Privacy Policy

Welcome to SquadSlips. SquadSlips is operated by SquadSlips LLC, a Delaware limited liability company ("SquadSlips," "we," "us," or "our"). SquadSlips is a social companion app for sports fans: you track simulated picks, share them with your squad, follow friends, and compare live odds. Running a social app means we store the account and content data needed to make those features work, and this policy describes exactly what that is. We do not sell your data, we do not show ads, we do not use advertising trackers, and we collect no more than the service needs.

1. Age Requirements

SquadSlips is an informational and social tool designed for mature audiences. You must be at least 18 years of age to use this application and view the odds provided. When you create your account you confirm that you are 18 or older, and we record the date and time of that confirmation. We do not knowingly collect any information from individuals under the age of 18; if we learn that an account belongs to someone under 18, we will delete it. Please note that while 18 is the minimum age to use SquadSlips, you are solely responsible for complying with the legal sports betting age requirements of your specific jurisdiction, which is typically 21 in the United States.

2. Your Account and the Information You Provide

SquadSlips accounts are created and signed in with a verified mobile phone number (see Section 6). We do not ask for your real name or an email address. The following information is stored with your account on our servers:

• Phone number: your verified mobile number is your account identifier. You can also sign in by entering your @username, which we resolve to your account on our servers.
• Profile: your unique @username, an optional display name of your choosing, an optional profile photo and cover photo, and your betting unit size (the dollars-per-unit value used to display simulated stakes).
• Your picks: the simulated bets you track, including selections, teams and players, lines, odds, the sportsbook you chose, your simulated stake in units, timestamps, and graded outcomes. Your pick history is stored on our servers so it syncs across sign-ins and powers your record, your squads' standings, and the feed.
• Squads and social activity: squads you create or join, squad names and photos, posts and picks you share to a squad board, captions on picks you share to the feed, comments, emoji reactions, follows, join requests, users you block, and reports you submit about other users' content.
• Preferences: notification preferences such as muted squads and any alerting thresholds you configure.
• Consent records: the date and time you confirmed you are 18 or older, accepted the Terms of Use (and which version), and agreed to our content standards.

3. Photos and Other Content You Upload

You can upload images in several places: your profile photo, your cover photo, a squad's photo, a squad's invite background, and image posts on a squad board. The app asks for camera or photo library permission only when you choose to add a photo, and uses the camera or library for nothing else. Before an image is stored, we strip hidden metadata embedded in the file (such as EXIF data, which can include the location where a photo was taken). Every image is checked by the child-safety scanning described in Section 10, and profile, cover, squad, and invite images are additionally screened for explicit content as described in Section 11. Uploaded images are stored on our servers and served from our content delivery network; image web addresses are long and unguessable, but anyone who has an image's exact address can view it. When an image is deleted, copies held briefly in delivery-network caches expire automatically shortly afterward.

4. Information Collected Automatically

• Device information: when you sign in, the app sends your device's model name (for example "iPhone"), its iOS version, and the app version. We use this for compatibility and support.
• Session data: signing in creates a sign-in token for your device. We store only a cryptographic hash of that token on our servers, together with when your device last contacted us. One device can be signed in per account: signing in on a new device automatically signs out the previous one. Tokens remain valid until you sign out, sign in elsewhere, or delete your account.
• Push notification tokens: if you enable notifications, we store the Apple push token for your device and, for live score tracking on your Lock Screen, Live Activity tokens (per-game update tokens and a start token). These are delivery addresses for notifications, not tracking identifiers.
• IP addresses: our infrastructure provider (Cloudflare) processes every request at the network edge and may log IP addresses for security purposes such as DDoS protection. In our own systems, sign-in endpoints use a hashed, truncated form of your IP for rate limiting, and we do not keep IP addresses with your account data. The one exception is child-safety incidents, described in Section 10.
• Operational analytics: see Section 9.

5. Information That Stays on Your Device

• Your selected US state: during onboarding you pick the state used to filter which sportsbooks you see. This choice is stored only on your device and is never sent to our servers.
• Local caches: the app keeps a local copy of your pick history and home screen data so it opens instantly and works with a weak connection. The server copy described in Section 2 is the source of truth.
• Your sign-in token: stored in the iOS Keychain on your device only. It is not synced to iCloud and is not included in device backups.

6. Phone Number and SMS Verification

• Phone number collection: when you sign in to SquadSlips, you provide your mobile phone number. We use it to confirm that you control that number and to authenticate you on later sign-ins and when you switch devices.
• One-time verification codes: we send a one-time six-digit verification code to your number by SMS, which you enter in the app to complete sign-in. These codes are short-lived and single-use, and are not retained once they expire or are used.
• SMS provider: verification messages are sent through Twilio, our SMS verification service provider, acting on our behalf. Your phone number is disclosed to Twilio only to deliver and verify these codes.
• How your number is used: your phone number is used to verify your identity and secure your SquadSlips account. We do not use it for advertising or marketing, we do not sell it, and we do not share it with anyone other than our SMS provider, except where the law requires a report as described in Section 10.
• Message frequency and rates: verification messages are transactional and are sent only when you request a sign-in code, typically one message per sign-in attempt. Message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out and help: standard carrier keywords are supported: reply STOP to opt out of further messages, or HELP for help. Because the verification code is required to sign in, opting out will prevent you from signing in. You can also reach us at luke@squadslipsapp.com.
• Retention: your verified phone number is retained while your SquadSlips account remains active so you can sign in again and recover access. It is removed from your account record when you delete your account (Section 13).
• Consent: by entering your mobile phone number and requesting a verification code, you consent to receive that one-time verification SMS from SquadSlips.

7. How We Use Your Information

We use the information above to operate SquadSlips: syncing your picks across sign-ins, grading picks against final scores and results, computing your record and your squads' standings and streaks, assembling squad boards and the social feed, delivering the notifications you enable (game starts, pick results, squad and social activity, Lock Screen live scores), moderating content, preventing abuse (rate limiting, spam and fraud prevention), and keeping the service reliable. We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.

8. Who Can See Your Information

SquadSlips is a social product, and the point of it is sharing your picks with people you choose. Here is exactly who can see what:

• Your squads: members of a squad you join can see your profile, the picks and posts you share to that squad's board (including your simulated stake and results in units), and squad standings and leaderboards computed from those picks.
• Your followers and the feed: when you share a pick to the feed, you choose its visibility. "Followers" picks are visible to your followers; "Public" picks can be seen by any signed-in SquadSlips user. Feed posts show your username, display name, profile photo, your caption, and the pick including its stake and result in units, along with comments and reactions.
• Discovery: any signed-in user can find you by searching your @username, and can view your profile (username, display name, profile and cover photo, follower and following counts). Users you have blocked, or who have blocked you, cannot find you in search or see your content.
• Public share links: if you share a pick outside the app, we create a web page at an unguessable link. That page shows the pick's selections, logged odds, and current odds across sportsbooks, but it does not show your name, username, photo, or stake. Share links expire automatically after about 90 days, and you can revoke a link at any time from the app, which disables the page immediately. These pages ask search engines not to index them.
• Squad invite links: anyone who receives a squad invite link can see that squad's name, its member count, and its photos before joining. Invite previews do not reveal member identities.
• Link previews: when you send a share or invite link in a messaging app, a preview card is generated from the same information described above (pick details for share links, squad name and photo for invite links).
• Blocking: blocking a user hides your content and activity from each other across the app: search, feeds, squads' public feeds, comments, reactions, and follower lists. Blocking also removes any follow relationship between you in both directions.

We never show your phone number to other users, and it never appears on any public page.

9. Operational Analytics

We record operational analytics on our own infrastructure (Cloudflare Workers Analytics Engine) to understand feature usage and keep the service healthy. These events include: counts of app activity (for example, picks tracked per day), categorical pick metadata (the sport, league, and market type, never your specific selections, teams, players, lines, or stakes), server metrics (request volume, error rates, cache health, rate-limit headroom), and content-moderation outcomes. A small number of events, such as photo upload moderation results, are recorded with your account's internal identifier so we can detect abuse; we do not write your phone number, username, or IP address to analytics. Event-level analytics are retained for approximately 90 days. We may keep derived aggregate statistics (for example, total daily active devices) that contain no personal data. We do not share analytics with advertisers or any third-party analytics company.

10. Child Safety: Image Scanning and Mandatory Reporting

Every image uploaded to SquadSlips is checked, before it is stored, against Microsoft's PhotoDNA service, which matches images against known child sexual abuse material (CSAM). If an image cannot be scanned, it is rejected. If an upload matches known CSAM, we are required by federal law (18 U.S.C. § 2258A) to report it to the National Center for Missing & Exploited Children (NCMEC). In that event we preserve the image in a locked quarantine store, suspend the uploading account, and file a report that includes the image, the account's internal identifier and phone number, and the IP address of the upload. Incident records and the quarantined image are retained for one year after the report is submitted, as federal law requires, and are then purged except for a minimal record that contains no content or personal identifiers. This is the only situation in which we store a raw IP address or share your phone number beyond our SMS provider.

11. Service Providers and Other Third Parties

We use a small set of infrastructure providers, each receiving only what its job requires:

• Cloudflare: hosts our entire backend (servers, database, storage, and analytics). All account data described in this policy is processed and stored on Cloudflare infrastructure. Profile, cover, squad, and invite images are also screened for explicit content by an automated moderation model running on Cloudflare Workers AI.
• Twilio: receives your phone number solely to send and check SMS verification codes (Section 6).
• Apple: delivers push notifications and Live Activity updates. Notification payloads pass through Apple and can include the content of the notification, such as who followed or commented and the picks, odds, and live scores shown on your Lock Screen.
• Microsoft PhotoDNA and NCMEC: child-safety scanning and legally required reporting (Section 10). PhotoDNA receives only the image bytes, with hidden metadata already stripped, and no account information.
• OpticOdds: our licensed sports data provider. This is a server-to-server connection for odds, scores, and results; no personal data about you is ever sent to OpticOdds. On public share pages, sportsbook logos are loaded by your browser from OpticOdds' content network.
• Web fonts: our web pages (including this site and share and invite pages) load fonts from Google Fonts; your browser requests those files directly from Google.

We may also disclose information if required by law, such as in response to valid legal process, or to protect the safety of our users. We do not sell personal information, we have no advertising partners, and we send nothing to data brokers.

12. Data Retention

• Account and profile data: retained while your account is active, and handled as described in Section 13 when you delete it.
• Picks: retained while your account is active. They are part of your record and your squads' shared history.
• Public share links: expire automatically after about 90 days, or immediately if you revoke them.
• Notification records: the log of game-start alerts we have sent is deleted after 7 days. Per-game Live Activity tokens are removed when the game ends, and no later than 72 hours after they were registered.
• Session cache: short-lived server caches of your session expire within one hour; sign-out and account deletion clear them immediately.
• Analytics: approximately 90 days (Section 9).
• Child-safety incidents: one year after report submission (Section 10).

13. Your Choices and Deleting Your Account

• Delete your account: you can delete your account at any time from the app's settings. Deletion takes effect immediately: your phone number is removed from our records, your username is released, your display name and profile and cover photos are deleted (including the stored image files), your devices are signed out, your push and Live Activity tokens are removed, your follows and blocks are erased, and your comments are replaced with a "[deleted]" placeholder so squad conversations stay readable. Your feed posts are hidden, and images you posted to squad boards are removed along with their stored files. Picks you shared into squads remain part of those squads' history, no longer connected to your identity; pick records we retain after deletion are de-identified. The only exception is data we are legally required to preserve (Section 10).
• Sign out: signing out revokes your device's sign-in token on our servers.
• Revoke share links: any public share link you created can be revoked from the app, immediately disabling the page.
• Blocking and reporting: you can block any user and report any content from inside the app.
• Notifications: you control push notifications in iOS Settings, and can mute individual squads in the app.
• SMS: reply STOP to opt out of verification messages (Section 6).

14. What We Do Not Collect

We are committed to minimizing data collection. SquadSlips does not collect or use the following:

• Your real name or email address. Accounts need only a phone number; your display name is whatever you choose.
• GPS or precise location data. Your state is selected manually and stays on your device, and location metadata is stripped from every photo you upload.
• Your contacts, your messages, or the contents of your conversations. We never access your address book, and we cannot read your chats.
• A list of the apps installed on your device.
• Financial information, payment details, or real money transactions.
• Advertising identifiers (IDFA) or any form of cross-app tracking. The app's Apple privacy manifest declares that it does no tracking.
• Third-party advertising or analytics SDKs (such as Mixpanel, Amplitude, Google Analytics, Firebase, or Facebook SDK). The app contains no third-party SDKs at all.

15. Changes to This Policy

We may update this Privacy Policy from time to time as we add new features or comply with legal requirements. We will notify you of any significant changes by updating the effective date at the top of this document.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at luke@squadslipsapp.com, or by mail at SquadSlips LLC, 10828 Chaucer Drive, Willow Springs, IL 60480-1150.