs), MFA secrets, and device authentication records are permanently deleted. Player registrations are anonymized (the player record is unlinked from the account but tournament history is retained for organizer records). Deletion requests and their timestamps are retained for a brief period solely for legal compliance and audit purposes.

Players who withdraw from a tournament are moved to a "withdrawn" status but their registration data is retained for the organizer's refund tracking and historical records until the organizer or player requests deletion.

Public Information

Certain information is made publicly visible through the App's features:

• Spectator pages — Live results, match scores, pool standings, and playoff brackets are visible to anyone with the spectator link. Player first and last names are shown on these pages. Sponsor names and logos are also displayed.
• Public signup pages — Tournament details, registration counts, event information, and sponsor logos are visible to anyone with the signup link.
• Discover listings — Tournament name, date, location, format, entry fee, and associated tour name are visible to all users browsing the Discover tab.
• Remote scorecards — Match details and player names are visible to anyone with the scorecard link or QR code.
• Tour leaderboards — Player names, cumulative points, and standings within format groups are visible on tour detail pages.
• Player profiles — Your display name, profile photo, and DUPR rating are visible to other registered users when browsing player directories or partner matching.

Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and personal data via the Settings screen in the app or at /data-deletion. Requests are queued for 14 days; deletion is finalized only after you confirm via a second email sent on day 14. You may cancel at any time before confirming.
• Withdraw from tournaments — Self-service withdrawal is available via your unique registration link
• Disable MFA — You can disable multi-factor authentication from the app settings
• Manage passkeys — You can add new passkeys or remove existing ones (including from specific devices) at any time from Settings → Account Security → Passkeys. Passkey credential records are deleted from our servers when you remove them individually or when you delete your account.
• SMS opt-out — Reply STOP to any message or toggle off SMS in your profile at any time
• Push notification opt-out — Disable notifications through your device settings or within the App at any time
• Payment refunds — Refund eligibility is tracked based on the tournament's refund deadline. Contact the tournament organizer for refund processing.

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

Changes to This Policy

Moneyball Brackets L.L.C. may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.