SetPlays Privacy Policy

1. Who We Are

The Service is operated by:

Taprobane Labs LLC
support@setplays.app
https://setplays.app

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

• The SetPlays iOS application.
• The SetPlays Android application.
• SetPlays websites.
• The SetPlays web play viewer.
• Team and collaboration functionality.
• Public or unlisted shared-play links.
• Subscription and purchase-related functionality.
• Feedback and support communications.
• Other SetPlays services that link to this Privacy Policy.

This Privacy Policy does not govern third-party websites, applications, services, or platforms that maintain their own privacy policies.

3. Information We Collect

The information we collect depends on how you use SetPlays, which features you access, your device, and whether you have a free or paid account.

3.1 Account Information

When you create or maintain an account, we may collect:

• Name or display name.
• Email address.
• Unique account identifier.
• Authentication provider.
• Profile settings.
• Account creation date.
• Account status.
• Account preferences.
• Profile image, if provided.
• Information associated with Apple, Google, or another authentication provider.

We do not receive your Apple ID or Google password. If you use Sign in with Apple and choose Apple's private email relay, we may receive the relay email address provided by Apple rather than your personal email address.

3.2 Sports and App Preferences

We may collect information about your SetPlays preferences, including:

• Selected sports.
• Visible sports.
• Default sport.
• Team preferences.
• Display preferences.
• App appearance preferences.
• Onboarding selections.
• Other settings you configure.

3.3 Plays and Other User Content

We process content that you create, upload, save, or share through the Service, which may include:

• Play names.
• Sport and category selections.
• Playing-surface selections.
• Player and ball positions.
• Frame-by-frame movement information.
• Animations.
• Drawings and chalk marks.
• Player labels or numbers.
• Play notes.
• Frame notes.
• Preview images.
• Team assignments.
• Share settings.
• Public or unlisted play snapshots.
• Other content you submit.

Some content may be stored only on your device. Other content may be stored in our cloud services when you use cloud, sharing, backup, team, or subscription-enabled features.

You control the content you create and are responsible for ensuring that you have permission to enter or share information about other people.

3.4 Team and Collaboration Information

When you create, join, or interact with a team, we may collect or process:

• Team name.
• Team logo.
• Team identifier.
• Team owner.
• Team administrators.
• Team membership.
• Member names and email addresses.
• Invitations.
• Invitation status.
• Membership role.
• Play assignments.
• Shared-play records.
• Team activity necessary to provide collaboration features.

Team members may be able to see certain account information, such as your display name, email address, role, or team-related activity, depending on the feature and permissions involved.

3.5 Shared Plays and Public Links

When you create a share link, we may process:

• Share identifier or shortcode.
• Associated play identifier.
• Public play snapshot.
• Share creation date.
• Share status.
• Owner identifier.
• Play title.
• Sport.
• Category.
• Playing-surface information.
• Frames, player positions, movements, drawings, and notes included in the shared version.
• Technical access information related to the shared page.

A person with a functioning share link may be able to view the shared content without signing in. You should not include sensitive, confidential, medical, or personally identifying information in a publicly shared play.

3.6 Subscription and Purchase Information

SetPlays may offer subscriptions or paid functionality through Apple or Google. We may receive purchase and entitlement information such as:

• Subscription status.
• Product identifier.
• Entitlement status.
• Purchase date.
• Renewal status.
• Expiration date.
• Store platform.
• Transaction identifier.
• Original transaction identifier.
• Subscription customer identifier.
• App User ID.
• Trial or promotional-offer status.
• Billing country or region when supplied by the store.
• Purchase restoration status.

Apple and Google process your payment information. We generally do not receive or store your full credit card number, bank account number, or store-account password. Subscription information may be processed by subscription management service providers to provide entitlement management and purchase synchronization.

3.7 Feedback and Support Information

When you contact us, report a bug, submit feedback, or request a feature, we may collect:

• Feedback type.
• Message content.
• Account email.
• Account identifier.
• Display name.
• Permission to contact you.
• App version.
• Build number.
• Operating system.
• Device model.
• Current app route or screen.
• Date and time.
• Technical information relevant to the request.
• Communications between you and Taprobane Labs.

Feedback submitted through the app may be delivered to Taprobane Labs using transactional email service providers. Unless otherwise stated, feedback submissions are not intended to function as a confidential communications channel.

3.8 Device and Technical Information

We and our service providers may automatically collect technical information, including:

• Device type.
• Device manufacturer or model.
• Operating system and version.
• App version.
• Build number.
• Platform.
• Language.
• Time zone.
• Internet Protocol address.
• Network and connectivity information.
• App installation identifier.
• Service installation identifier.
• Session information.
• Screen or feature interactions.
• Diagnostic information.
• Crash information.
• Performance information.
• Error logs.
• Timestamps.
• Referring or destination URLs for web usage.
• Browser type for web access.

Some identifiers may remain stable for a period of time and may be considered personal information under applicable law.

3.9 Analytics Information

We may use analytics tools to understand how the Service is used. Analytics information may include:

• App opens.
• Session activity.
• Feature usage.
• Screen views.
• Play creation activity.
• Play editing activity.
• Animation usage.
• Sharing activity.
• Team-feature usage.
• Subscription-related events.
• Sign-up, sign-in, and sign-out events.
• General engagement metrics.
• Device and app information.
• Approximate geographic information derived from an IP address, where provided by the analytics service.

We do not intentionally send play notes, feedback message text, passwords, or other free-form private content to analytics services.

3.10 Crash and Diagnostic Information

We may use crash reporting and diagnostic tools to identify and fix errors. Crash and diagnostic information may include:

• Crash traces.
• Error messages.
• App state at the time of failure.
• Device model.
• Operating system version.
• App version.
• Build number.
• Technical identifiers.
• Performance data.
• Logs associated with the crash.
• User identifier, where configured and necessary to diagnose account-specific problems.

Crash reports may include technical context but are not intended to include passwords or full play content.

3.11 Information Stored Locally on Your Device

SetPlays may store information locally on your device using local storage or operating-system storage. Locally stored information may include:

• Plays.
• Frames.
• Drawings.
• Notes.
• Preview images.
• Preferences.
• Cached cloud content.
• Session information.
• Feature state.
• Other app data.

Locally stored information may remain on your device until you delete it through the app, sign out, delete the application, clear app storage, or your device or operating system removes it. Taprobane Labs may not be able to access, restore, or delete content that exists only on your device.

3.12 Information We Do Not Intentionally Collect

SetPlays does not intentionally collect precise GPS location, address-book contacts, health records, biometric templates, government identification numbers, full payment-card details, microphone recordings, phone call history, SMS message history, advertising identifiers for behavioral advertising, or information used to track you across unrelated companies' applications or websites.

If a feature requires additional information or permissions, we will provide notice and request permission where required.

4. How We Collect Information

We collect information:

4.1 Directly From You

For example, when you create an account, edit your profile, create a play, add notes or drawings, create or join a team, invite another user, upload a team logo, share a play, purchase or restore a subscription, submit feedback, contact support, or change settings.

4.2 Automatically

Information may be collected automatically when you open the app, use a feature, encounter an error, access a shared-play page, interact with our website, sign in, synchronize content, or complete or attempt a purchase.

4.3 From Third Parties

We may receive information from Apple, Google, authentication providers, app stores, hosting and infrastructure providers, subscription management providers, transactional email providers, analytics and crash-reporting providers, or other users who invite you to a team or share content with you.

5. How We Use Information

We may use information to:

5.1 Provide the Service

Including to create and manage accounts, authenticate users, save and display plays, synchronize content, generate previews, animate plays, operate team functionality, process invitations, assign and display shared plays, provide public or unlisted play links, restore purchases, enable paid features, and maintain app preferences.

5.2 Process Subscriptions

Including to verify purchases, determine entitlement status, restore purchases, detect expiration or cancellation, apply subscription access, handle store notifications, and reconcile store and subscription records.

5.3 Communicate With You

Including to send authentication messages, password-reset messages, team invitations, security notices, transactional emails, respond to feedback, respond to support requests, send material service or policy notices, and contact you when you have granted permission.

5.4 Maintain Security and Prevent Abuse

Including to authenticate users, detect unauthorized activity, enforce access controls, prevent spam, rate-limit requests, investigate misuse, protect public share links, prevent fraud, maintain logs, enforce our Terms of Service, and protect users, Taprobane Labs, and third parties.

5.5 Diagnose and Improve the Service

Including to analyze usage, fix crashes, improve performance, understand which features are valuable, improve user experience, prioritize development, test new features, and measure reliability.

5.6 Comply With Legal Obligations

Including to respond to lawful requests, maintain financial and transaction records, exercise or defend legal claims, investigate violations, enforce contractual rights, and comply with tax, accounting, consumer-protection, privacy, and other laws.

5.7 Protect Vital and Legitimate Interests

Where permitted by law, we may process information when reasonably necessary to protect the safety and security of users, prevent harm, protect the integrity of the Service, secure accounts, and protect Taprobane Labs' legal and business interests.

6. Legal Bases for Processing

Where laws such as the European Union or United Kingdom General Data Protection Regulation (GDPR) apply, we may process personal information under the following legal bases:

• Performance of a Contract: We process information necessary to provide the Service you requested, including account creation, authentication, play storage, team collaboration, sharing, subscription access, and customer support.
• Consent: We may rely on consent when required, such as for optional communications, certain device permissions, certain cookies or similar technologies, and other processing that legally requires consent. You may withdraw consent where applicable, but this does not affect processing that occurred before withdrawal.
• Legitimate Interests: We may process information for legitimate interests such as securing the Service, preventing fraud, diagnosing errors, improving features, understanding product usage, and defending legal claims. We consider the effect of this processing on users and do not rely on legitimate interests where your rights override those interests.
• Legal Obligations: We may process information to comply with applicable law, lawful process, financial-record requirements, or regulatory obligations.
• Vital Interests: We may process information when reasonably necessary to protect the life or physical safety of a person.

7. How We Disclose Information

We may disclose information in the circumstances described below.

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising. We do not knowingly share personal information for targeted advertising as those terms are defined under certain United States state privacy laws.

7.1 Service Providers

We may disclose information to trusted third-party providers that help us operate, secure, support, and improve SetPlays. These service categories include:

• Authentication and Account Management: Used for user authentication, account verification, and identity services (such as Sign in with Apple or Google Sign-In).
• Cloud Storage and Synchronization: Used to host databases, cloud storage, application logic, and user content synchronization.
• Hosting and Infrastructure: Used to host our websites, web viewers, API services, public play content, logs, and supporting infrastructure.
• Subscription Billing and Purchase Management: Used for in-app purchases, subscription management, purchase verification, entitlement processing, and store transaction processing (such as Apple App Store and Google Play).
• Analytics and Crash Reporting: Used to understand feature usage, measure performance, and diagnose app errors.
• Transactional Email and Communications: Used to deliver transactional emails, user feedback, account notifications, and support messages.

Service providers may process information only as permitted by their agreements with us and their own applicable legal obligations.

7.2 Other Users

We may disclose information to other users when you join or create a team, invite a member, accept an invitation, share a play, assign a play to a team, create a public or unlisted share link, or otherwise choose to collaborate.

Information visible to other users may include display name, email address, team role, team membership, team activity, shared plays, and content you intentionally make available.

You should not share information through SetPlays that you are not authorized or willing to disclose to the intended recipients.

7.3 Public and Unlisted Shared Content

When you generate a public or unlisted share link, information included in the shared play may be accessible to anyone who has the link. Recipients may forward the link, record the screen, take screenshots, copy information, save content outside SetPlays, and share content with others.

Taprobane Labs cannot control information after another person copies or redistributes it. Disabling or deleting a share may prevent future access through SetPlays but may not remove copies retained by third parties, browsers, messaging platforms, caches, or other systems.

7.4 Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to comply with law, respond to a subpoena, court order, warrant, or lawful government request, enforce our Terms of Service, investigate fraud or abuse, protect the rights or property of Taprobane Labs, protect users or third parties, prevent or address security threats, respond to emergencies involving potential harm, and establish, exercise, or defend legal claims.

7.5 Business Transfers

If Taprobane Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or change of control, information may be disclosed or transferred as part of that transaction. Any successor will be subject to this Privacy Policy or will provide notice of materially different privacy practices where required.

7.6 With Your Direction or Consent

We may disclose information when you direct us to do so or provide consent.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, meet legal obligations, and resolve disputes. Retention periods vary based on the type of information.

8.1 Account Information

Account information is generally retained while your account remains active. After account deletion, account information is deleted or de-identified, except where retention is required or reasonably necessary for legal compliance, fraud prevention, security, financial records, subscription reconciliation, dispute resolution, enforcement of agreements, and backup rotation.

8.2 Play and Team Content

Cloud-stored plays, teams, memberships, invitations, and shared-play records may be deleted when you delete the applicable content, a team owner deletes a team, you delete your account, the content is removed for a policy violation, or retention is no longer necessary.

Content stored only on your device is controlled through your device and app installation.

8.3 Public Share Records

A shared-play record may be retained while the share remains active. When a canonical play or share is deleted, SetPlays may remove the corresponding shared representation. Copies retained outside our systems may remain beyond our control.

8.4 Subscription Records

Subscription and transaction records may be retained for the time required to verify entitlements, restore purchases, handle disputes, maintain accounting records, comply with tax and financial laws, and detect fraud.

Deleting your SetPlays account does not delete records maintained independently by Apple, Google, or other platform and payment processing providers under their own policies and legal obligations.

8.5 Analytics and Diagnostic Information

Analytics, crash, and diagnostic information may be retained according to our provider settings and operational needs. We may retain aggregated or de-identified information that no longer reasonably identifies you.

8.6 Feedback and Communications

Feedback and support communications may be retained as long as reasonably necessary to respond to you, improve the Service, document issues, prevent abuse, maintain business records, and resolve disputes.

8.7 Backups

Deleted information may temporarily remain in encrypted or restricted backups until those backups are overwritten through normal retention cycles. We generally do not restore individual deleted records from backup unless necessary for security, disaster recovery, or legal compliance.

9. Account Deletion

You may delete your SetPlays account through the in-app account-deletion functionality.

Account deletion may permanently remove your account profile, cloud plays, team ownership records, team memberships, invitations, shared-play records, account-linked content, and other cloud data associated with the account. Some information may be retained as described in the Data Retention section.

Deleting your SetPlays account does not cancel an Apple App Store or Google Play subscription. You must separately cancel subscriptions through the platform where you purchased them. Deleting the SetPlays app from your device does not delete your SetPlays account.

For assistance with account deletion, contact: support@setplays.app

10. Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information. These may include the right to:

• Know whether we process your information.
• Request access to your information.
• Request correction of inaccurate information.
• Request deletion.
• Request a portable copy.
• Restrict certain processing.
• Object to certain processing.
• Withdraw consent.
• Appeal a decision concerning a privacy request.
• Opt out of a sale or sharing of personal information.
• Opt out of targeted advertising.
• Limit certain uses of sensitive personal information.
• Lodge a complaint with a regulator.

These rights are subject to applicable exceptions. We may need to verify your identity before completing a request. We may deny or limit a request where permitted by law, including when we cannot verify your identity, the request would affect another person's rights, the information must be retained by law, or the request is fraudulent, excessive, or abusive.

To exercise a privacy right, contact: support@setplays.app

Include your name, account email, the right you wish to exercise, and enough information to identify your account. We will not unlawfully discriminate against you for exercising a privacy right. You may use an authorized agent where permitted by law.

12. Other United States State Privacy Rights

Residents of certain states may have privacy rights under state law. Depending on applicable law, these may include rights to access, correct, delete, obtain portable data, opt out of targeted advertising, opt out of sales, opt out of certain profiling, and appeal a denied request.

Taprobane Labs does not currently sell personal information or process it for cross-context behavioral advertising. Submit requests or appeals to: support@setplays.app

13. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data-protection law.

Taprobane Labs is the controller of personal information described in this Privacy Policy, except where otherwise stated.

You may have the right to access, correct, delete, restrict processing of, object to processing of, receive portable data of, or withdraw consent for your personal information. To exercise these rights, contact: support@setplays.app

You may lodge a complaint with the data-protection authority where you live, work, or believe a violation occurred.

14. International Data Transfers

Taprobane Labs is based in the United States. Your information may be processed in the United States and other countries where we or our service providers operate. These countries may have privacy laws different from those in your location.

Where required, we use appropriate safeguards for international transfers, which may include contractual protections, standard contractual clauses, provider data-protection terms, transfers to jurisdictions recognized as adequate, or other legally approved mechanisms.

By using the Service, you understand that your information may be processed outside your country, subject to applicable law.

15. Children's Privacy

SetPlays is not intended for children under 13. A person under 13 may not create or maintain a SetPlays account. If you are between 13 and the age of legal majority where you live, you may use SetPlays only with permission from a parent or legal guardian.

We do not knowingly collect personal information directly from children under 13. If we learn that we collected personal information directly from a child under 13 without legally valid authorization, we may delete the account and information. Parents or guardians who believe a child under 13 submitted personal information should contact: support@setplays.app

15.1 Coaches, Teams, and Information About Minors

SetPlays may be used by adult coaches, parents, team administrators, and organizations whose teams include minors. Those users must not enter personal information about a minor unless they have authority to do so, have obtained required parental or organizational consent, comply with privacy laws, limit the information, and avoid entering sensitive information.

Users should generally use jersey numbers, positions, or non-identifying labels instead of full names of minors. Do not enter medical records, injury details, home addresses, birth dates, school schedules, government identifiers, precise location details, or other sensitive information about minors.

Taprobane Labs does not authorize users to upload information about minors in violation of law or organizational policy.

16. School and Educational Use

SetPlays is not currently offered as a school-authorized educational records platform unless Taprobane Labs separately enters into a written agreement stating otherwise.

SetPlays should not be used to store official student records, education records protected by the Family Educational Rights and Privacy Act (FERPA), medical records, disciplinary records, student assessment records, or other protected institutional records.

A coach, teacher, school, or organization using SetPlays is responsible for determining whether use is permitted, obtaining required approvals, providing legally required notices, obtaining parental consent, avoiding protected student information, and complying with applicable policies and laws.

17. Security

We use administrative, technical, and organizational measures designed to protect information. These measures may include authentication, access controls, database and storage security rules, encrypted network transmission, secure secret management, role-based authorization, logging, monitoring, restricted administrative access, data validation, rate limiting, security updates, and vendor security controls.

No method of storage or transmission is completely secure. We cannot guarantee that information will never be accessed without authorization, lost, altered, disclosed, destroyed, or intercepted.

You are responsible for protecting your password, protecting access to your email account, securing your device, signing out of shared devices, protecting share links, and promptly reporting suspected unauthorized activity. Contact us at support@setplays.app if you believe your account or information has been compromised.

18. Data Breach Notifications

If a security incident involving personal information occurs, we will investigate and take steps we consider appropriate. Where required by law, we will notify affected users, regulators, or other parties. Notification may be provided through email, in-app notice, website notice, or other legally permitted methods.

19. Cookies and Similar Technologies

Our websites and web viewer may use cookies, local storage, or similar technologies to maintain sessions, remember preferences, operate security features, measure performance, diagnose errors, and understand website usage. We do not intentionally use cookies for cross-site behavioral advertising. Browser settings may allow you to block or delete cookies, but doing so may affect functionality.

20. Do Not Track

Some browsers provide a "Do Not Track" signal. Because there is not a universally accepted standard for responding to Do Not Track signals, our Service may not respond to them. Taprobane Labs does not currently sell personal information or use it for cross-context behavioral advertising. Where legally required, we will honor applicable opt-out signals such as Global Privacy Control for processing subject to those signals.

21. Automated Decision-Making

SetPlays does not currently make decisions producing legal or similarly significant effects based solely on automated processing of personal information. We may use automated systems for fraud detection, security, spam prevention, subscription processing, error detection, and basic product analytics. These systems are used to operate and protect the Service, not to make employment, credit, housing, insurance, educational-admission, or similar decisions.

22. Third-Party Links and Services

The Service may link to third-party services such as Apple App Store, Google Play, privacy or legal pages, authentication providers, shared external content, and other websites. Taprobane Labs does not control the privacy practices of third parties. Review their policies before providing information. This Privacy Policy does not apply to information processed independently by those third parties.

23. Apple App Privacy Disclosures

Apple requires developers to disclose app privacy practices, including relevant practices of third-party SDKs integrated into an application. The SetPlays App Store privacy disclosures should remain consistent with this Privacy Policy, the app's actual behavior, infrastructure configuration, authentication providers, analytics configuration, crash-reporting configuration, subscription functionality, and any SDK or feature changes.

24. Google Play Data Safety

Google Play requires developers to accurately explain how an app collects, uses, shares, and protects user and device data. The SetPlays Google Play Data Safety form should remain consistent with this Privacy Policy, the app's actual data practices, third-party SDK behavior, authentication providers, analytics, crash reporting, subscription functionality, account deletion, and any SDK or feature changes.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we may provide notice through the Service, email, our website, an updated effective date, or another reasonable method. If changes materially affect your rights or how we process information, we will provide additional notice or obtain consent where legally required.

The "Last Updated" date identifies when this Privacy Policy was most recently revised. Your continued use of the Service after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy where permitted by law.