Privacy Policy

Introduction

RNKD LLC ("we", "our", or "us") operates the RNKD mobile app and the RNKD website, which together help players discover, register for, and compete in in-person sports tournaments and build a lasting competitive ranking. This Privacy Policy explains, in plain language, what information RNKD collects, how we use it, who we share it with, and the choices you have. It applies to the RNKD mobile app, the RNKD website (including the pages where this policy is hosted), and the accounts you create to use them (together, the "Service").

Information We Collect

We only collect the information we need to run the app and the tournaments you take part in:

• Account information: Your name and email address, and the date of birth and gender you provide when setting up your profile. We use your date of birth only to confirm you are 18 or older, which the app requires. We use gender only to determine which tournament divisions you are eligible for (men's, women's, and coed events, including coed lineup requirements) and to power the optional Men/Women filter on leaderboards. When you sign in with Google or Apple, we receive the sign-in identifier those providers give us so we can create and secure your account. Authentication is handled by our provider, Supabase Auth.
• Competitive profile and results: As you play, we generate and store your display name, team names, tournament registrations, match results, rankings and rating, and tournament standings and history. Some of this information is shown to other users — see "Your Competitive Profile Is Public" below.
• Event photos and video: Photographs, video, and audio are sometimes captured at RNKD tournaments, by RNKD or by the event's organizer, and you may appear in them. We use them to run and promote RNKD and its events, as described in Section 12 of our Terms. We do not run facial recognition on them, and we do not use them to identify you. If you would rather not appear, you can email support@rnkdapp.com, though removal is at our discretion.
• Precise location (foreground only): When you grant permission, the app reads your device's precise location while you are actively using the app so we can show you nearby tournaments and sort them by distance. We store your location on your user record for this purpose. The app does not access your location in the background, and you can decline or revoke location permission at any time in your device settings.
• Payment information: When you pay a tournament entry fee, receive an organizer payout, or cash out your in-app wallet balance to your bank, your payment is processed by Stripe. Stripe collects and handles your card and bank details. RNKD does not store your full card numbers. We retain records of the transaction (such as amount, date, and status) needed to run tournaments and meet our legal obligations.
• Payment handles (optional): If you choose to add them, your Venmo username, Cash App $cashtag, PayPal.Me name, and the email address or phone number you use for Zelle. We use them only so that an organizer can pay you a prize you won and so that teammates can pay you back for an entry fee you covered. RNKD does not process, receive, or hold these payments, and we do not verify that a handle belongs to you.
• Phone number for a free-agent list (optional): If you join an event's free-agent list, you can choose to add a mobile number. It is kept for that event only and shown only to that event's organizer, so they can text or call you about placing you on a team. RNKD does not send you automated text messages and does not use the number for anything else. It is deleted when you are placed on a team, when you leave the list, when the event ends, or when you delete your account.
• Push notification tokens: If you enable notifications, we collect a device push token through Expo so we can send you tournament and account notifications.
• Crash and diagnostic data: We use Sentry to collect crash reports, error logs, and basic device/diagnostic information (such as device model, operating system version, and app version) to keep the app stable and fix bugs. Once you are signed in, these reports are linked to your RNKD account identifier(an internal ID assigned to your account) so that a crash can be matched to a support request you send us. We do not attach your name, email address, or IP address to these reports.
• Product analytics (usage data): We use PostHog to understand how the app and website are actually used. We record events for the things that matter to running the product — for example creating an account, publishing a tournament, registering for one, checking in, and opening a shared invite or tournament link — together with the technical information the analytics service collects with each event (such as device and app or browser version, and an approximate location — country, state and city — estimated from your IP address; we do not store the IP address itself or any more precise location). Once you are signed in, these events are linked to your RNKD account identifier (an internal ID assigned to your account), so activity before and after sign-up is joined to one profile. See "Product Analytics" below.
• Invite-link matching data (website): If you tap an RNKD invite link in a web browser before installing the app, our website briefly stores a one-way "fingerprint" derived from non-identifying device characteristics (such as screen size, platform, language, and time zone) together with your IP address, so we can connect you to the right invite after you install. Your IP address and the invite token are deleted within 24 hours. A hashed, non-reversible device fingerprint and basic match metadata (whether and when a match occurred) are retained for up to 90 days for service analytics, after which any remaining data is deleted.

How We Use Your Information

We use the information described above to:

• Create, secure, and manage your account and sign you in.
• Show you nearby tournaments and sort them by distance using your foreground location.
• Register you for tournaments, manage teams, and run results, rankings, leaderboards, and disputes.
• Build and display your competitive profile, ranking, and match history (see below).
• Process entry fees and service fees, organizer payouts, refunds, and wallet cash-outs through Stripe.
• Send you push notifications about your tournaments, matches, and account.
• Show the payment handles you choose to add to an organizer paying your team a prize, and to your teammates, and keep the record of a prize being marked paid and received.
• Diagnose crashes, fix bugs, and keep the app secure and reliable.
• Measure how people find RNKD and where they get stuck — for example how many people who open a shared tournament link go on to register — so we can improve the product.
• Send you service and account emails (such as event reminders and password resets) through our email provider.
• Send you news from RNKD by email, such as upcoming events near you, offers, and product updates. Every one of these emails includes a way to unsubscribe. Unsubscribing stops these emails only. You will still get the service emails above, such as receipts, changes to an event you entered, and sign-in codes.
• Review reports of objectionable content or abusive behavior and enforce our Terms.
• Comply with our legal, tax, accounting, and fraud-prevention obligations.

Product Analytics

RNKD uses a third-party product-analytics service, PostHog, in the mobile app, on the website, and on our servers. This is how we measure whether the product works: how many people who open a shared link install the app, how many organizers who start creating a tournament finish publishing it, how many registrations turn into check-ins, and where people abandon a flow.

What this means in practice:

• What is recorded: product events (for example: signed up, published a tournament, registered for a tournament, checked in, opened a shared link) and the technical context sent with them, such as device or browser and app version, and an approximate location (country, state and city) estimated from your IP address. We do not store your IP address itself or any more precise location. We do not record your keystrokes and we do not use session replay.
• What identifies you: before you sign in, events are tied to a random, app-generated device identifier. When you sign in or create an account, we attach your internal RNKD account identifier to that identifier so the two are joined into a single profile. We do not send your name, email address, password, or payment details to the analytics service.
• What it is used for: understanding and improving the Service, and measuring our own marketing and referral funnels. It is not used for advertising targeting, and it is not shared with anyone for their own purposes.
• Where it goes: PostHog processes this data on our behalf as a service provider, under its own privacy and security commitments (see Service Providers below).

If you would like us to delete the analytics data associated with your account, contact us using the details below and we will do so.

Service Providers (Sub-processors)

We rely on a small number of trusted service providers to operate the app. They process your information only to provide their services to us and are bound by their own privacy and security commitments:

• Supabase — account authentication, database, and backend hosting.
• Stripe — payment processing for entry fees and service fees, organizer payouts, refunds, and wallet cash-outs to your bank.
• Expo — delivery of push notifications.
• Sentry — crash reporting and diagnostics.
• PostHog — product analytics (see Product Analytics above).
• Resend — delivery of email, both service emails (such as event reminders and account notices) and news from RNKD.
• Google — Maps/Places (to display and find tournament locations) and Google Sign-In.
• Apple — Sign in with Apple.

Other Disclosures

Beyond the service providers above, we may disclose information only in these limited situations:

• Payment handles, to the people you would pay or be paid by: payment handles are shown only to the organizer of an event in which a team you captained finished in a paid position, and to your teammates on an entry you captain. They are never shown on your public profile, on leaderboards, or in search. When an organizer marks a prize as paid, or you confirm you received it, we keep that record and show it to both of you. The payment itself happens in the third-party app you choose, under that provider's own terms and privacy policy.
• A free agent's phone number, to that event's organizer: if you add a mobile number when you join a free-agent list, only the organizer of that event can see it. Captains and other players cannot.
• To comply with the law or protect rights: when we reasonably believe disclosure is required to comply with a legal obligation, enforce our terms, or protect the safety, rights, or property of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information.
• With your consent: for any other purpose you specifically agree to.

Account Deletion & Data Retention

You can delete your account at any time directly in the app under Settings > Delete Account. For your protection, we cannot delete your account while you still have a wallet balance (please cash it out first), while you are running a tournament you created that is open for registration or in progress, or while you are competing in a live tournament (you can delete once these are resolved).

When you delete your account, we permanently erase or anonymize the information that identifies you, including your name, email, username, sign-in identifiers, stored location, check-in QR code, payment handles, any free-agent phone number, and push tokens.

Because RNKD is a competitive ranking platform, some data cannot be fully erased without corrupting other players' records. Your match results, rankings, and tournament standings are part of your opponents' competitive history and the integrity of past brackets, so we do not delete them. Instead, we retain those results in de-identified form, no longer linked to your name — your past entries appear as a removed participant. We do this only to preserve the accuracy of other players' records and tournament outcomes.

We also keep the record that you agreed to our terms. When you accept the Terms & Conditions, this Privacy Policy, or a liability waiver, we record which document and version you accepted, the date and time you accepted it, and the IP address the acceptance came from. That record is the evidence that you agreed, so it is not deleted with your account — we retain it for as long as we may need it to establish, exercise, or defend legal claims.

For legal, tax, and accounting reasons, we must keep certain financial records even after your account is deleted. Some of these — in particular tax records such as IRS Form 1099-K and the underlying payout records that support it — must, by law, remain linked to your identity (for example, your name and taxpayer information), and we keep them in identifiable form for as long as the law requires. Other transaction records that do not need to identify you are retained in anonymized form (de-linked from your identity) so we can meet our accounting, fraud-prevention, and other legal obligations. We keep these financial records for up to seven (7) years, or longer where the law requires it, after which they are deleted or remain in aggregated, non-identifying form.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to certain processing. You can delete your account in the app as described above, and you can contact us using the details below to exercise any other rights. We will respond consistent with applicable law. You can unsubscribe from news emails at any time from any of those emails, or by writing to us. Because we do not sell or share your personal information for advertising, there is no "sale" of your data for you to opt out of.

Data Security

We implement appropriate technical and organizational measures to protect your information, and our payment and authentication providers maintain industry-standard security. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

Children

The RNKD app is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

Contact Us

If you have questions or concerns about this Privacy Policy or your information, please contact us at:

RNKD LLC
Email: support@rnkdapp.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date above.