Privacy Policy
Last updated: May 28, 2026
This Privacy Policy describes how Tally (tallysports.app) collects, uses, and handles your information when you use our service. We've written this in plain language so you actually understand it.
1. Information We Collect
Information you provide
- Account information: email address, username, and optional display name when you register.
- Profile information: your supporting team, first/last name, phone number, and age verification (21+), if you choose to provide them.
- Game logs: games you mark as watched, goals witnessed, drinks logged, venue, ratings, and match predictions.
- Tournament picks: your tournament winner, top scorer, golden glove, and group stage winner selections.
- Pick 'Em entries: your predicted scorelines for each World Cup match.
- Groups: groups you create or join, including the group name and invite code.
Information collected automatically
- Standard web server logs (IP address, browser type, pages visited) handled by our hosting provider, Vercel.
- Authentication session tokens managed by Supabase.
2. How We Use Your Information
- To operate and improve the Tally service — leaderboards, groups, Pick 'Em, and your passport.
- To display your public profile and statistics to other users.
- To send essential service emails (e.g., password reset). We do not send marketing emails.
- To calculate Pick 'Em scores, rankings, and badge awards.
- To provide aggregate, anonymized statistics (e.g., crowd-favorite picks).
3. Information We Share
We do not sell your personal information. We share information only in these circumstances:
- With other users: your username, display name, supporting team, game logs, picks, badges, and Pick 'Em scores are visible to other logged-in users per the normal operation of the app (leaderboards, profiles, groups).
- Service providers: Supabase (database and authentication infrastructure) and Vercel (hosting). Both are used solely to operate the service.
- Legal requirements: if required by law or to protect the rights and safety of users or the public.
4. Data Retention
We retain your account and associated data for as long as your account is active. If you wish to delete your account and all associated data, contact us at the address below and we will process your request within 30 days.
5. Security
We use Supabase's row-level security, encrypted connections (HTTPS), and industry-standard authentication practices to protect your data. No system is perfectly secure — do not use Tally to store sensitive personal or financial information.
6. Children's Privacy
Tally is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at:
8. Changes to This Policy
We may update this policy from time to time. We'll note the "last updated" date at the top. Continued use of Tally after changes constitutes acceptance of the updated policy.