Privacy Policy

This Privacy Policy ("Policy") explains how Munission, LLC, a Puerto Rico limited liability company ("Munission," "we," "us," or "our"), collects, uses, stores, shares, and protects personal information when you use the Roster Sports mobile application and related platforms ("Roster Sports," "App," or "Services").

This Policy applies to all users, including Managers, Regular Players, Alternate Players, and Ambassadors. By accessing or using the App, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree with this Policy, you must stop using the App immediately.

1. Information We Collect

We collect the minimum personal information necessary to provide and operate the Services. We do NOT collect or store financial account information, banking details, credit card numbers, or sensitive information such as medical, biometric, or government ID data.

1.1 Personal Identifiable Information (PII)

When you create an account or interact with the App, we may collect:

• First name
• Last name
• Email address
• Mobile phone number
• Venmo handle

This information is essential for identification, communication, and facilitating coordination among users.

1.2 Automatically Collected Data

When you access the App, we may automatically collect certain information through Firebase, Branch and similar tools:

• Device type and operating system
• IP address
• Device identifiers, including the Google Advertising ID on Android and Apple's advertising identifier on iOS, where your device settings allow
• App performance metrics, such as startup time and network request speed
• When you install and open the App
• Browser/app version number
• General location (region/state-level)
• Campaign and ad-click information from the web address you arrive on, such as UTM tags and, for Google ad clicks, the Google click ID

We do NOT track your precise GPS location and do NOT collect geo-location data unless required for a future feature with your explicit consent.

On our website, we keep campaign information in your browser's session storage for the length of your visit and attach it to our "download the app" links, so we can measure which marketing leads to app installs. If your browser sends a Global Privacy Control signal, we do not attach the Google click ID.

1.3 User-Generated Content (UGC)

In group chats or direct messages ("Smack Channel"), you may submit:

• text messages,
• uploaded images,
• group comments.

UGC is stored and processed to provide communication features.

We do not scan UGC for advertising or sell it to third parties.

2. How We Use Your Information

We use the information we collect only for legitimate operational purposes. These include:

2.1 App Functionality

We use personal data to:

• create and maintain user accounts,
• enable Managers to organize games and seasons,
• assign players to rosters,
• facilitate communication between players,
• generate queue order for Alternate Players.

2.2 Payment Facilitation

Roster Sports does NOT process payments. However, we:

• display Venmo payment links,
• direct users to send contributions directly to Managers,
• track confirmations by players and Managers for accounting accuracy.

We NEVER access or store financial account information.

2.3 App Optimization & Security

We use aggregated analytics to:

• improve App performance,
• troubleshoot errors,
• identify usage patterns,
• maintain system integrity,
• detect suspicious or abusive activity.

2.4 Customer Support

We use your data to respond to:

• account inquiries,
• technical support requests,
• problem resolution matters.

2.5 Legal Compliance

We may use data to:

• comply with laws and regulations,
• enforce our Terms,
• prevent fraud,
• address harmful behavior.

2.6 Measuring Our Marketing

We use campaign information and install-attribution data to measure which of our marketing efforts lead to app installs, and to promote and improve Roster itself. We do not use it for any other purpose.

3. How We Store & Protect Your Data

We take security seriously.

All personal data is stored securely using Google Firebase, which offers:

• encrypted data storage,
• SSL/TLS encrypted data transmission,
• access control,
• multi-factor authentication protocols.

We restrict access to personal data to authorized personnel only. While we use commercially reasonable safeguards, no system is completely secure. You use the App at your own risk.

4. How We Share Your Information

Roster Sports operates with a no data sale and no third-party advertising policy.

• We do NOT sell your personal information, directly or through data brokers.
• We do NOT show advertising from third parties in the app.
• We use marketing-measurement data, such as the information described in Section 4.1, only to promote and improve Roster itself. We do NOT use it to advertise anyone else's products or services, or to build profiles for others.
• Service providers may use information only to provide their services to us and, in de-identified or aggregated form, as described in their own privacy policies.

We may share data only in these limited circumstances:

4.1 Service Providers

We share data with trusted vendors such as:

• Google Firebase (account sign-in, data storage, push notifications and app performance monitoring)
• Google Analytics (website usage metrics)
• Branch (branch.io): attribution and deep linking, which measures which marketing efforts lead to app installs, opens shared links such as game invitations inside the app, and sends people to the right app store

These providers act under strict contractual obligations.

When you tap a "download the app" button on our website, you may pass through a link operated by Branch. Branch receives information such as your IP address, your browser or device type, the web page you came from, an identifier stored in your browser, and the campaign information we attach to the link. Branch processes this information on our behalf to attribute installs. Branch states that it does not sell this data. Its practices are described in Branch's privacy policy.

If you arrived from a Google ad, Branch may report the resulting install to Google so we can measure how our ads perform.

Our mobile app includes the Branch SDK. It collects device identifiers (the Google Advertising ID on Android, and Apple's advertising identifier or vendor identifier on iOS, where your device settings allow), your IP address, and install-referrer information. Branch uses these to attribute app installs to our marketing and to open shared links, such as game invitations, in the right place in the App. You can reset or delete your advertising ID, or limit ad tracking, in your device settings.

4.2 Ambassador Program

Ambassadors may receive:

• aggregated data,
• anonymized metrics,
• total revenue associated with Managers they refer.

We do NOT share individual players' PII with Ambassadors.

4.3 Legal Requirements

We may disclose information if required by:

• subpoenas,
• court orders,
• regulatory requests,
• applicable laws.

We will only do so after verifying the legality of the request.

4.4 Protection of Rights

We may share information to:

• enforce our Terms,
• investigate fraud or violations,
• protect the safety of users.

5. Cookies & Tracking

We do not use advertising or retargeting cookies, and we do not build behavioral advertising profiles. We do use a small number of tracking technologies for analytics and app-install measurement:

• Firebase: app performance monitoring. Our website uses Google Analytics for usage metrics, and it sets cookies to tell visits apart.
• Branch: measures which marketing efforts lead to app installs, using identifiers stored in your browser or on your device and your IP address.

These tools can collect identifiers and IP addresses. You can limit them as described in our Cookie Policy, including through the Global Privacy Control signal, which our website honors.

6. Payment Information

Roster Sports does NOT process payments or store financial information.

All monetary transfers occur:

• directly between Players and Managers,
• externally through Venmo or other P2P services,
• outside the App.

We do not:

• access bank accounts,
• store credit card information,
• monitor transaction details,
• collect financial statements.

Users confirm payments within the App solely for internal tracking purposes.

7. User-Generated Content (UGC)

UGC appears in chats between users. Users are solely responsible for:

• ensuring they have rights to post content,
• not posting harmful, illegal, or abusive content,
• not disclosing others' personal information.

UGC may be moderated or removed if it violates:

• law,
• community guidelines,
• safety standards,
• the rights of others.

We do not sell or share UGC.

8. Data Retention

We retain personal data:

• for the duration of your account, and
• as long as necessary to operate the App.

When you delete your account, we take reasonable steps to delete or anonymize your data, unless retention is required by:

• legal obligations,
• dispute resolution,
• fraud prevention.

We can customize retention periods (e.g., 12 months, 24 months) if you desire.

Service providers such as Branch and Google keep information for the periods described in their own privacy policies.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• access your personal data,
• correct inaccurate data,
• delete your data,
• receive a copy of your data,
• withdraw consent,
• restrict certain processing.

You may exercise your rights by contacting: privacy@rostersports.app

We verify user identity before processing any request.

To opt out of app-install measurement on our website, turn on Global Privacy Control in your browser. You can also use Branch's own opt-out, which is linked from Branch's privacy policy.

10. Children's Privacy

Roster Sports is intended for adults and is not directed to children.

We do not knowingly:

• collect data from minors,
• allow minors to register,
• target minors with content.

If we discover that a child's information has been collected, we will promptly delete it.

11. Third-Party Links & Services

The App may include links to, or integrations with, third-party services such as:

• Venmo payment interface,
• mobile operating system integrations,
• analytics platforms.

We do not control:

• third-party privacy practices,
• their collection processes,
• terms of service.

Users are responsible for reviewing third-party privacy policies.

12. International Users

Roster Sports is designed for U.S. users.

However, if you access the App from outside the United States, you acknowledge your information may be transferred and stored in the United States or other countries where Firebase operates.

By using the App, you consent to this transfer.

13. Policy Updates

We may modify this Privacy Policy from time to time. Updates will appear on:

• our website, or
• within the App.

Changes become effective upon posting. Your continued use of the App indicates acceptance of changes.

14. Contact Information

If you have questions about this Policy, wish to exercise your rights, or need assistance, please contact:

Munission, LLC
Attn: Privacy Office
Email: privacy@rostersports.app
San Juan, Puerto Rico