Privacy Policy

Cued Up LLC ("Cued Up," "we," "us," or "our") operates the Cued Up platform at cuedupapp.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.

By using Cued Up, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, username, and optionally a profile photo. If you sign up through a third-party provider (e.g., Google), we receive basic profile information from that provider.

Game and Activity Data

We collect data about your games, including scores, opponents, ELO ratings, achievements, league participation, and match history. This data powers your stats, leaderboard rankings, and profile.

Location Data

With your permission, we collect your approximate location to help you discover nearby venues. You can disable location access at any time through your browser or device settings. We do not track your location in the background.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other financial credentials on our servers. We receive only a transaction confirmation and basic billing details (e.g., last four digits of your card) from Stripe.

Usage and Device Data

We automatically collect information about how you interact with our platform, including pages visited, features used, browser type, device type, operating system, and IP address.

User-Generated Content

This includes posts, chat messages, direct messages, comments, and any other content you submit through the platform.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our platform and services
• Process transactions and manage subscriptions
• Calculate and display player stats, ELO ratings, and leaderboards
• Show you relevant venues based on your location
• Send you notifications about games, challenges, and league activity
• Provide customer support
• Detect and prevent fraud, abuse, or violations of our terms
• Analyze usage trends to improve the product

3. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

Service Providers

We use the following third-party services to operate our platform:

• Supabase — Backend infrastructure, database, authentication, and file storage (hosted on AWS US regions)
• Stripe — Payment processing for subscriptions and Credits; Apple Pay and Google Pay are tokenized through Stripe
• Vercel — Website hosting, edge functions, and deployment
• Resend — Transactional email delivery (welcome, password reset, receipts, drip campaigns)
• Google Analytics 4 — Anonymous web traffic analytics. Loaded with Consent Mode v2 set to denied by default; only fires after you click Accept in the cookie banner
• Expo / Apple Push Notification Service / Firebase Cloud Messaging — Push notification delivery for the mobile app (game alerts, DMs, league updates)
• Twilio — SMS delivery for two-factor authentication only (no marketing SMS)
• Nominatim (OpenStreetMap) — Address geocoding for venue locations (no personal data sent)

These providers access your data only as necessary to perform their services and are bound by their own privacy policies and data processing agreements.

Public Profile Information

Your username, profile photo, game stats, ELO rating, and achievements are visible to other users. This is core to how the platform works. You can control what additional information appears on your profile through your settings.

Venue Owners

When you check in at a venue or join a table queue, the venue owner and their staff can see your username and basic profile information.

Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights, or ensure user safety.

4. Cookies and Local Storage

We use cookies and browser localStorage to keep you signed in, remember your preferences (such as theme and persona settings), and maintain session state. We do not use third-party advertising cookies. You can clear cookies and localStorage through your browser settings, though doing so may require you to sign in again.

5. Advertising

Free-tier users may see promotional banners within the app. These are served internally by Cued Up and do not involve third-party ad networks or tracking. We do not sell your data to advertisers. Verified and Pro subscribers do not see ads.

6. Data Storage

We store your data on secure servers provided by Supabase (hosted on AWS). Payment processing is handled by Stripe. Email communications are sent via Resend. We do not store your payment card details — those are held securely by Stripe.

7. Data Retention

We retain your account data and game history for as long as your account is active. If you delete your account, we will remove your personal information from our systems within 30 days, except where we are required by law to retain certain records (e.g., transaction history for tax purposes).

Aggregated, anonymized data (such as overall platform statistics) may be retained indefinitely.

8. Your Rights

You have the right to:

• Access your data — Request a copy of the personal information we hold about you
• Export your data — Download your game history, stats, and profile information
• Delete your account — Permanently delete your account and associated data
• Correct your data — Update inaccurate or incomplete information
• Withdraw consent — Revoke location permissions or other optional data collection at any time

To exercise any of these rights, contact us at kyle@cuedupapp.com.

9. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), row-level security on our database, and secure authentication through Supabase Auth. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights:

• Right to know what personal information we collect, use, disclose, and (if applicable) sell or share
• Right to delete personal information we hold about you, subject to legal-retention exceptions
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing — Cued Up does not sell or share your personal information for cross-context behavioral advertising
• Right to limit use of sensitive personal information — we do not use sensitive personal information for any purpose other than providing the requested service
• Right to non-discrimination for exercising any of these rights

To exercise any of these rights — including submitting a "Do Not Sell or Share My Personal Information" request — email kyle@cuedupapp.com with the subject line "California Privacy Request." We will respond within 45 days. We may need to verify your identity before fulfilling the request.

11. EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, the GDPR (or UK GDPR) gives you the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing.

Our legal bases for processing your personal data are: (a) contract — processing necessary to provide the service you signed up for; (b) legitimate interest — operating, securing, and improving the platform; (c) consent — for analytics cookies, push notifications, and marketing emails, which you can withdraw at any time; (d) legal obligation — tax, accounting, and law-enforcement records.

Cued Up is operated from the United States. When we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (or equivalent safeguards) executed with our processors. You have the right to lodge a complaint with your local supervisory authority.

To exercise any GDPR right, email kyle@cuedupapp.com with the subject line "GDPR Request." We will respond within 30 days.

12. International Data Transfers

Cued Up is based in the United States, and our infrastructure providers (Supabase, Vercel, Stripe, Resend) process data primarily in US regions. If you access Cued Up from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection laws that differ from those in your country.

13. Children's Privacy (COPPA)

Cued Up is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our minimum age of registration is 13. If you are under 13, do not create an account or submit any personal information.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it as quickly as possible. Parents or guardians who believe their child under 13 has provided personal information may contact us at kyle@cuedupapp.com to request review and deletion.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and, for significant changes, notify you through the platform or by email. Your continued use of Cued Up after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: