PickLock ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the PickLock mobile application ("App"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.
This Privacy Policy applies to information we collect through the App and does not apply to information collected by third parties or through any other means.
When you create an account or use the App, we may collect:
- Email address — used to create and manage your account
- Username — your chosen display name within the App
- Date of birth — collected once to confirm you meet the 18+ requirement in our Terms. We store the date you provide; we do not use it for any other purpose.
- Password — stored in encrypted form; we never store plaintext passwords
- League names and settings you configure as a Commissioner
- Picks, selections, and multipliers you submit each week
- Chat messages sent within league chat features
- Any other information you choose to provide within the App
When you use the App, we may automatically collect certain technical information, including:
- Device type, operating system, and app version
- IP address and general geographic location (country/region level)
- App usage data, including screens viewed, features used, and session duration
- Crash reports and error logs used to diagnose and fix technical issues
- Authentication tokens used to keep you logged in
- Push notification token, if you enable notifications, so we can deliver alerts to your device
PickLock displays odds data sourced from third-party providers (such as The Odds API) and sports statistics from public sports data sources (such as the ESPN API). We do not receive personal information about you from these third parties. These providers have their own privacy policies governing their data practices.
If you subscribe to PickLock Pro or make any other purchase, we receive a record of that transaction — which product was purchased, when, its status (active, renewed, cancelled, expired), and an identifier linking it to your account.
We never receive or store your payment card details. Purchases made in our iOS app are processed by Apple; purchases made on our website are processed by Stripe. Both handle payment information under their own privacy policies.
We use the information we collect to:
- Create and manage your account
- Operate, maintain, and improve the App
- Enable league creation, pick submission, scoring, and standings
- Provide, manage, and verify paid subscriptions and purchases
- Send transactional communications such as account verification emails
- Respond to your comments, questions, and support requests
- Monitor and analyze usage patterns to improve user experience
- Detect, investigate, and prevent fraudulent or prohibited activity
- Comply with legal obligations
- Enforce our Terms of Service
We do not use your information for targeted advertising or sell your data to advertisers.
Certain information is visible to other members of your leagues by design. This includes:
- Your username and pick selections for the current and past weeks
- Your scores, standings, and win/loss record within a league
- Messages you send in league chat
This sharing is a core feature of the App. By joining a league, you consent to your picks and standings being visible to other league members.
We share information with third-party vendors who assist us in operating the App, including:
- Supabase — our backend database and authentication provider. Your account data, picks, and league information are stored on Supabase infrastructure. Supabase is bound by data processing agreements consistent with applicable privacy laws.
- Vercel — our hosting and deployment provider
- The Odds API — provides sports odds data displayed in the App (no personal data is shared with this provider)
- PostHog — product analytics and error reporting. Receives your user ID, in-app events (such as locking a slip or joining a league), and crash and error diagnostics. Session recording is disabled.
- RevenueCat — subscription management. Receives your user ID and purchase records to determine whether your account has access to paid features.
- Apple — processes in-app purchases made in our iOS app and provides push notification delivery.
- Stripe — processes subscription payments made on our website. Stripe handles card data directly; we never see it.
These service providers are contractually obligated to use your information only as necessary to provide services to us and in accordance with this Privacy Policy.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency), or if we believe disclosure is necessary to:
- Comply with a legal obligation
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with the App
- Protect the personal safety of users of the App or the public
If PickLock is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Period.
We retain your personal information for as long as your account is active or as needed to provide you the App. Specifically:
- Account data (email, username) — retained for the life of your account
- Pick and league data — retained indefinitely to preserve historical standings and records
- Chat messages — retained for the life of the league
- Error logs and crash data — retained for up to 90 days
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes. Note that league standings and pick records may be retained in anonymized form to preserve the integrity of league history for other members.
We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission using HTTPS/TLS
- Encrypted password storage using bcrypt hashing
- Row-level security policies in our database to ensure users can only access their own data
- Regular security reviews of our infrastructure and dependencies
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. If you believe your account has been compromised, please contact us immediately.
PickLock is not directed to children under the age of 18. We ask for your date of birth when you create an account and accounts reporting an age under 18 are refused. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at joe@picklockapp.com and we will take appropriate action.
You may access and update your account information (such as your username) directly within the App settings. If you need to correct other information, please contact us.
You may request deletion of your account at any time by contacting us at joe@picklockapp.com or using the account deletion feature in the App. Upon deletion, we will remove your personal information as described in Section 4.
You may opt out of non-essential email communications from us by following the unsubscribe instructions in any email we send, or by contacting us directly. Note that you may still receive transactional emails necessary for the operation of your account (e.g., password reset emails).
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and sell
- Delete your personal information (subject to certain exceptions)
- Opt out of the sale of your personal information (we do not sell personal information)
- Non-discrimination for exercising your privacy rights
To exercise these rights, please contact us at joe@picklockapp.com. We will respond to verifiable requests within 45 days.
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and port your data. Our lawful basis for processing your personal data is primarily the performance of our contract with you (providing the App) and our legitimate interests in operating and improving the App.
To exercise your GDPR rights, contact us at joe@picklockapp.com.
The App uses authentication tokens (stored locally on your device) to keep you logged in between sessions. We do not use third-party advertising cookies or cross-site tracking technologies.
We use PostHog for product analytics and error reporting. It records in-app events and crash diagnostics associated with your account. Session recording is disabled, so PostHog does not capture your screen, your chat messages, or your keystrokes. We do not use third-party advertising or cross-site tracking technologies, and no data is shared with data brokers or advertisers.
The App may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party services you access.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice within the App
- Sending an email notification to the address associated with your account (for significant changes)
Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you must discontinue use of the App.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
PickLock Privacy Team
Email: joe@picklockapp.com
Website: picklockapp.com
We will respond to all privacy inquiries within 30 days.
This Privacy Policy was last updated in August 2026 and is effective as of the date listed above.