Privacy Policy

Last updated October 11, 2026 · Version 2026-10-11

This notice explains how Redcrows Solutions, based in Norfolk, Virginia, United States, operates Huddle Pick’em at huddlepickem.com. Questions and privacy requests: support@huddlepickem.com or our support page.

1. Scope and responsibility

This policy covers accounts, group participation, football picks, service emails, and support requests handled by Huddle Pick’em. Redcrows Solutions is responsible for the app’s handling of this information. Group commissioners administer their own groups but are not app administrators. This notice does not govern information you separately provide to a commissioner, another player, or a third-party website outside the app.

2. Information we collect

• Account information: your email address, display name, password hash, account creation time, account role, email preferences, and the version and time of Terms acceptance recorded for new registrations. We do not store your readable password. Password confirmation is used to check matching input and is not a separate stored profile field.
• Group information: group names, creators, membership and commissioner roles, invite codes, and group settings.
• Participation information: draft and submitted picks, entry numbers, tiebreaker predictions, submission times, approval status, scoring, results, and in-app notifications. Rejection reasons may be included in notifications and emails.
• Authentication information: server-side session records and hashed session tokens, expiry times, and hashed password-reset tokens. Reset links contain a secret; do not share them.
• Email records: recipient addresses, subjects and message bodies, delivery attempts, queue timestamps, cancellation and delivery status. Invitation recipients can be people who have not created an account; their address is provided by the commissioner sending the invitation.
• Support information: request category, message, account association, timestamps, and resolution status. Email correspondence may contain additional information you choose to provide.
• Technical information: hosting, mail, and security systems may process IP addresses, request details, browser information, and diagnostic logs needed to operate and protect the service. The app does not request precise location, contact lists, payment card information, or government identifiers.
• Push notification information: if you enable iPhone notifications, we store the device token supplied by Apple, your notification-category choices, delivery queue status, and related group, week, or entry identifiers. We do not use device tokens for advertising or location tracking.

3. Why we use information

We use information to create and authenticate accounts; provide and isolate groups; save and score entries; enforce deadlines and permissions; send requested invitations, welcome messages, pick decisions, reset links, reminders, and results; remember the selected group; prevent abuse; respond to requests; troubleshoot failures; and maintain the service. We record Terms acceptance to document account registration conditions.

The current app does not include advertising trackers, cross-site profiling, sale-of-data features, or marketing email campaigns. We do not use your password or picks to advertise to you. A materially different use should be reflected in an updated notice before it begins.

4. Who can see information

Other members can see display names and membership roles in their group. Approved entries and their picks are revealed through group views after the weekly lock; standings and results associate entries with display names. Commissioners can review their group’s pending entries, including the player’s email address and submission information. Commissioners and app administrators can also see member email addresses in the group member list. Ordinary members cannot see these addresses. Removing membership revokes group access but preserves existing entries and results. They receive access needed to make approval decisions. Invite codes are displayed to commissioners and app administrators, not ordinary members.

App administrators can oversee groups, review requests, and administer schedules and results. Authorized operators may access database records for support and maintenance. Do not put sensitive personal information in display names, group names, or picks-related messages.

We use hosting/database infrastructure and an SMTP email provider to operate the app. The planned production hosting provider is Hostinger; email processing depends on the mailbox/SMTP service configured for the deployment. These providers process information needed to deliver their services. Your recipient email provider also handles delivered mail. Apple processes device tokens and notification content when push notifications are enabled on an iPhone. Sports schedule sources provide game data; importing schedules does not require sending player profiles or picks to those sources.

Information may also be disclosed when required by applicable law, to respond to valid legal process, or when reasonably necessary to address fraud, security incidents, or protection of users and the service. Any business transfer involving personal information must account for applicable law and existing privacy commitments.

5. Emails and choices

New accounts receive a welcome email. Commissioners can send invitations and receive a service email with the player's display name when a new member joins their group. Pick approvals and rejections generate service emails. Password-reset mail is sent in response to a recovery request. Optional reminders and weekly results can be turned off independently on the support and preferences page; signing in is required. Preferences are checked before queued reminders/results are sent. They do not retract messages already accepted by a mail server.

Reminders are normally queued once per group/week in the 24 hours before an open week’s deadline for members without a submitted or pending-review entry. Results are queued when an administrator scores a week. Email delays or failures do not change deadlines. An invitation alone does not create an account or group membership. Contact support if an invitation is unwanted or was sent to the wrong address.

6. Cookies and device storage

A necessary first-party cookie keeps you signed in. Browser local storage remembers your selected group. See the Cookie and Storage Notice for names, duration, and controls. The current app does not install optional analytics or advertising cookies.

7. Retention

Account, group, and participation records are retained while an account is active. A signed-in user can permanently delete the account from Account info. Deletion removes the profile, entries, picks, notifications, support requests, active sessions, password-reset records, push device registrations and preferences, and stored email and push queue records associated with the account. Successful email delivery does not remove copies already held by the recipient or mail providers.

Session credentials stop working at their expiry, on logout for the current session, or when invalidated by a password reset. Reset links expire after 30 minutes and can be used once. Expiration prevents use but does not imply every expired database record is immediately deleted. Hosting backups, diagnostics, and mailbox copies have separate retention settings controlled by the relevant systems.

If a deleting user commissions a group that still has members, the app transfers the commissioner role to the longest-standing remaining member. A group with no remaining members is deleted. Results summaries affected by removed entries are cleared rather than continuing to name the deleted user. We do not promise immediate removal from backups, security logs, or other people’s inboxes; limited information may also be retained when required by law.

8. Access, corrections, and deletion requests

Use Account info while signed in to delete your account immediately. You can also use Support & privacy requests or email support@huddlepickem.com from your account email address to request a copy of your information, correction of inaccurate details, deletion help, or review of another privacy concern. Depending on applicable law, additional rights may include objection, restriction, portability, withdrawal of consent where consent is the basis, or a complaint to a competent authority. Availability and exceptions depend on your circumstances and applicable law; this notice does not claim that every regional privacy law applies to this service.

We may ask for proportionate identity or authority verification before disclosing or changing account information. Never send your password or reset token. The immediate deletion control verifies the current password inside the app; support will never ask you to send it. Requests that cannot be completed with the self-service control are handled according to applicable requirements.

9. Security and international access

The app uses salted password hashing, hashed authentication tokens, access controls, and database transactions for relevant changes. No internet service can guarantee absolute security. Protect your mailbox and credentials, use a unique password, sign out on shared devices, and report suspected unauthorized access. Accessing a US-operated service from another country may involve processing in the United States or other locations used by infrastructure providers. Contact us for deployment-specific questions; this notice does not assert a particular transfer certification or mechanism.

10. Children and changes

The service is intended for people who can legally agree to its Terms. Children under 13 must not create an account. If you believe a child under 13 supplied personal information, contact support so the account and information can be reviewed. Users below the age of legal adulthood should involve a parent or guardian before using the app.

We may update this notice as functionality or practices change. The revision date identifies this version. Significant changes should be communicated through the service or another suitable notice; we do not treat an updated policy as permission to disregard previous commitments.