Privacy Policy
Crucible Solutions, Inc. (“Crucible,” “we,” “us,” or “our”) operates Superflexed, a fantasy football assistant available at superflexed.com and in the Superflexed iOS app (together, the “Service”). This Privacy Policy explains what personal information we collect through the Service, how we use and share it, and the choices you have. Your use of the Service is also governed by our Terms of Use.
1. Information we collect
Information you give us
- Account information. You sign in with Google or Apple. We receive your name, your email address and, from Google, your profile photo. If you use Apple’s Hide My Email, we receive a private relay address instead of your email address. We never receive your Google or Apple password.
- Conversations. We store the questions you ask Coach, Coach’s answers, the titles of your conversations, and images you attach. Before an image is uploaded, the app removes information embedded in the file, such as where a photo was taken.
- Preferences and saved notes. We store your settings, such as the coach you chose, and notes Coach saves to remember your preferences in later conversations.
- Fantasy platform details. To connect Sleeper, you enter your Sleeper username. To connect Yahoo, you sign in to Yahoo as described below.
- Messages to us. If you contact us, we keep your message and your contact details.
Information from fantasy platforms
When you connect a fantasy platform, we retrieve your leagues and keep them up to date while the connection is active. This includes league settings and scoring rules, rosters, lineups, matchups, scores, standings, and transactions. It also includes information the platform shows to members of your league about the other teams in it, such as team names and managers’ display names and profile images.
- Yahoo. You sign in to Yahoo in a secure browser session run by our service provider Anchor Browser. We never see or store your Yahoo password. Anchor keeps the signed-in Yahoo session so that we can read your league data, and we only read from Yahoo; we don’t make changes to your Yahoo account or leagues.
- Sleeper. We use your username to retrieve your public Sleeper profile and leagues.
Information collected automatically
- Device and log information. Our servers record information such as your IP address, browser or device type, operating system, the pages and features you use, and the date and time of your requests. For each signed-in session, we keep a description of the browser or device it came from.
- Product analytics. We use PostHog to understand how the Service is used, such as which features people use and whether questions are answered successfully. Analytics events are linked to a random identifier rather than your name or email address. We don’t send PostHog your name, your email address, the content of your questions or Coach’s answers, or your league information, and we don’t record your screen.
- Cookies and device storage. On the web, we use cookies to keep you signed in, protect your account against forged requests, and keep a guest conversation. PostHog stores an analytics identifier in a cookie and in your browser’s local storage, and we use local storage for preferences such as the coach you chose. In the iOS app, we store your sign-in in the iOS Keychain and keep a copy of your conversations on your device. We don’t use advertising cookies, and we don’t allow advertising networks to track your activity on other websites through the Service.
Using Superflexed without an account
You can ask a limited number of questions without signing in. We store those questions and Coach’s answers with a guest identifier kept in a cookie, so that the conversation can continue if you create an account. We delete guest conversations after 30 days without use.
2. How we use information
We use personal information to:
- provide the Service, including answering your questions with your league’s context, keeping your leagues up to date, preparing your weekly Gameplans and sending them to you in the app and by email, and remembering your preferences;
- keep the Service secure and reliable, including preventing abuse and investigating problems;
- understand how the Service is used and improve it;
- communicate with you about your account, your requests, and changes to the Service or this policy; and
- comply with legal obligations and enforce our Terms of Use.
We don’t sell your personal information, share it for cross-context behavioral advertising, or use it to show you ads.
3. How Coach uses AI
Coach’s answers are generated by AI models from OpenAI, which we use through OpenAI’s API. To answer a question, we send OpenAI your message, any image you attached, earlier messages in the conversation, the league information relevant to the question, and your saved preferences. We also send league information to OpenAI to prepare weekly gameplans.
To answer questions about recent NFL news, Coach may search the web through Parallel Web Systems. Coach writes these searches about public NFL topics, such as a player’s injury status. We don’t send your account details or your conversation history with them.
4. How we share information
We share personal information only as described in this policy:
- Service providers. We use companies that process information on our behalf to run the Service: Railway (hosting and databases), OpenAI (AI models), Parallel Web Systems (web search), Anchor Browser (Yahoo sign-in sessions), PostHog (product analytics), and Resend (sending Gameplan emails, which receives your email address and the Gameplan). They may use the information only to provide their services to us.
- Sign-in providers. When you sign in with Google or Apple, they handle the sign-in under their own privacy policies.
- Fantasy platforms. To retrieve your leagues, we send requests to Yahoo or Sleeper on your behalf.
- Images from other websites. Player photos, team logos, and profile images are loaded from servers run by the NFL, ESPN, Sleeper, Yahoo, and Google. Your browser or device connects to those servers directly, so they receive your IP address and device information.
- Legal requirements and protection. We may disclose information if we believe it is required by law or legal process, or needed to protect the rights, property, or safety of our users, the public, or Crucible.
- Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
- With your consent. We may share information when you ask us to or agree to it.
We don’t show your conversations to other users, including other members of your leagues.
5. How long we keep information
- We keep your account information, conversations, saved notes, and league data for as long as you have an account, unless you delete them sooner.
- When you delete a conversation, we permanently delete it, including its messages, images, and Coach’s answers.
- When you disconnect a fantasy platform, we delete that connection and the league data we retrieved through it, and we ask Anchor Browser to delete your Yahoo sign-in session. Your conversations are kept.
- When you delete your account, we delete your account information, conversations, saved notes, platform connections, and league data from our production systems. We also ask Anchor Browser to delete your Yahoo sign-in session and PostHog to delete the analytics data linked to your account. Copies may remain in backups for a limited time.
- We delete guest conversations after 30 days without use.
- We delete records of signed-in sessions 30 days after the session expires or you sign out.
- Our hosting provider keeps server logs for a limited time.
6. How we protect information
We use safeguards designed to protect personal information. They include encrypting data in transit with HTTPS, encrypting the credentials for your fantasy platform connections, and storing only scrambled (hashed) versions of sign-in session tokens. No method of transmission or storage is completely secure, so we can’t guarantee absolute security. If you think your account has been compromised, contact us.
7. Your choices and rights
- Delete your account. Open Settings on the web or in the iOS app and choose Delete account.
- Access, correct, or delete information. Email us to ask for a copy of your personal information, to correct it, or to delete it.
- Disconnect a fantasy platform. Open Settings and choose Disconnect next to the platform.
- Gameplan emails. Turn off Email my Gameplans in Settings, or use the unsubscribe link in any Gameplan email. Your Gameplans still appear in the app.
- Device permissions. The iOS app asks for camera access only when you take a photo to attach. You can change this in iOS Settings.
Depending on where you live, including California, you may have the right to know what personal information we collect and how we use and disclose it; to access, correct, or delete it; to get a copy in a portable format; and to opt out of the sale or sharing of personal information or its use for targeted advertising. We don’t sell or share personal information or use it for targeted advertising.
To make a request, email us at support@superflexed.com from the email address on your account. We may need to confirm your identity before we act on your request, and we will respond within the time required by law. You may use an authorized agent to make a request for you; we may ask for proof that the agent is authorized. If we deny your request, you may appeal by replying to our decision. We won’t discriminate against you for exercising your privacy rights.
8. Do Not Track
When your browser sends a Do Not Track signal, our web app doesn’t send product analytics from your browser. Our servers still record a limited set of events, such as when an account is created or a question is asked, without the content of your questions.
9. Children
Superflexed is for people 18 and older. We don’t knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.
10. Where we process information
We are based in the United States. We and our service providers process and store information in the United States. If you use the Service from outside the United States, your information will be transferred to the United States, where data protection laws may differ from those where you live.
11. Third-party services
Yahoo, Sleeper, Google, Apple, and other third-party services you use with Superflexed have their own privacy policies, and we aren’t responsible for their practices. Links in Coach’s answers can lead to websites we don’t control.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the date at the top. If we make material changes, we will notify you through the Service or by email before they take effect.
13. Contact us
Questions or requests about this policy or your personal information can be sent to:
Crucible Solutions, Inc.support@superflexed.com