Privacy Policy

Effective August 28, 2026

MAD Buckets helps people organize pickup basketball runs, RSVP, and keep score. This policy explains what information the MAD Buckets app and website (“the Service”) collect, how it is used, and the choices you have. The Service is operated by Tropper Labs (“we”, “us”).

Information we collect

Phone number. You sign in with your phone number. We send a one-time code by SMS to verify it. Your number is your account identifier; it is never shown to other users or shared with them.

Player card. Information you choose to add to your profile: your name, position, height, weight, highest level played, and an avatar photo. Your name and avatar appear on rosters, RSVP lists, and stats where other players in your runs can see them.

Photos. If you take a selfie or choose a photo for your avatar, we use it to generate a stylized basketball avatar (see “AI-generated images” below). We keep the photo you gave us alongside the avatar it produced, so the avatar can be regenerated later; unlike the avatar, the original is private and is never shown to other players or served on a public page. Camera and photo access are only used when you tap to add a photo, and deleting your account deletes both.

Contacts (optional). During setup you can let the app read your contacts to find friends who already use MAD Buckets. The app reads phone numbers on your device and sends them to our server only to check them against existing accounts in that moment. We do not save your contact list, we do not store the numbers we checked, and we never message anyone in your contacts. You can skip this step, and you can revoke contacts access at any time in your device settings.

Location (optional). If you grant location access, we use your approximate location to suggest courts and runs near you. We do not track your location in the background.

Runs and games. The groups you belong to, the runs you RSVP to, which games you played in, and scores recorded in the scorebook. From this we derive stats such as games played, wins and losses, and streaks.

Technical information. Standard information your device sends when using the Service, such as IP address, device type, and app version, used for security and to keep the Service running. We do not use third-party advertising or analytics trackers.

How we use it

• To create your account and sign you in.
• To show you your groups, runs, RSVPs, rosters, and stats, and to show your player card to the other players in your runs.
• To generate run invitations and preview images that organizers share with their crew.
• To find friends already on the Service when you choose to connect your contacts.
• To keep the Service secure, prevent abuse, and fix problems.

We do not sell your personal information and we do not use it for advertising.

AI-generated images

To create stylized avatars and run preview images, we send your avatar photo (and, for preview images, the avatars of the players in that run) to Google’s Gemini image model, which returns a generated image. Google processes those images to provide the service to us. The generated images are stored with your profile or the run they belong to. If you would rather not have a generated avatar, don’t add a photo — your card will show your initial instead.

Who can see what

• Players in your runs can see your name, avatar, position, and your stats for the runs you were part of.
• Organizers of a group can also see the RSVP list for its runs.
• Shared links. Run invitations, scorebook results, and player profiles can be shared by link. Anyone who has a link may be able to view that page, so treat links as you would any other invitation.

Your phone number and contacts are never visible to other users.

Service providers

We rely on a small number of providers to run the Service. They process data on our behalf and only for that purpose:

• Supabase — database, authentication, and file storage (including photos).
• An SMS delivery provider — to send your sign-in code to your phone number.
• Google (Gemini) — to generate avatars and preview images, as described above.
• Google Places — to search for courts when you add a venue.
• Fly.io — hosting for the website and real-time sync.
• Apple and Google — app distribution and, if you enable it, push notifications.

Retention and deletion

We keep your information for as long as your account exists. Run and game records are part of your group’s history and stay with the group. To delete your account and the personal information tied to it, or to remove your name and photo from past runs, email us at jonathan@tropperlabs.com from the phone you use to sign in, and we will handle it within 30 days.

Your choices

• Skip contacts, location, and photo access during setup, or revoke them later in your device settings.
• Edit or remove anything on your player card from the app at any time.
• Leave a group by asking its organizer, or ask us to remove you.

Children

MAD Buckets is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will update the effective date above and let you know in the app or by text before the change takes effect.

Contact

Questions about privacy? Email jonathan@tropperlabs.com.