Privacy policy.

FGA Labs ("FGA Labs", "we", "us") is a venture studio that builds and operates websites, web applications, and mobile apps. This Privacy Policy applies to fgalabs.com and to every product, app, API, and service we operate that links to this policy (together, the "Services"). Where a specific product publishes its own privacy policy, that policy controls for that product to the extent it conflicts with this one.

This policy covers visitors to our sites, people who create accounts or use our apps, people who contact or apply to us, and people whose information is entered into a Service by someone else, such as a team, school, league, or event organizer.

Information you provide directly. This includes account and profile details (name, email address, username, photo, phone number), content you create or upload (posts, messages, files, images, scores, reviews, and anything you enter into an AI feature such as prompts, questions, and documents), payment details processed by our payment providers, communications with us, and job applications.

Information collected automatically. When you use the Services we collect device and browser type, operating system, app version, IP address and approximate location derived from it, pages and screens viewed, actions taken, referring URLs, timestamps, crash reports, and performance data. Some of this is collected using cookies and similar technologies described below.

Information from third parties. If you sign in with a third-party account such as Apple or Google, we receive the information that provider is authorized to share, such as your name and email address. App stores provide us with purchase and subscription status. Organizations that use our Services may enter information about their members and participants. We may also receive information from publicly available sources.

Device permissions. Some apps ask for access to your camera, photo library, precise location, contacts, microphone, or push notifications in order to provide a feature, such as finding nearby courts or uploading a photo. We only access these with your permission, and you can revoke it at any time in your device settings.

Some Services include features powered by artificial intelligence and machine learning, such as generating or summarizing text, answering questions, classifying or tagging content, producing images, transcribing audio, making recommendations, or automating support replies ("AI Features"). This section explains how information is handled when you use them.

• What is processed: the inputs you provide to an AI Feature (prompts, uploaded files, images, audio, and the surrounding context needed to respond), the outputs generated, and related usage data.
• Third-party AI providers: to run AI Features we send inputs and relevant context to third-party model providers acting as our service providers. We only use providers whose terms prohibit them from using our customers' content to train their models, and who process it under confidentiality and security obligations.
• No training on your content without consent: we do not use your personal information or the content you submit to AI Features to train models that are made available to others unless you expressly opt in. We may use de-identified or aggregated information, and outputs that you rate or flag, to evaluate and improve AI Features.
• Human review: we may review inputs and outputs to investigate abuse, debug problems, respond to your support requests, or comply with law. Reviewing is limited to what is needed for those purposes.
• Accuracy: AI outputs are generated automatically and may be inaccurate, incomplete, or biased. They are not professional advice. Please review them before relying on them.
• Automated decisions: we do not use AI Features to make decisions that produce legal or similarly significant effects about you without human involvement. If that ever changes for a specific Service, we will explain it there and provide a way to request human review.
• Sensitive information: please do not enter health, financial account, government ID, or other sensitive personal information into an AI Feature unless that Service is specifically designed for it and says so.

We use the information we collect to:

• Provide, operate, maintain, and secure the Services, including creating accounts, processing payments, syncing data across devices, and delivering AI Features.
• Personalize your experience, such as remembering preferences, showing relevant content, and providing recommendations.
• Communicate with you about your account, transactions, security, and changes to the Services, and, with your consent where required, send product updates and marketing you can opt out of at any time.
• Respond to inquiries, provide customer support, and process job applications.
• Understand how the Services are used, measure performance, fix bugs, and develop new features and products.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms.
• Comply with legal obligations and enforce our agreements.

For people in the European Economic Area, United Kingdom, and similar jurisdictions, we process personal information on the following legal bases: performance of a contract with you; our legitimate interests in operating, improving, securing, and marketing the Services, balanced against your rights; your consent, which you may withdraw at any time; and compliance with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the following circumstances:

• Service providers that process information on our behalf, including cloud hosting and infrastructure, databases and authentication, payment processing, email and push notification delivery, analytics and crash reporting, customer support tools, and AI model providers. They may only use the information to provide services to us.
• Organizations you belong to. If you use a Service through a team, school, league, club, or event organizer, that organization's administrators may see your activity and information within their workspace, and their own policies apply to how they use it.
• Other users and the public. Some Services include public profiles, leaderboards, brackets, scores, reviews, community posts, and messaging. Information you choose to make public or send to others can be seen by them and may be indexed by search engines.
• App stores and platforms. Apple, Google, and similar platforms receive information related to downloads, purchases, and subscriptions under their own privacy policies.
• Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our terms, or protect the rights, property, or safety of FGA Labs, our users, or others.
• Business transfers. If a product or FGA Labs is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your consent or at your direction.

Some Services may display advertising. Where a Service shows ads, we will disclose that within the Service, along with any ad-related data practices that go beyond what this policy describes.

We use cookies, local storage, software development kits, and similar technologies to keep you signed in, remember your preferences, understand traffic and usage, measure performance, and protect against abuse. These fall into three groups: strictly necessary (required for the Services to work), functional (preferences and settings), and analytics (aggregate usage and performance).

You can control cookies through your browser settings, and most mobile platforms let you limit ad tracking and reset identifiers. Disabling necessary cookies may prevent parts of the Services from working. We honor Global Privacy Control signals where the law requires it.

We keep personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Account information is kept while your account is active and for a limited period afterward. Content you delete is removed from active systems promptly and from backups on a rolling schedule. Inputs and outputs of AI Features are retained only as long as needed to provide the feature, maintain your history where the Service offers one, and meet safety and legal requirements. We may keep de-identified or aggregated data indefinitely.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for stored data with our infrastructure providers, access controls, and monitoring. Some Services encrypt content on your device before it is sent to us so that we cannot read it. No system is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information, we will notify you and the relevant authorities as required by law.

FGA Labs is based in the United States, and our service providers may be located in the United States and other countries. If you use the Services from outside the United States, your information will be transferred to and processed in countries that may have different data protection laws than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, to withdraw consent, and to not be discriminated against for exercising these rights. To exercise them, use the account settings in the relevant Service or contact us at the address below. We may need to verify your identity before responding, and we will respond within the time required by law. If we deny a request, you may appeal by replying to our response.

• Delete your account and associated data from within the app where available, or by emailing us.
• Opt out of marketing email using the unsubscribe link in any message. We will still send transactional and security messages.
• Turn off push notifications and revoke device permissions in your device settings.
• Residents of California and other U.S. states with privacy laws may exercise the rights above, and may use an authorized agent to do so. We do not sell or share personal information as those terms are defined under those laws.
• Residents of the EEA, UK, and Switzerland may also lodge a complaint with their local data protection authority.

The Services are not directed to children under 13, and we do not knowingly allow children under 13 to create accounts unless a specific Service says otherwise and obtains verifiable parental consent. Some Services are used by schools, leagues, coaches, and event organizers who enter information about participants, including minors, such as names, teams, scores, and statistics. In those cases the organization is responsible for having the authority and any required consent to share that information, and we process it on the organization's behalf. Parents and guardians who believe we have collected information about their child without appropriate consent, or who want to review or remove it, can contact us at the address below.

The Services may link to or integrate with websites, platforms, and services we do not control, including app stores, social networks, payment providers, and sign-in providers. Their privacy practices are governed by their own policies, and we encourage you to read them.

We may update this policy from time to time. When we do, we will post the new version here and update the date at the top. If a change materially reduces your rights or changes how we use information already collected, we will provide additional notice, such as an email or an in-app message, before the change takes effect.

If you have questions about this policy or our data practices, or want to exercise your rights, email us at hello@fgalabs.com. FGA Labs is a remote-first company based in the United States. We aim to respond to every request within 30 days.