Privacy Policy
Effective date: September 2, 2026
Contact: support@bleacherbrag.com
Operator: DALiApps, LLC (Arkansas) — the data controller. It is run by one person, so “I” below means that person.
BleacherBrag makes game-day graphics from photos you choose. This policy explains what I collect, why, and the controls you have. The short version: I collect only what the app needs to work, I never sell data or run ads, the analytics are aggregate-only with no per-user tracking, and you can export or delete everything from inside the app.
What I collect
- Account. Your email address and the sign-in identifier from Apple or Google (managed by Google Firebase Authentication).
- Your content. The photos, team logos, and details (names, jersey numbers, schedules, scores, stats) you add to make graphics, and the team/player profiles you choose to save. Photos are often of your kids — see "Children" below.
- Purchases. When you buy a watermark unlock, Apple or Google processes the payment. I receive and store the store's transaction record (transaction ID, product, expiry) to grant your entitlement — never your card details.
- Aggregate usage metrics. I count events like "a graphic was created" or "a render failed" to operate the service. These counts contain no user identifiers — I cannot look up any person's activity in them. There is no advertising SDK in the app and nothing that tracks you across other apps or websites, and I run no analytics product of my own. The app does embed Google's sign-in SDK — see "Third-party code in the app" below for exactly what it collects.
How I use it
To make and deliver your graphics (photos are processed on my servers to extract colors and composite the design), to store what you save (Album, teams, players), to grant purchases, to protect the service (rate limits), and to understand usage in aggregate.
Children
BleacherBrag accounts are for adults — parents, guardians, and family members. I do not knowingly let children under 13 create accounts. Photos of minors are uploaded by the adults who control the account, and those adults control them: saved content can be deleted at any time, and deleting your account removes everything.
Sharing
I do not sell personal information, and I do not share it for advertising. Data is handled by service providers only as needed to run BleacherBrag:
- Amazon Web Services — hosting, storage, and delivery.
- Photoroom — when a graphic uses background removal, the photo is sent to Photoroom's API to produce the cutout.
- Google — Firebase Authentication operates sign-in. See "Third-party code in the app" for what Google keeps.
- Apple / Google — payments, and platform sign-in when you use the Apple or Google button.
When you share a graphic, free shares include a "Made with BleacherBrag" caption with a link. If someone taps that link, my own redirector counts the tap with a coarse platform label (iPhone/Android/other) — no cookies, no fingerprinting, and no IP address or advertising identifiers are kept.
Storage and retention
- Uploaded source photos are held briefly for rendering and expire within about a week (at most 8 days) (a purchased graphic's source is kept so it can be re-rendered cleanly).
- A finished graphic is placed in your Album automatically so you do not lose it, and expires after about 30 days. Saving it (or purchasing it) keeps it until you delete it.
- Team and player profiles are kept until you delete them.
- Deleting your account (Account → Delete Account) permanently removes your account, profiles, graphics, and purchase records from my systems.
- One exception: if a graphic uses background removal, the cut-out subject is cached for up to 30 days so the same photo is not sent to Photoroom twice. That cache is keyed by a fingerprint of the image itself and is not linked to your account, so deleting your account does not clear it — every entry expires on its own within 30 days.
Third-party code in the app
The app embeds these Google SDKs. None is an advertising SDK, and each ships an Apple privacy manifest declaring no tracking.
- Firebase Authentication (both platforms) — signs you in and keeps you signed in.
- Google Sign-In (iOS) — the Google button. Its own privacy manifest declares that it may collect a coarse location, a device identifier and usage data, some of it for Google's own analytics. None of that reaches me — it is collected by Google, under Google's privacy policy. Apple aggregates every embedded SDK's manifest into the app's App Store privacy report, so it is listed there whether or not you ever tap that button.
- Google Play Billing (Android) — runs the purchase itself. Payment details go to Google Play; I never see a card number.
- Google Play In-App Review (Android) — shows the "rate this app" sheet, at most three times ever and no more often than once every 90 days, and only after you save or share a finished graphic. It reports nothing back to me — not whether the sheet appeared, and not what you rated.
What Google keeps for sign-in
Firebase Authentication is a Google service, so some sign-in data is held by Google rather than by me. Per Google's Privacy and Security in Firebase:
- IP addresses. Firebase Authentication logs the IP address of sign-in requests and retains it for a few weeks, to detect and block abuse. I do not receive or store IP addresses anywhere in this product.
- Where it is processed. Firebase Authentication processes this data exclusively in data centers in the United States.
- After you delete your account. Deleting your account removes your data from my systems right away (above). Google clears the remaining authentication data from its live and backup systems within 180 days.
Security
Data is encrypted in transit, and your signed-in session is kept by Firebase's SDK in your device's own app-private storage (the iOS Keychain; app-private files on Android). Access to your images uses short-lived, signed links.
Your controls
Inside the app you can export your data (Account → Export my data), delete individual items, or delete your account entirely. Delete your account and data is the step-by-step page — including how to ask for a deletion if you no longer have the app installed. For anything else, write to support@bleacherbrag.com and I will honor it.
Changes
If this policy changes, I will update the effective date above and, for material changes, note it in the app or on this page.