Privacy Policy

Cued Up LLC ("Cued Up," "we," "us," or "our") operates the Cued Up platform at cuedupapp.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.

By using Cued Up, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, username, and optionally a profile photo. If you sign up through a third-party provider (e.g., Google), we receive basic profile information from that provider.

Game and Activity Data

We collect data about your games, including scores, opponents, Cue Ratings, achievements, league participation, and match history. This data powers your stats, leaderboard rankings, and profile.

Location Data

With your permission, we collect your approximate location to help you discover nearby venues. You can disable location access at any time through your browser or device settings. We do not track your location in the background.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other financial credentials on our servers. We receive only a transaction confirmation and basic billing details (e.g., last four digits of your card) from Stripe.

Usage and Device Data

We automatically collect information about how you interact with our platform, including pages visited, features used, browser type, device type, operating system, and IP address.

User-Generated Content

This includes posts, chat messages, direct messages, comments, and any other content you submit through the platform.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our platform and services
• Process transactions and manage subscriptions
• Calculate and display player stats, Cue Ratings, and leaderboards
• Show you relevant venues based on your location
• Send you notifications about games, challenges, and league activity
• Provide customer support
• Detect and prevent fraud, abuse, or violations of our terms
• Analyze usage trends to improve the product

3. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

Service Providers

We use the following third-party services to operate our platform:

• Supabase — Backend infrastructure, database, authentication, and file storage (hosted on AWS US regions)
• Stripe — Payment processing for subscriptions and Credits; Apple Pay and Google Pay are tokenized through Stripe
• Vercel — Website hosting, edge functions, and deployment
• Resend — Transactional email delivery (welcome, password reset, receipts, drip campaigns)
• Google Analytics 4 — Anonymous website traffic analytics. Loaded with Consent Mode v2 set to denied by default; only fires after you click Accept in the cookie banner
• Firebase Analytics (Google) — Anonymous usage analytics in the mobile app, reporting into the same Google Analytics property as the website. Collection is off until you turn it on: the app asks once on first launch and stays off unless you agree, and you can change your answer at any time in Settings → Privacy → Share Anonymous Usage Data. It records which screens you open and which features you use — for example that a game was recorded, or that a venue page was viewed. It does not record your name, email, messages, or location, and we do not collect an advertising identifier or use this data for advertising or cross-app tracking
• Expo / Apple Push Notification Service / Firebase Cloud Messaging — Push notification delivery for the mobile app (game alerts, DMs, league updates)
• Twilio — SMS delivery for two-factor authentication only (no marketing SMS)
• Nominatim (OpenStreetMap) — Address geocoding for venue locations (no personal data sent)
• Anthropic (Claude) — Generates optional written match recaps and lays out venue TV screens. Receives game details and player display names; see Automated Content and AI below

These providers access your data only as necessary to perform their services and are bound by their own privacy policies and data processing agreements.

Automated Content and AI

Some written content in Cued Up is generated by artificial intelligence. We use Anthropic's Claude models for two things: writing optional recap summaries of completed matches, and arranging the layout of venue TV display screens.

What is sent: match details (game type, duration, shots taken, outcome) and the display names of the players in that match. Because a display name may be your real name if you chose to use one, treat it as personal information.

What is never sent: your email address, password, payment or card details, precise location, private messages, or any data belonging to players who were not in the match.

Training: Anthropic's commercial API terms provide that data submitted through the API is not used to train its models. We do not train any model of our own on your data.

No automated decisions about you: AI is used only to write descriptive text and arrange screen layouts. It is never used to decide your rating, your eligibility, your access to any feature, your billing, or anything else that affects you. Recaps are descriptive commentary and may contain errors; they are not an official record of a match. The official record is the game data itself.

Public Profile Information

Your username, profile photo, game stats, Cue Rating, and achievements are visible to other users. This is core to how the platform works. You can control what additional information appears on your profile through your settings.

Venue Owners

When you check in at a venue or join a table queue, the venue owner and their staff can see your username and basic profile information.

Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights, or ensure user safety.

4. Cookies and Local Storage

We use cookies and browser localStorage to keep you signed in, remember your preferences (such as theme and persona settings), and maintain session state. We do not use third-party advertising cookies. You can clear cookies and localStorage through your browser settings, though doing so may require you to sign in again.

5. Advertising

Free-tier users may see promotional banners within the app. These are served internally by Cued Up and do not involve third-party ad networks or tracking. We do not sell your data to advertisers. Pro subscribers do not see ads.

6. Data Storage

We store your data on secure servers provided by Supabase (hosted on AWS). Payment processing is handled by Stripe. Email communications are sent via Resend. We do not store your payment card details — those are held securely by Stripe.

7. Data Retention

We retain your account data and game history for as long as your account is active. If you delete your account, we will remove your personal information from our systems within 30 days, except where we are required by law to retain certain records (e.g., transaction history for tax purposes).

Aggregated, anonymized data (such as overall platform statistics) may be retained indefinitely.

8. Your Rights

You have the right to:

• Access your data — Request a copy of the personal information we hold about you
• Export your data — Download your game history, stats, and profile information
• Delete your account — Permanently delete your account and associated data
• Correct your data — Update inaccurate or incomplete information
• Withdraw consent — Revoke location permissions or other optional data collection at any time

To exercise any of these rights, contact us at support@cuedupapp.com.

9. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), row-level security on our database, and secure authentication through Supabase Auth. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights:

• Right to know what personal information we collect, use, disclose, and (if applicable) sell or share
• Right to delete personal information we hold about you, subject to legal-retention exceptions
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing — Cued Up does not sell or share your personal information for cross-context behavioral advertising
• Right to limit use of sensitive personal information — we do not use sensitive personal information for any purpose other than providing the requested service
• Right to non-discrimination for exercising any of these rights

To exercise any of these rights — including submitting a "Do Not Sell or Share My Personal Information" request — email support@cuedupapp.com with the subject line "California Privacy Request." We will respond within 45 days. We may need to verify your identity before fulfilling the request.

11. EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, the GDPR (or UK GDPR) gives you the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing.

Our legal bases for processing your personal data are: (a) contract — processing necessary to provide the service you signed up for; (b) legitimate interest — operating, securing, and improving the platform; (c) consent — for analytics cookies, in-app usage analytics, push notifications, and marketing emails, which you can withdraw at any time; (d) legal obligation — tax, accounting, and law-enforcement records.

Cued Up is operated from the United States. When we transfer personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (or equivalent safeguards) executed with our processors. You have the right to lodge a complaint with your local supervisory authority.

To exercise any GDPR right, email support@cuedupapp.com with the subject line "GDPR Request." We will respond within 30 days.

12. International Data Transfers

Cued Up is based in the United States, and our infrastructure providers (Supabase, Vercel, Stripe, Resend) process data primarily in US regions. If you access Cued Up from outside the United States, your information will be transferred to and processed in the United States, which may have data-protection laws that differ from those in your country.

13. Children's Privacy (COPPA)

Cued Up is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Our minimum age of registration is 13. If you are under 13, do not create an account or submit any personal information.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it as quickly as possible. Parents or guardians who believe their child under 13 has provided personal information may contact us at support@cuedupapp.com to request review and deletion.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and, for significant changes, notify you through the platform or by email. Your continued use of Cued Up after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: