Privacy Policy

What we collect

Account info: your email address, and if you sign in with Google, the basic profile info Google shares with us (name, email address, profile photo) through Google's standard, non-restricted 'basic profile' OAuth scope. We do not request access to your Gmail, Drive, Calendar, or any other Google Workspace data, and we do not access, use, or store any Google user data beyond that basic profile information. See 'Google account sign-in' below for how this data is used, retained, and protected.

Profile info you provide: display name, home city, favorite teams, avatar photo.

Game logs: venue, teams/opponent, date, score, notes, and any photos you upload (game photos, ticket stub photos).

Bucket List Find submissions: photos you upload to claim a find, and a one-time location check (see below).

Location data — one-time, not continuous or background tracking: when you tap 'Check my spot' while logging a game or claiming a Bucket List Find, your browser asks your device for its current GPS coordinates one single time. We compare that coordinate against the venue's known location to calculate the distance between them, and use that distance only to decide whether the post qualifies for the 'Verified' badge/point tier. We do not store your raw GPS coordinates at all, not even temporarily on our servers beyond the single comparison request. What actually gets saved to your account is two small fields attached to that specific post: whether the check succeeded (location_verified, true or false) and the calculated distance in meters (verified_distance_m) — never a coordinate, a map pin, or any other record of exactly where you were standing. These two fields persist for as long as the post itself exists in your account, are removed if you delete that post, and are cleared and require a fresh check if you edit that post's venue or date. We never build a location history from these checks, never use them for any purpose other than that single Verified determination, and never share them with anyone. Under California's CPRA and similar state privacy laws, precise geolocation is treated as sensitive personal information — because we only ever process it transiently for one narrow purpose and never retain the coordinate itself, there is no stored sensitive geolocation data in our systems to access, correct, or limit the use of; the retained fields (a yes/no flag and a distance) do not on their own reveal your location.

Custom venues you add: the venue name and address you enter if you add a venue that isn't already in our database.

Usage data: standard technical information like IP address and device/browser type, collected automatically as part of running the app.

How we use it

Your data is used to run the product: to show your section, calculate points, Verified status, and badges, run the location check described above, moderate uploaded photos (see below), and keep you signed in. We do not sell your data and we do not run advertising.

Google account sign-in

If you choose 'Continue with Google,' our use of the information Google shares with us is governed by Google's API Services User Data Policy, including its Limited Use requirements. In line with that policy: we only request Google's basic, non-sensitive, non-restricted profile scope (your name, email address, and profile photo) — never a sensitive or restricted scope like Gmail, Drive, Calendar, or Contacts. We use that information solely to create and identify your Section 101 account and to display your name and photo back to you inside the app; we do not use it to serve ads, we do not transfer or sell it to advertising networks, data brokers, or any other third party, and no human at Section 101 reviews it except as needed to investigate abuse, security incidents, or a legal request. This data is retained for as long as your account exists and is deleted if you delete your account, per 'Your choices' below.

Photos and automated moderation

Every photo you upload — game photos, ticket stubs, Bucket List Find photos, and your avatar — is automatically reviewed by an AI system before it's stored, to check that it doesn't contain unsafe or inappropriate content and, for ticket stubs and Bucket List Finds specifically, that it plausibly matches what it's being submitted for. Uploads that clearly violate our content rules are rejected outright. Uploads flagged as uncertain are stored but routed to a human review queue, and any points tied to that upload may be held until a reviewer confirms it. We do not use your photos to train AI models.

The Feed and public content

Section 101 has a public Feed. When you post a game, you can choose whether that post is visible to other users on the Feed. Posts you mark public — including any photos, notes, and the venue/team/score details — are visible to other Section 101 users, and other users who logged the same game may see and interact with your post (for example, confirming "I was there"). You can control this on a per-post basis; anything you don't choose to share publicly stays private to your account.

Custom venues

If you add a venue that isn't in our database, we check it against existing venues to avoid duplicates and store the venue details you provide. New custom venues are reviewed by an admin, and we may edit, merge, or remove a custom venue entry — this doesn't affect your own game logs tied to it.

Service providers

We use third-party infrastructure to host the app, database, authentication, and file storage, and a third-party AI service to run the photo moderation described above. These providers process data on our behalf and don't use it for their own purposes. Travel and ticketing links on venue pages point to third-party sites (ticketing, hotel, flight, dining, and pro shop partners) with their own privacy policies we don't control.

Child safety

Section 101 is not directed at, and is not intended for use by, children under 13. Account creation requires an affirmative age confirmation — see the age confirmation step in onboarding — rather than a passive statement alone. If we learn that we've collected information from a child under 13 despite that confirmation, we will delete it. We comply with federal law regarding child sexual abuse material: if we become aware of such content on the platform, we report it to the National Center for Missing & Exploited Children's CyberTipline as required by law, and preserve related records as legally required.

Your privacy rights (California and other states)

If you're a California resident, the CPRA gives you rights to know what personal information we've collected about you, request deletion, correct inaccurate information, and limit the use of sensitive personal information. Residents of other states with similar laws (for example Virginia, Colorado, Connecticut, and Utah) have comparable rights. As described above, the only category of information we collect that could be considered sensitive personal information under these laws is location data, and we don't retain your actual coordinates — only a yes/no verification flag and a distance figure tied to a specific post. To exercise any of these rights, including deleting your account and its associated data, contact us using the information in 'Contact' below; we don't charge a fee for this and won't discriminate against you for exercising these rights.

Your choices

You can edit your profile, favorite teams, and per-post sharing settings at any time in Settings, and delete individual game logs or Bucket List Find claims. To request deletion of your account and all associated data, email us and we will action it.

Contact

Questions about this policy: info@section101app.com.