Privacy Policy
Dibs is a pickup-sports app made by Punctilious Permutations, LLC (“we”, “us”), a Utah company in Salt Lake City. This policy explains what Dibs collects, why, who we share it with, and the choices you have — including deleting your account from inside the app at any time.
The short version
- We collect what Dibs needs to run games: your account details, the profile you choose to fill in, what you post, the games you join, and — when you use features that need it — your location.
- We don't sell your information, we don't show ads, and Dibs has no third-party analytics or advertising trackers.
- Other players see your public profile and what you post. Your email, phone number and exact home location are never shown to other players.
- You can delete your account in the app: Profile → ⚙ Settings → Delete account.
Contents
- What we collect
- How we use it
- What other people can see
- Who we share it with
- Location
- Payments and the wallet
- Ads, analytics and cookies
- How long we keep it
- Deleting your account
- Your choices and rights
- Children
- Security
- Changes to this policy
- Contact us
1. What we collect
Information you give us
- Account: your name, email address and password. We store passwords only as a one-way scrambled “hash” — never the password itself. If you sign in with Google or Apple, we receive your name, email address, a Google or Apple account identifier and (from Google) your profile photo, and we don't get a password at all.
- Profile (all optional): profile photo, bio, city, home location, phone number, gender, birth year, favorite sports and skill levels, social media handles (Instagram, X, Facebook) and a Venmo username.
- What you post: feed posts and activity posts (text, photos, sport and hours played), comments, “props”, chat messages and photos in event, team and group chats, emoji reactions, and games, teams and groups you create.
- Ratings and reviews: post-game skill-tier ratings and awards you give, host ratings, skill endorsements, venue ratings, sportsmanship reports and appeals, and reports you file about content or players.
- League organizers: if you run leagues, your organization's name, your staff's names and emails, league details, schedules, scores, player statistics, photos and videos you upload, announcements, and the bank account where league fees should be paid (the full account number is encrypted; only the last four digits are ever shown).
- Messages to us: anything you send when you email support.
Information created as you use Dibs
- Game activity: games you join, host or are waitlisted for; check-ins and check-in times; no-shows and late cancellations; your Reliability Score; badges; leaderboard (Prize Board) points and rankings; Monthly Contest and official contest results; league registrations; Game Center teams and scores.
- Plan and wallet: your plan, billing dates, wallet balance and every wallet transaction (top-ups, entry fees, refunds, league fees, prizes).
- Social connections: friends and friend requests, team and group memberships, invites, and players you've blocked.
- Notifications we've sent you inside the app.
- Calendar sync: if you turn it on, a secret link to your personal calendar feed.
- Technical data: like any website or app, our servers and hosting provider receive your IP address and basic request information (such as browser or device type) when you use Dibs. We use this to run and secure the service; we don't use it to build a profile of you.
Information stored on your device
Dibs stores your sign-in token and a few preferences (like light or dark theme) in your browser's or app's local storage so you stay signed in. We don't use cookies for advertising or tracking.
2. How we use it
- To run Dibs: create your account, show games near you, let you join, host and check in to games, run chats, feeds, teams, leagues, contests and leaderboards, and send in-app notifications.
- To keep games fair and the community safe: Reliability Scores, sportsmanship rules, the language filter, reviewing reports, and suspending accounts that break the rules.
- To handle plans, wallet balances, entry fees, refunds, league fees and prizes, and to keep accurate financial records.
- To suggest games with AI when you ask for it (see section 4).
- To answer you when you contact us, and to fix bugs and improve Dibs.
- To follow the law and protect the rights and safety of our users and the public.
3. What other people can see
- Other Dibs users can see your name, profile photo, city, bio, social handles, gender, favorite sports, the games you've played, ratings summaries (skill tiers, Reliability Score, host rating, endorsements, awards, sportsmanship standing), badges, leaderboard points and rank, your posts, and — unless you turn it off in your profile — your total winnings.
- People in the same game, team, group or league see your name on the roster, your messages in that chat, and your check-in status.
- When you join a game paid through Venmo, the host's Venmo username is shown to you so you can pay them; if you host such a game, players see yours.
- League organizers see the names and contact details of people who register for their leagues.
- Ratings are anonymous: players see the result, not who gave which rating. Reports you file are private.
- Your email address, phone number, exact home location, wallet balance and transactions are not shown to other players.
- If you share a game link to another app (X, Facebook, WhatsApp or anywhere else), what you share follows that app's rules.
4. Who we share it with
We don't sell or rent your personal information, and we don't share it for advertising. We share it only with the service providers that make Dibs work, with the people you choose to interact with in the app, and when the law requires it:
| Who | What they get | Why |
|---|---|---|
| Render (hosting) | All data stored by Dibs, plus server logs | Runs our servers, database and uploaded photos |
| Google (Sign in with Google) | The sign-in token Google gives your device, which we check with Google | Only if you choose to sign in with Google |
| Apple (Sign in with Apple) | The sign-in token Apple gives your device | Only if you choose to sign in with Apple |
| Google Maps & Places | Addresses and places you search for, map views, and your IP address (loaded directly from Google by your device) | Location search, maps and directions |
| OpenStreetMap (map tiles and Nominatim search) | Map areas you view and, when Google search isn't available, the place you search for, plus your IP address | Maps and backup location search |
| Anthropic (Claude AI) | Only when someone asks the Game Center to suggest games: the sport, how many players are in the game, number of courts, time available, the style picked, and any words typed into the request box. No names, accounts or locations are sent. | AI game suggestions |
| Google Fonts | Your IP address when the app or website loads its fonts | Displays the app's typeface |
| League organizers (cities, gyms, clubs) | Your registration details and results in their league | Only for leagues you join |
| Payment processor (planned) | Payment details you enter at checkout, once card payments launch | Processing payments — see section 6 |
We may also share information if required by law or legal process, to protect the safety of any person, to investigate fraud or abuse, or as part of a merger, acquisition or sale of our business (in which case this policy continues to apply to your information).
5. Location
- Home location: when you create an account, the app may ask your device for your location (once) and saves it as your home area, so it can show games near you. You can change it in your profile at any time. Other players see only your city.
- Finding games: when you search for games near you, the app uses your device's current location to filter results. It's used for that search and isn't saved to your account.
- Check-in: checking in to a game requires your device's location to confirm you're at the venue. We use it for that check only — we store that you checked in and when, not where you were.
- Location is always optional at the device level: you can deny location access, but location-verified check-in won't work without it.
6. Payments and the wallet
Dibs has an in-app wallet used for plans, contest and tournament entry fees, league fees, refunds and prizes. We keep a record of your balance and every transaction. Card payments are not live yet; when they launch, card details will be collected and processed by our payment processor and never stored on Dibs servers — we'll receive only what we need to record the payment (such as amount, date and the last four digits). Payments you make to other players through Venmo happen in Venmo, not in Dibs. League organizers' bank account numbers are encrypted when stored.
7. Ads, analytics and cookies
Dibs shows no ads and contains no third-party analytics, advertising or tracking software. We don't track you across other companies' apps or websites. [JP: if analytics, crash reporting or ads are ever added, this section and the App Store privacy labels must be updated first.]
Push notifications (coming): when the Dibs iPhone app adds push notifications, we'll ask your permission first and store a device token so we can deliver them. You can turn them off in your phone's settings.
8. How long we keep it
- We keep your account information for as long as your account is open.
- When you delete your account, your personal information and your content are removed right away as described below.
- Financial records (wallet transactions, plan payments and prize payouts) are kept, without your name or contact details, for as long as we need them for accounting, tax and legal purposes.
- Information may remain in our hosting provider's routine backups for a limited time before those backups are overwritten. [JP: confirm Render's backup/snapshot retention period and state it here.]
- Server logs are kept by our hosting provider for a limited time for security and troubleshooting.
9. Deleting your account
You can delete your account at any time inside the app: Profile → ⚙ Settings → Delete account (league organizers: League Manager → Profile → Delete account). The app shows you exactly what will happen before you confirm. When you delete your account:
- Your profile (name, photo, bio, contact details, location, social handles, gender, birth year) is erased, you're signed out everywhere, and your email address can be used for a new account.
- Your posts, comments, props, uploaded photos, friendships, ratings and endorsements you gave and received, reports you filed, notifications and leaderboard points are deleted.
- Chat messages you sent are replaced with “Message deleted”.
- You're removed from upcoming games (with any in-app entry fee refunded first). Games you were hosting that haven't started are canceled and everyone going is notified and refunded. Teams and groups you own pass to the longest-standing member.
- Records other people rely on — past game rosters, brackets, results, and financial records — stay, but show “Deleted player” instead of your name.
- Any active plan ends immediately and any money left in your wallet is forfeited, as explained in the Terms of Use.
If you used Sign in with Apple, you can also stop using it with Dibs in your Apple ID settings. If you can't access the app, email us and we'll delete your account for you after confirming it's yours.
10. Your choices and rights
- See and change your information: edit your profile and account details in the app at any time.
- Control what others see: leave optional fields blank, hide your winnings, and block players you don't want to interact with.
- Location and notifications: control them in your device settings.
- Get a copy or ask a question: email us and we'll respond within a reasonable time.
- Depending on where you live (for example, Utah, California or the EU/UK), you may have additional rights to access, correct, delete or get a copy of your information, or to object to certain uses. We'll honor those requests as required by law, and we won't treat you differently for making them. [Lawyer: confirm which state privacy laws apply at Dibs' size, and whether a separate “Notice at Collection” is needed.]
11. Children
Dibs is for people 13 and older [JP: confirm the minimum age — see the note in the Terms]. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we'll delete it.
12. Security
We protect your information with measures such as encrypted connections (HTTPS), hashed passwords, encryption of league bank account numbers, and limiting who on our team can access data. No system is perfectly secure, so we can't guarantee absolute security — but if a breach affects you, we'll notify you as the law requires.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If the changes are significant, we'll tell you in the app before they take effect.
14. Contact us
Punctilious Permutations, LLC
Salt Lake City, Utah
hello@punctiliouspermutations.com