SharperSunday Privacy Policy

SharperSunday LLC ("SharperSunday," "we," "us," or "our") operates the SharperSunday mobile application and related services available at sharpersunday.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, do not use the Service.

1. Who we are

SharperSunday LLC is a limited liability company organized under the laws of the State of Maryland, United States. Our mailing address is 306 W Redwood St STE 201, Baltimore, MD 21201. You can reach us at support@sharpersunday.com.

2. Information we collect

We collect only the information needed to operate the Service. Categories of information we collect:

2.1 Information you provide directly

• Email address — when you join our waitlist or contact support.
• Sleeper account identifier — your Sleeper username, user ID, and avatar, which you provide by connecting your Sleeper account inside the app.
• Promo and referral codes — when you redeem an invite or referral code, or when someone redeems a code generated by your account. We record the linkage between the redeeming account and the referring account so we can grant referral rewards.
• Support correspondence — anything you send us via email or in-app feedback.

2.2 Information we collect from third parties on your behalf

When you connect your Sleeper account, we fetch the following from Sleeper's public API:

• League rosters, scoring settings, draft picks, and transaction history for the leagues you participate in
• Player data (statistics, ownership, trends) from public Sleeper endpoints
• League activity (waivers, trades, free agent moves) used to compute analytics like power rankings and league lore

We do not access your Sleeper password, payment information, or private messages.

2.3 Information collected automatically

• Subscription status — managed by Apple App Store, Google Play, and RevenueCat. We receive entitlement state but never see your full payment card details.
• Push notification token — a device-specific token used to deliver trial-expiry and referral-reward notifications. You can disable push notifications in your device settings at any time.
• Usage analytics — events such as app opens, paywall views, trial starts, subscription purchases, and feature use. We use this to understand which features are valuable and where users get stuck. This is first-party analytics only — we do not collect IDFA or any identifier used for cross-app or cross-website tracking.
• Device information — operating system, app version, and similar context bundled with analytics events.
• IP address — our backend automatically receives the IP address you connect from when your device makes API requests. We use it for rate limiting, abuse prevention, and standard server logging.
• Crash and error reports — when the app crashes or hits an error we record technical context (stack trace, OS version, app version) so we can diagnose and fix it.

2.4 Information we do not collect

• Your real name (unless you give it to us in support correspondence)
• Your physical address
• Your payment card number, expiration, or CVV (these go directly to Apple or Google)
• Your Sleeper password
• Your contacts, photos, microphone, or camera content
• Sensitive personal data. We do not collect or process "sensitive personal information" as defined under the California Consumer Privacy Act, the Maryland Online Data Privacy Act, or analogous state privacy laws — including racial or ethnic origin, religious beliefs, health or biometric data, precise geolocation, sexual orientation, or government identifiers.

3. How we use your information

We use the information we collect to:

• Provide AI-generated fantasy football advice tailored to your roster and league
• Authenticate your subscription and grant access to paid features
• Send transactional emails (for example, support replies and waitlist confirmations)
• Send relevant push notifications you have not opted out of (such as trial expiry reminders and referral rewards)
• Respond to your support requests
• Improve the Service through aggregated and pseudonymous analytics (event data is linked to a stable user identifier, not your name)
• Diagnose and fix crashes, bugs, and performance issues
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not sell your personal information. We do not use your information to build advertising profiles for third parties.

4. AI processing of roster and league data

When you use AI features (chat, trade evaluator, league lore reports, win window advisor, etc.), the relevant context — your roster, league settings, and the question you asked — is sent to our AI provider, Anthropic, for processing. Anthropic processes the data to generate a response and, per their terms, does not use API content to train their models.

We never send Anthropic your email address, push token, payment information, or any data that personally identifies you outside the fantasy-football context.

5. Third-party service providers

We share information with the following third parties strictly to operate the Service. Each provider is listed with the category of data they receive and a link to their own privacy policy.

We do not sell, rent, or trade your information with any other third party for their independent commercial purposes.

6. Legal basis for processing (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing your personal information are:

• Contract — to provide the Service you signed up for
• Legitimate interests — to improve the Service, prevent abuse, and operate our business
• Consent — for push notifications and any optional analytics where consent is required by local law
• Legal obligation — when we are required by law to retain or disclose information

7. Data security

We use industry-standard technical and organizational measures to protect your information, including:

• HTTPS / TLS encryption for all data in transit
• Encrypted storage at rest by our cloud providers (Vercel, Upstash)
• Restricted access — only the SharperSunday team can access production data
• Secrets and API keys stored in environment variables, never in the app bundle

No system is perfectly secure. If we experience a data breach affecting your information, we will notify you as required by Maryland's Personal Information Protection Act (generally within 45 days of discovery) and any other applicable law.

8. Data retention

We retain your information only as long as we need it to provide the Service:

• Account data (Sleeper user ID, push token, subscription state, referral codes) — for as long as your account is active
• Analytics events — up to 24 months in PostHog before anonymization or deletion
• Crash and error reports — up to 90 days
• Support correspondence — up to 24 months
• Account-deletion audit record — up to 90 days after deletion, so we can investigate "where did my data go?" inquiries without retaining your full data

9. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the information we hold about you
• Correction — ask us to correct inaccurate information
• Deletion — ask us to delete your account and associated data
• Portability — request your data in a machine-readable format
• Objection — object to certain processing (such as analytics)
• Withdraw consent — for processing based on consent

To exercise any of these rights, email support@sharpersunday.com from the address associated with your account. We will respond within 30 days.

9.1 California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we have collected about you, the sources, and the purposes
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of your personal information — we do not sell or share personal information as defined by the CCPA
• Be free from discrimination for exercising your rights

9.2 EEA / UK residents (GDPR)

In addition to the rights above, you may lodge a complaint with your local data protection authority if you believe we have processed your information unlawfully.

9.3 Maryland residents (MODPA)

Under the Maryland Online Data Privacy Act, Maryland residents have the right to:

• Confirm whether we are processing your personal data and access that data
• Correct inaccuracies in your personal data
• Delete personal data we have collected or obtained about you
• Obtain a portable copy of your personal data
• Opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects

We do not sell personal data, do not engage in targeted advertising, and do not use profiling to make decisions that have legal or similarly significant effects. We also commit to data minimization — we collect only what we need to operate the Service.

To exercise any MODPA right, email support@sharpersunday.com from the address tied to your account. We will respond within 45 days. If we decline your request, you have the right to appeal — instructions will be included in our response.

9.4 Other US state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Minnesota, and Rhode Island (and any other state whose comprehensive consumer privacy law applies to us) have rights substantially similar to those described in §9.1 and §9.3. To exercise any of these rights, email support@sharpersunday.com from the address tied to your account.

10. Account deletion

You can delete your SharperSunday account at any time:

1. Open the app
2. Tap your profile / menu
3. Tap "Delete my account"
4. Confirm

Deletion immediately wipes:

• Your Sleeper session
• Your push notification token
• Your trial timer and referral history
• Your in-app preferences

A record that the account was deleted (and the date) is retained for up to 90 days for support and audit purposes, then permanently removed.

You can also request deletion by emailing support@sharpersunday.com from the address tied to your account. We will complete the deletion within 30 days.

Note: Deletion does not automatically refund or restore subscriptions. Subscriptions purchased through Apple or Google must be canceled separately in your Apple ID or Google Play account settings.

11. Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has provided information to us, please email support@sharpersunday.com and we will delete it.

12. International users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last updated" date at the top
• Post the new Policy at sharpersunday.com
• For material changes, notify you via in-app notice or email at least 14 days before the change takes effect

Your continued use of the Service after the effective date of an updated Policy constitutes acceptance of the updated terms.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your information, contact us:

• Email: support@sharpersunday.com
• Mail: SharperSunday LLC, 306 W Redwood St STE 201, Baltimore, MD 21201