Privacy Policy

Clutch Crew is a free sports prediction game for kids. Protecting kids' privacy is built into how we run it. This policy explains what we collect, why, who we share it with, and the choices parents have. This document is pending legal review; it is not a certification of COPPA compliance.

1. Who we are

Clutch Crew is operated by Clutch Crew LLC, PO Box 161585, Austin, TX 78716. Email: crew@playclutchcrew.com. We operate the game using the service providers described below.

2. Our promises

- Clutch Crew is always free. Kids never pay, win, or lose real money. - We never sell children's personal information. - We never show kids targeted or behavioral advertising. - We never share children's information with third parties for their own marketing. - Parents control their child's account and can delete it anytime.

3. Information we collect

Parent sign-up collects an email address and password, plus adult/guardian acknowledgments. Founding Crew records may include a parent name, city/market, sponsor connection, and administrative notes. Supabase Auth manages passwords. Emails you send us are handled by our email service.

From or about your child (with your consent): - A generated username chosen by the parent from preset words and numbers; no free-text real name - Birth year (not full birthdate), for age eligibility - Game activity: picks, scores, coins, badges, streaks, league activity and preset emoji reactions, standings, favorite teams/sport, mascot/avatar, companions, cosmetics, and settings such as language, background, and sounds - Remembered-device records and login activity; Coach records contain fixed topics or approved questions rather than raw typed prose

We do not ask kids for their email, phone number, home address, photo, or precise location.

Sign-in tokens and preferences are stored in browser storage. Remembered-player devices use a random token; its hash is stored by the app. Requests reach hosting and account providers, whose own policies govern operational request information.

Lovable visitor analytics records pages visited, referral sources, country, browser, operating system, device type, time on page, page speed, errors, and clicks. These are recorded for every visitor to the published site. It uses no cookies, stores nothing on the visitor’s device, does not keep IP addresses, and does not identify visitors. Detailed analytics is retained for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy (https://lovable.dev/privacy) explains how it handles it.

4. How we use information

- To create and run accounts and let kids play - To score picks, award coins and badges, and show leaderboards - To let parents review activity, approve league requests, and manage player settings; sponsor rewards are coming soon - To send parent account emails and Founding Crew updates. Update unsubscribe links are supported; a separate sign-up news opt-in is not yet implemented. - To keep the game safe, fix problems, and improve it - To comply with the law

5. Who can see what

Signed-in players can see generated usernames, scores/rankings, mascot avatars, companions, badges, and cosmetic items in standings and leagues. Real names and parent emails are not shown there. Players cannot chat, send direct messages, or upload photos. They can use preset emoji reactions and type questions to Coach. Parents can disable friend activity.

6. Sharing information

We share information only in these cases: - Lovable provides hosting and visitor analytics. Supabase provides authentication, database, and file storage. Resend delivers app-owned emails; account-confirmation and password-reset delivery is managed through Supabase Auth. Google Fonts supplies web fonts. Coach can use Anthropic to check a fixed topic against approved text; player identity and raw typed questions are not sent in that request. Each provider’s own terms and privacy policy apply. - Reward sponsors (coming soon): when your child redeems a reward, we share only the minimum needed to deliver it, and only with your separate approval for that sharing. - Legal reasons: if required by law, or to protect the safety of a child or others. - Business transfer: if Clutch Crew is sold or merged, information may transfer to the new owner, who must follow this policy or get your consent for changes.

Sports schedules, scores, statistics, and projections come from SportsGameOdds. App requests to that provider contain game/league information, not player or parent personal information.

7. How long we keep information

The planned retention targets are deletion within 30 days after account closure and, after 24 months of inactivity, an email notice followed by deletion 30 days later unless reactivated. These targets are not fully implemented: there is no inactivity notice/deletion process and provider-backup deletion within 30 days is unverified.

Today, parent-confirmed child deletion removes the live child account and linked game records immediately. Limited audit records retain account identifiers and timestamps. Coach history is automatically removed after 30 days. No automatic expiry for consent records or deletion audit records is configured.

8. How we protect information

The app uses HTTPS, database access controls, authenticated ownership checks, and Supabase-managed authentication. Player PINs are transformed into a secret-derived password rather than stored as short account passwords. No system is perfectly secure.

9. Parents' rights and choices

At any time you can: - Review the information we have about your child - Correct it, or have it deleted - Refuse further collection or use of your child's information, which closes the child's account - Sponsor sharing is coming soon and is not active today - Unsubscribe from news emails (account emails continue while you have an account)

Use your Parent Dashboard to review activity, manage settings, or request child deletion. Deletion requires the owning parent to confirm a single-use email link that expires after 24 hours. Email crew@playclutchcrew.com for other correction, consent-withdrawal, or parent-account requests; these do not have a self-service workflow or guaranteed response deadline today.

10. Teens (13–17)

Clutch Crew is for ages 6–17. We apply the same parent-controlled protections to every player under 18.

11. If we learn we collected information without consent

The app requires a parent account, guardian acknowledgment, and a consent step before creating player profiles. The current consent step is self-attestation; the additional adult-verification step is not implemented. Contact crew@playclutchcrew.com if you believe information was collected without authorization.

12. Changes to this policy

The date and version above identify this document. Automated material-change notices and mandatory version reacceptance are planned but not implemented today.

13. Contact us

Clutch Crew LLC · PO Box 161585 · Austin, TX 78716 · crew@playclutchcrew.com