This Privacy Policy describes how 1 of 1 ("the app," "we," "us," or "our") collects, uses, and protects your information when you use the mobile application.
What we collect
When you use 1 of 1, we collect:
Account information: your email address (from either email/password signup or Sign in with Apple), a public username ("handle") that you choose, and a randomly generated user ID.
Your picks and gameplay history: the players you select each week, timestamps, and derived statistics (percentile score, rank, badges).
Device push token: if you enable notifications, an anonymous device identifier used only to deliver push notifications to your device.
Automatically collected technical data: basic device metadata (OS version, app version) sent as part of routine API requests. We do not collect precise location, contacts, photos, or advertising identifiers.
We do not collect analytics or crash reports today. If we add them in the future, this policy will be updated and you'll be notified.
Why we collect it
Email and user ID: to authenticate your account and let you sign back in.
Handle: to display your identity to other users on the Board and Season leaderboard.
Picks and history: to run the game — compute scores, populate leaderboards, and let you see your own history.
Push token: only to send notifications you've opted into (e.g., when your pick becomes the week's #1).
Third parties we share data with
We use the following service providers, each of which processes data only on our behalf:
Supabase (database, authentication, edge functions) — stores your account, picks, and history. See Supabase's privacy policy.
Apple Push Notification Service — delivers push notifications on iOS. See Apple's privacy policy.
Expo Push Service (Expo Application Services) — relays notifications to APNS on our behalf. See Expo's privacy policy.
Sleeper (public NFL statistics API) — we fetch public NFL player and game data from Sleeper. No personal information about you is sent to Sleeper.
ESPN (public NFL schedule API) — we fetch public NFL schedule data from ESPN. No personal information about you is sent to ESPN.
We do not sell your data. We do not share your data for advertising purposes. We do not use tracking SDKs.
How long we keep your data
Your account, picks, and history are retained until you delete your account.
When you delete your account (via the "Delete Account" button in the Me tab), all of your personal data is permanently removed from our systems within 30 days.
Some backup snapshots may persist in Supabase's infrastructure for up to 30 days for disaster recovery, after which they are automatically purged.
Your rights
You can, at any time:
Access the information we have about you by opening the app.
Change your handle from the Me tab (Edit link).
Delete your entire account and all associated data using the "Delete Account" button in the Me tab.
Export your pick history by taking screenshots of the Me tab (a formal data export tool is not currently offered).
If you'd like to exercise a right that isn't covered by an in-app tool — for example, correction of your email — email hello@1of1fantasy.com and we'll respond within 30 days.
Children's privacy
1 of 1 is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at hello@1of1fantasy.com and we will delete the account.
Security
We take reasonable measures to protect your data:
All network communication uses HTTPS (TLS 1.2+).
Passwords are hashed by our authentication provider (Supabase) using industry-standard algorithms; we never see your password in plaintext.
Your device authentication session is stored in the platform's secure keychain (iOS Keychain / Android EncryptedSharedPreferences), not in plaintext storage.
Server-side access is enforced via row-level security so that other users cannot read your picks except via the aggregated leaderboards described above.
No system is perfectly secure. If we ever detect a data breach affecting your information, we will notify you within 72 hours as required by law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top and, for material changes, notify you in the app.