Data we collect
Pickems stores the information needed to operate private prediction leagues: a server-assigned random account identifier, the display name and avatar icon you choose, your selected sign-in provider, an email address when Apple or Google supplies one, league names and memberships, invite codes, picks, prop questions and settlements, standings, and league activity events. We also process ordinary security and technical request data, such as IP address, request time, app-attestation status, rate-limit counters, and error information, when you use the app or website.
Picks are hidden from other league members until each game locks at kickoff. The backend enforces that rule; it is not only a visual effect in the app.
How we use data
We use this information to create and authenticate accounts; operate invite-only leagues; synchronize picks, props, standings, and activity; send on-device reminders you request; prevent fraud and abuse; investigate reports; respond to support and privacy requests; maintain service reliability; and comply with legal obligations. We do not use your data for third-party advertising or build advertising profiles.
Accounts
You may continue as a guest or sign in with Apple or Google. Guest access creates a passwordless anonymous Firebase account for this installation and may not be recoverable after you delete the app, erase the device, or move to a new device. Apple and Google accounts can restore access across supported devices. Pickems never receives your Apple or Google password. Apple may let you hide your email address; Google may provide your name and email after you approve sign-in. A display name is still required because league members need to identify one another.
Service providers and game data
We use Google Firebase for guest, Apple, and Google authentication, app verification, and hosted league data; Google Sign-In for the Google account flow; and Vercel to host the API and website. Apple processes Sign in with Apple, and Apple App Attest may provide Firebase with a device-and-app authenticity assertion. These providers may receive account or technical data only as needed to perform services for us. We require service providers to protect personal information consistently with this policy and applicable law and do not permit them to use it for our third-party advertising or cross-app tracking.
Our server retrieves professional football schedules and results from ESPN; no Pickems account or league information is sent to ESPN for that retrieval. We may process data in countries outside your own, subject to the contractual, technical, and legal safeguards available through these providers and applicable law.
Notifications
If you allow notifications, Pickems schedules reminders on your device before picks lock and when results or standings may be ready. You can turn them off in the app or in iOS Settings at any time.
Analytics, advertising, and tracking
Pickems includes no third-party advertising, no odds or betting integrations, and no cross-app tracking. We do not sell or rent personal information. The public website does not use analytics or advertising cookies.
Retention and deletion
We keep account and active-league data while your account is active and while it is needed to operate the service. The length of time we retain a particular record depends on whether it is needed to provide a league, maintain the integrity of completed results, secure the service, resolve a report or dispute, meet legal obligations, or complete deletion from routine backups.
You can permanently delete any account—including a guest account—inside the app at Profile → Delete Account. Deletion removes your authentication account and access, revokes Sign in with Apple authorization when applicable, removes you from active leagues, disables invites for leagues you own, deletes locally stored profile images, and replaces your visible profile with “Deleted Player.” Completed picks, settlements, and league activity may remain only in de-identified form where needed to preserve completed standings and the integrity of shared league records. Safety reports and supporting evidence may be retained only as long as reasonably necessary to investigate abuse, protect users, resolve disputes, or comply with law. Security logs and encrypted backups expire according to our providers' operational retention cycles.
Your privacy choices
You can edit your display name and avatar in Profile, turn notifications off in Pickems or iOS Settings, disconnect a supported sign-in provider by signing out or deleting the account, and delete the account in the app. Depending on where you live, you may also have rights to request access, correction, deletion, portability, restriction, or an objection to certain processing. We will verify and respond to valid requests as required by applicable law. See the Privacy Choices page or email hi@xyklabs.com. You may appeal a denied privacy request by replying to our decision. Include your league invite code when relevant, but never send passwords or authentication codes.
Security
We use server-enforced authorization, encrypted network connections, private database rules, request rate limits, and Firebase App Check with Apple App Attest to help protect league data and the API. No online service can guarantee absolute security.
Children
You must be at least 13 years old to use Pickems. The service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided information, contact us so we can investigate and delete it.
Football names
Team and league names belong to their respective owners and are used only to identify games. Pickems is not affiliated with, endorsed by, or connected to the NFL, ESPN, or any team.
Changes
We may update this policy as the service changes or the law requires. The effective date above identifies the current version. Material changes will be communicated in the app or on this page.
Contact
XYK LLC is responsible for Pickems. For privacy questions, requests, or complaints, use our Privacy Choices page or email hi@xyklabs.com.