Privacy Policy

This Privacy Policy for Big League Beats (“we,” “us,” or “our”), operated by Ryan Taylor, describes how and why we access, collect, store, use, and/or share (process) your personal information when you use our services (“Services”), including when you:

• Use the Big League Beats mobile application for iOS (the “App”)
• Visit our website at www.bigleaguebeats.com or any website of ours that links to this Privacy Policy
• Use Big League Beats — a platform designed to manage custom walk-up songs, announcer clips, and game-day audio experiences for your baseball or softball team
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@bigleaguebeats.com.

This summary provides key points from our Privacy Policy, but you can find out more details about any of these topics by reading the full sections below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. This may include names, email addresses, player information, audio recordings, and device/usage data.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We receive limited information from authentication providers (Apple Sign-In, Google Sign-In) when you create an account or log in. We do not purchase or otherwise obtain personal information from data brokers.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We also process player information through AI services to generate songs and announcer clips when you request them.

In what situations and with which parties do we share personal information? We share information with specific third-party service providers necessary to operate the Services, including Supabase, RevenueCat, Anthropic, ElevenLabs, Auphonic, Resend, Sentry, Expo, and Vercel. We do not sell your personal information.

How do we keep your information safe? We use Supabase's cloud infrastructure with row-level security policies, encrypted storage for authentication tokens, and private storage buckets for audio files and images. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information, including the right to access, correct, or delete your data.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at support@bigleaguebeats.com. We will consider and act upon any request in accordance with applicable data protection laws.

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. When and With Whom Do We Share Your Personal Information?
4. Do We Offer Artificial Intelligence-Based Products?
5. How Do We Handle Your Social Logins?
6. Error Tracking and Crash Reporting
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Children's Privacy (COPPA)
10. What Are Your Privacy Rights?
11. Controls for Do-Not-Track Features
12. Do United States Residents Have Specific Privacy Rights?
13. Mobile Application & On-Device Data
14. Auto-Renewable Subscriptions
15. Device Permissions (Mobile App)
16. Do We Make Updates to This Policy?
17. How Can You Contact Us About This Policy?
18. How Can You Review, Update, or Delete the Data We Collect from You?

Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Names (your name and player names)
• Email addresses
• Contact preferences
• Profile information (display name, avatar)
• Player information: jersey number, baseball position, nicknames, playing style, favorite celebration
• Player phonetic name pronunciations (used for AI announcer generation)
• Player profile photos
• Team names, lineup configurations, and roster data

Audio Content. You may upload walk-up songs from your device or record announcer clips using your device's microphone. These audio files are uploaded to our cloud storage (Supabase) so they can be played back during games and synced across your devices. Recorded announcer clips may optionally be sent to Auphonic for audio enhancement processing (noise reduction, loudness normalization). The App requests microphone permission only when you choose to record an announcer clip.

Sensitive Information. We do not process sensitive personal information.

Payment Data. All purchases are processed exclusively through the Apple App Store. Apple handles all payment processing directly — we do not collect, store, or have access to your payment card information. Subscription status is managed through RevenueCat, which receives subscription state information from Apple but does not process payment details directly. You may review RevenueCat's privacy notice at: https://www.revenuecat.com/privacy.

Authentication Data. We offer account creation and login through Apple Sign-In, Google Sign-In, and email/password. When you authenticate through Apple or Google, we receive your name and email address from the respective provider. We do not receive or store your Apple or Google account passwords. Authentication is managed through Supabase Auth.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services. This may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take).
• Device Data. We collect device data such as information about your phone, tablet, or other device you use to access the Services. This may include your IP address, device and application identification numbers, hardware model, operating system, and system configuration information.
• Error and Crash Data. Through Sentry, our error tracking service, we collect crash reports, stack traces, device information, and session replay data when errors occur. This data helps us identify and fix bugs. See Section 6 for more details.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication. We process your information through Supabase Auth so you can create and log in to your account using Apple Sign-In, Google Sign-In, or email/password.
• To deliver and facilitate delivery of services. We process your information to provide you with the requested service, including storing team data, player profiles, and audio files in Supabase.
• To manage teams, rosters, and game-day playback. We process team, player, and lineup data to power the walk-up song and announcer clip experience during games.
• To generate AI content. When you request AI-generated songs or announcer clips, we send player names, team context, and related preferences to Anthropic (Claude) for lyric generation and ElevenLabs for audio generation. This data is sent only when you explicitly initiate a generation request.
• To enhance audio recordings. When you choose to enhance a recorded announcer clip, the audio file is sent to Auphonic for processing (noise reduction, speech isolation, loudness normalization).
• To manage subscriptions and purchases. Subscription state is synced through RevenueCat, which communicates with the Apple App Store on your behalf.
• To send transactional communications. We use Resend to deliver team invitation emails and support confirmation emails. Your email address is shared with Resend for this purpose.
• To respond to user inquiries and offer support. We process your information to respond to your inquiries and resolve any potential issues.
• To track errors and improve stability. Through Sentry, we collect crash reports and error data to identify and fix bugs across the mobile app, web app, and backend services.
• To enable offline playback. We process audio files for download and caching on your device for use without an internet connection.
• To evaluate and improve our Services. We may process information about how you use our Services to identify usage trends and improve your experience.
• To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

In Short: We share information with specific third-party service providers necessary to operate the Services. We do not sell your personal information.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Service Providers. We share data with the following providers as necessary to operate the Services:
  • Supabase — Cloud database, user authentication, and file storage. Stores all user accounts, team data, player profiles, audio files, and images. Data is hosted in the United States. Supabase implements row-level security (RLS) to ensure users can only access data belonging to their own teams.
  • RevenueCat — In-app subscription and purchase management. Receives subscription state from Apple to manage your Pro subscription and credit balance. Does not process payment card details directly. Privacy Policy.
  • Apple Sign-In / Google Sign-In — Authentication providers. We receive your name and email address when you sign in. We do not receive or store your Apple or Google passwords. Apple Privacy / Google Privacy.
  • Apple Music / MusicKit — Music catalog search and on-device playback. All playback is handled on your device through Apple's APIs. We do not access your Apple Music library, listening history, or account credentials. No listening data is sent to our servers.
  • Anthropic (Claude) — AI language model for song lyric generation. When you generate a song, player name, team name, and player preferences (playing style, celebration, etc.) are sent to Anthropic for processing. Privacy Policy.
  • ElevenLabs — AI audio generation for walk-up songs (music) and text-to-speech for announcer clips. Song lyrics, player names, and announcer script text are sent to ElevenLabs for audio generation. Name pronunciation previews may also be sent for text-to-speech processing. Privacy Policy.
  • Auphonic — Audio enhancement for recorded announcer clips. When you choose to enhance a recording, the audio file is uploaded to Auphonic for processing (noise reduction, speech isolation, loudness normalization). The enhanced file is returned and stored in Supabase. Privacy Policy.
  • Resend — Transactional email delivery. Email addresses are shared with Resend to deliver team invitation emails and support confirmation emails. Emails are sent from noreply@mail.bigleaguebeats.com. Privacy Policy.
  • Sentry — Error tracking and crash reporting. Collects device information, operating system, app version, stack traces, and session replay data when errors occur. This data is used exclusively for identifying and fixing bugs. Sentry is used across the mobile app, web app, and backend edge functions. Privacy Policy.
  • Expo / EAS (Expo Application Services) — Mobile app build and update infrastructure. Expo may collect basic device and app metadata as part of the build and update delivery process. Privacy Policy.
  • Vercel — Web hosting for www.bigleaguebeats.com. Vercel may collect standard web server logs including IP addresses, browser information, and page requests. Privacy Policy.

Each provider processes data in accordance with their own privacy policies linked above. We only share the minimum information necessary for each service to function. We do not sell your personal information to any third party.

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, “AI Products”). These tools are designed to enhance your experience by generating custom walk-up songs and announcer clips for your players.

Use of AI Technologies

We provide AI Products through the following third-party service providers:

• Anthropic (Claude) — Generates song lyrics based on player name, team name, playing style, and other player preferences you provide. Anthropic processes this data according to their privacy policy and does not use it to train their models.
• ElevenLabs — Generates music audio for walk-up songs based on the lyrics and style parameters, and generates text-to-speech audio for announcer introduction clips. Player names and script text are sent to ElevenLabs for processing.
• Auphonic — Enhances recorded announcer clips by applying professional audio processing (speech isolation, noise filtering, loudness normalization). Audio files are uploaded to Auphonic and the enhanced version is returned.

What Data Is Sent to AI Providers

When you generate AI content, the following information may be sent to our AI service providers:

• Player name and phonetic pronunciation
• Team name
• Player preferences (playing style, favorite celebration, nickname)
• Song style and mood preferences
• Audio files (for Auphonic enhancement only)

This data is sent only when you explicitly initiate a generation or enhancement request. We do not continuously or passively send player data to AI providers.

AI Content and Credits

AI generation in the App consumes credits from your account. Credits are charged when you save generated content, not when it is generated. You can preview AI-generated content before deciding to save it, and no credit is charged if you choose not to save.

In Short: If you choose to register or log in to our Services using Apple Sign-In or Google Sign-In, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your Apple ID or Google account. When you choose to do this, we receive certain profile information from the authentication provider, typically your name and email address.

Apple Sign-In offers the option to hide your email address, in which case Apple provides a private relay email address. We will use whichever email address is provided for account identification and communication.

We will use the information we receive only for the purposes that are described in this Privacy Policy or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party authentication provider. We recommend that you review their privacy policies to understand how they collect, use, and share your personal information.

In Short: We use Sentry to collect error reports, crash data, and session information to help us identify and fix bugs.

We use Sentry for error tracking and crash reporting across three areas of our Services:

• The Big League Beats mobile app (iOS)
• The Big League Beats website
• Our backend edge functions (server-side processing)

When an error or crash occurs, Sentry may collect:

• Device information (model, operating system, app version)
• Stack traces and error messages
• Session replay data (a reconstruction of user interactions leading to the error)
• Browser or app state at the time of the error
• IP address (used for general location context, not precise geolocation)

This data is used exclusively for identifying, diagnosing, and fixing bugs and performance issues. It is not used for marketing, advertising, or profiling purposes. You can learn more about Sentry's data practices in their privacy policy.

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this policy will require us keeping your personal information for longer than the period of time in which you have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Audio files (uploaded songs, AI-generated songs, announcer clips) and player photos are retained for as long as your account is active. Upon account deletion, we will delete your stored files within a reasonable timeframe.

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These include:

• Row-level security (RLS): Supabase enforces row-level security policies ensuring users can only access data belonging to their own teams.
• Private storage buckets: Audio files and images are stored in private cloud storage buckets with access controls managed by Supabase.
• Encrypted authentication tokens: Authentication tokens are stored securely on your device using encrypted storage.
• HTTPS encryption: All data transmitted between your device and our servers is encrypted in transit using HTTPS/TLS.

Despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

In Short: We do not knowingly collect data directly from children under 13. Accounts are managed by parents, guardians, and team administrators who are at least 18 years old.

Big League Beats is designed for use by coaches, parents, guardians, and team managers — not by children directly. Only adults (age 18 and older) may create accounts and use the Services.

Player profiles (including names, jersey numbers, photos, playing style, and other player information) are created and managed by adult team administrators, not by the players themselves. Adults who input player information into the Services represent that they have the authority to do so and, in the case of minors, that they are the parent, legal guardian, or authorized team administrator.

In compliance with the Children's Online Privacy Protection Act (COPPA):

• We do not knowingly collect personal information directly from children under 13.
• All player data is entered and managed by adult account holders, not by children.
• We do not allow children to create accounts or interact with the Services directly.
• Player information entered by adults (names, photos, etc.) is used solely for providing the Services and is not used for advertising or sold to third parties.

If we become aware that personal information has been collected from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information without parental consent, please contact us at support@bigleaguebeats.com.

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us using the contact details provided in Section 17 below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings in the App and update your user profile.
• Contact us at support@bigleaguebeats.com to request account deletion.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at support@bigleaguebeats.com.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

In Short: If you are a resident of California or other US states with data protection laws, you may have specific rights regarding your personal information, including the right to access, correct, or delete your data.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A — As long as the user has an account with us
• Category B — As long as the user has an account with us
• Category D — As long as the user has an account with us
• Category F — Up to 90 days for error/crash data (Sentry retention policy)
• Category H — As long as the user has an account with us

Sources of Personal Information

We collect personal information from the following sources: directly from you when you provide it, automatically through your use of the Services, and from third-party authentication providers (Apple Sign-In, Google Sign-In) when you create an account or log in.

How We Use and Share Personal Information

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information in Section 3.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights (California CCPA and Other State Laws)

You have rights under certain US state data protection laws. These rights may include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing support@bigleaguebeats.com or by referring to the contact details at the bottom of this document. We will respond to verifiable requests within the timeframes required by applicable law.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request.

California “Shine The Light” Law

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.

The Big League Beats mobile app stores certain data locally on your device to enable offline functionality:

• Offline audio cache: Walk-up songs and announcer clips you download for game-day use are cached on your device so they play without an internet connection.
• Game state: Your current position in the batting order is saved locally so you can leave and return to a game without losing your place. Game state automatically expires after 3 hours of inactivity. Game state may also be synced to the cloud for cross-device access.
• Authentication tokens: Stored securely on your device using encrypted storage.

This locally stored data remains on your device and is not transmitted to our servers except where noted above. The Services are hosted in the United States via Supabase (database and storage) and Vercel (website). If you access the Services from any other region of the world with laws governing personal data collection that differ from United States law, then through your continued use of the Services, you are transferring your data to the United States, and you expressly consent to have your data transferred to and processed in the United States.

Apple Music Integration

If you choose to use the Apple Music integration, the App uses Apple's MusicKit framework to search the Apple Music catalog and play tracks as walk-up songs. We do not access your personal Apple Music library, listening history, or Apple Music account credentials. All playback is handled through Apple's APIs on your device. Apple Music access requires a separate Apple Music subscription.

App Build and Updates

The App is built and distributed using Expo / EAS (Expo Application Services). Over-the-air updates may be delivered through Expo's update infrastructure. Basic device and app metadata may be collected by Expo as part of this process.

Big League Beats offers an optional auto-renewable subscription (“Pro”) through the Apple App Store. By subscribing, you agree to the following terms:

• Pricing: The Pro subscription is $19.99 per year. AI credit packs are available as a separate consumable purchase at $9.99 for 25 credits (Pro subscribers only).
• Billing: Payment is charged to your Apple ID account at confirmation of purchase. Apple handles all payment processing. We do not receive your payment card details.
• Renewal: Your subscription automatically renews unless you turn off auto-renewal at least 24 hours before the end of the current billing period.
• Renewal charge: Your account will be charged for renewal within 24 hours prior to the end of the current period at the then-current subscription price.
• Managing & canceling: You can manage or cancel your subscription at any time through your Apple ID account settings (Settings → Apple ID → Subscriptions). Cancellation takes effect at the end of the current billing period.
• Free trial: If offered, any unused portion of a free trial period is forfeited when you purchase a subscription.
• Subscription management provider: We use RevenueCat to manage subscription state and communicate with the Apple App Store. RevenueCat processes your subscription status but does not handle payment card details.

The App may request the following device permissions. Each permission is requested only when you use the related feature, and you can change these permissions at any time in your device settings:

• Camera: Used to take player profile photos and team photos directly from the app. The camera is only activated when you explicitly choose to take a photo.
• Microphone: Required to record announcer clips. Audio is only captured when you explicitly start a recording.
• Photo Library: Required to upload player profile photos and team photos from your device. Photos are only accessed when you explicitly choose to add or change a photo.
• Media & Apple Music: Required to search and play tracks from the Apple Music catalog as walk-up songs. Requires a separate Apple Music subscription.

In Short: Yes, we will update this policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

If you have questions or comments about this policy, you may email us at support@bigleaguebeats.com or contact us by post at:

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please email us at support@bigleaguebeats.com with the subject line “Data Access Request.” We will respond to your request within the timeframes required by applicable law.