Privacy Policy

Fantasy Companion collects the minimum needed to run an account and show you your fantasy leagues. There is no advertising, no analytics or tracking software, and nothing is sold or shared with data brokers. You can delete your account and everything attached to it from inside the app at any time.

When you create an account we store:

• Your username and email address — used to identify your account, sign you in, and send password-reset emails.
• Your password, hashed — stored only as a bcrypt hash. We never store or have access to your actual password.
• Your Sleeper username, if you provide one — used to look up your public Sleeper leagues. It is optional; the app works without it, with less to show.
• Your selected league and season — so the app opens where you left off.
• Sign-in tokens, hashed — so you stay signed in across sessions. Changing your password revokes them.

That is the complete list. We do not collect your location, contacts, photos, device identifiers, or advertising identifiers, and the app contains no third-party analytics, advertising, or tracking software of any kind.

League, roster, and matchup data comes from Sleeper's public API using the Sleeper username you provide. Scores, schedules, and player statistics come from public sports data sources. This information is about public sports events and public fantasy leagues — it is not personal information we collect about you, and we cache it on our servers so the app stays fast and stays within those providers' rate limits.

We do not sell your information, and we do not share it for advertising. We use a small number of service providers purely to operate the app:

• Vercel — hosts the application and its API.
• Supabase — hosts the database your account record lives in.
• Resend — delivers transactional email. This receives your email address only when you request a password reset.

We may also disclose information if we are legally required to, or where it is necessary to investigate abuse of the service.

The mobile app stores your sign-in tokens in the iOS Keychain via Expo SecureStore, and your Home screen layout and favorite teams on the device itself. Signing out or deleting the app removes them.

Open Account → Delete Account in the app and confirm with your password. This permanently deletes your user record, your Sleeper username, your league selection, and every sign-in and password-reset token tied to it. It cannot be undone, and it does not require emailing us first.

Deleting your account does not delete anything on Sleeper — your leagues and rosters belong to Sleeper and are unaffected.

Account information is kept until you delete your account. Sign-in tokens expire on their own and are removed. Password-reset tokens are single-use and are deleted the moment they are redeemed or expire. Cached sports data is refreshed and overwritten continuously and contains no personal information.

Fantasy Companion is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

If this policy changes materially we will update the effective date above and, where the change affects how your information is used, notify you in the app.

Questions about this policy or your data: jalen.naran@gmail.com.