Your data, explained.

When you sign in with Sign in with Apple, you authorize Apple to share an anonymous identifier unique to your Apple ID and our app. You can also choose to share your name and email address, or use Apple’s “Hide My Email” relay so we never see your real email. We never receive your Apple ID password.

RecStat stores information you and other authorized league members create or input, including: league and season details, team rosters (team names, player names, jersey numbers), game data (scores, plays, penalties, drives, statistics), and roles and permissions (player, coach, referee, league owner).

RecStat stores league data, team rosters, schedule, standings, and game results on our backend. Hosting is on Vercel (in the United States) with a Neon Postgresdatabase (in the United States). Each league’s data is isolated; only authorized members of a league can read or modify that league’s data, enforced server-side by role-based permissions (player, coach, referee, league owner).

Live game data (scores, plays, clock) is canonical on the refereeing device during the game and is pushed to our servers at end-of-quarter, end-of-game, and on manual sync. The app works offline during a game and syncs the result when connectivity returns.

We log IP addresses alongside server events for rate-limiting and abuse prevention. These logs are stored on our backend alongside the event data.

When a finalized game is edited after the fact, we record the change in an audit log — including who made the edit, when, and what changed (before and after). This lets league commissioners review post-game corrections.

If you opt in to share analytics with app developers in your iOS settings, Apple may collect crash reports and basic usage information and share it with us through App Store Connect’s App Analytics. This is optional and controlled by you in Settings → Privacy & Security → Analytics & Improvements. See Apple’s privacy policy for full details on how Apple processes this data.

• To provide RecStat’s features (game tracking, league management, multi-device sync, exports).
• To authenticate you when you sign in.
• To let other authorized league members share data with you (for example, a ref’s game data with a scorekeeper).
• To diagnose and fix bugs from opt-in crash reports and analytics shared by Apple App Analytics.

We do not sell, rent, or share your data with advertisers. RecStat contains no advertising.

• Other league members.Rosters, games, and stats you create are visible to other authorized members of your league as part of the app’s intended functionality.
• Apple. Sign in with Apple is operated by Apple. Opt-in App Analytics diagnostic data is processed by Apple before being shared with us.
• Service providers. We use Vercel (hosting) and Neon (Postgres database) to store and serve cloud-synced league data. These providers process data on our behalf under their own privacy policies. We use Apple for Sign in with Apple authentication; Apple operates that flow under their own privacy policy.

We do not share your data with anyone else.

RecStat is intended for use by adults (age 13 and older) — refs, coaches, league administrators, and adult players. The app is not directed at children under 13, and we do not knowingly collect data directly from children under 13.

If a league using RecStat tracks youth players (under 13), data about those players is entered by the adult administrators or coaches running the league. If you are a parent or guardian and believe your child’s data has been entered into the app and you would like it removed, contact us at the email below.

• On your device: stored as long as the app is installed. You can delete records inside the app or remove all local data by deleting the app.
• On our servers:league and game data are stored as long as the league exists. League owners can delete a league from inside the app, which removes that league’s data from our servers. You can request deletion of your own user account and all associated data by contacting us at the email below.

You have the right to:

• Access the data we have about you
• Correct or update your data
• Delete your data
• Export your data (RecStat supports CSV and PDF export of league data inside the app)
• Withdraw consent at any time by signing out of the app or deleting it

To exercise any of these rights, email us at the address below.

We use industry-standard security measures, including HTTPS encryption for data sent over the internet, password-less authentication via Sign in with Apple, encrypted storage, and per-league access controls enforced server-side. No system is completely secure, and we cannot guarantee absolute security of your data.

If we make material changes to this policy, we will update the effective date above and notify users in the app. Continued use of RecStat after changes constitutes acceptance.