Privacy Policy

Effective October 14, 2026

MAD Buckets helps people organize pickup basketball runs, RSVP, and keep score. This policy explains what information the MAD Buckets app and website (“the Service”) collect, how it is used, and the choices you have. The Service is operated by Tropper Labs (“we”, “us”).

Information we collect

Phone number. You sign in with your phone number. We send a one-time code by SMS to verify it. Your number is your account identifier; it is never shown to other users or shared with them.

Player card. Information you choose to add to your profile: your name, position, height, weight, wingspan, body type, highest level played, how you rate your own game, and an avatar photo. Your name and avatar appear on rosters, RSVP lists, and stats where other players in your runs can see them.

Photos. If you take a selfie or choose a photo for your avatar, we use it to generate a stylized basketball avatar (see “AI-generated images” below). We keep the photos you add privately so your player can be redrawn; they are never shown to other players or served on a public page. Adding a new one deletes the ones before it, and deleting your account deletes them all. Camera and photo access are only used when you tap to add a photo.

Contacts (optional). During setup you can let the app read your contacts to find friends who already use MAD Buckets. The app reads phone numbers on your device and sends them to our server only to check them against existing accounts in that moment. We do not save your contact list, we do not store the numbers we checked, and we never message anyone in your contacts. You can skip this step, and you can revoke contacts access at any time in your device settings.

Location (optional). If you grant location access, we use your approximate location to suggest courts and runs near you. We do not track your location in the background.

Runs and games. The groups you belong to, the runs you RSVP to, which games you played in, and scores recorded in the scorebook. From this we derive stats such as games played, wins and losses, and streaks.

Purchases. Creating a group needs a subscription, bought through Apple. We receive which plan you bought, when it renews or ends, and whether it was a test purchase — never your payment details, which stay with Apple. We use this to know which of your groups are active.

How the app is used. The app records a small set of events in our own database, such as which setup screens were shown, whether the subscription screen was opened, and whether a plan was bought. They carry a random ID made on your device (and your account once you sign in), never what you type. We use them only to see where setup is confusing and improve it; they are not shared, sold, or used for advertising.

How the website is used. The website records each page opened, when a messaging app loads a link to draw its preview, and the steps of answering a run. Each record carries a random ID kept in a cookie, your account once you sign in, your IP address and browser type, never what you type. We use them only to see whether run links reach people and where answering gets stuck; they are not shared, sold, or used for advertising.

Technical information. Standard information your device sends when using the Service, such as IP address, device type, and app version, used for security and to keep the Service running. We do not use third-party advertising or analytics trackers.

How we use it

• To create your account and sign you in.
• To show you your groups, runs, RSVPs, rosters, and stats, and to show your player card to the other players in your runs.
• To generate run invitations and preview images that organizers share with their crew.
• To find friends already on the Service when you choose to connect your contacts.
• To know which of your groups your subscriptions cover.
• To see where setup loses people, from the in-app events above, and fix it.
• To keep the Service secure, prevent abuse, and fix problems.

We do not sell your personal information and we do not use it for advertising.

AI-generated images

When you add a photo, we send it to Google’s Gemini image model to draw your avatar. Run preview images are made from the avatars of the players in that run, not their photos. Google processes those images to provide the service to us. The generated images are stored with your profile or the run they belong to. If you would rather not have a generated avatar, don’t add a photo — your card will show your initial instead.

Who can see what

• Anyone, signed in or not, can see your player card: name, avatar, position, height, wingspan, body type, highest level played and your self-ratings. Your weight shows on it only if you choose.
• Players in your runs can see your name, avatar, position, height, weight, highest level played, your answers to the setup questions (when you last played and what keeps you off the court), and your stats for the runs you were part of.
• Organizers of a group can also see the RSVP list for its runs.
• Shared links. Run invitations, scorebook results, and player profiles can be shared by link. Anyone who has a link may be able to view that page, so treat links as you would any other invitation.

Your phone number and contacts are never visible to other users.

Service providers

We rely on a small number of providers to run the Service. They process data on our behalf and only for that purpose:

• Supabase — database, authentication, and file storage (including photos).
• An SMS delivery provider — to send your sign-in code to your phone number.
• Google (Gemini) — to generate avatars and preview images, as described above.
• Google Places — to search for courts when you add a venue.
• Fly.io — hosting for the website and real-time sync.
• Apple and Google — app distribution, in-app purchases and, if you enable it, push notifications.

Retention and deletion

We keep your information for as long as your account exists. Run and game records are part of your group’s history and stay with the group. You can delete your account from the app’s menu: that deletes your profile and photos, takes your name and avatar off past rosters, and unlinks the in-app events it sent. To remove a run image that shows you, or for anything else, email us at [email protected] from the phone you use to sign in, and we will handle it within 30 days.

Your choices

• Skip contacts, location, and photo access during setup, or revoke them later in your device settings.
• Edit or remove anything on your player card from the app at any time.
• Leave a group from its settings in the app.
• Delete your account from the app’s menu.

Children

MAD Buckets is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will update the effective date above and let you know in the app or by text before the change takes effect.

Contact

Questions about privacy? Email [email protected].