Privacy Policy

1.1 Information You Provide. We collect information you provide directly, including: (a) account information, such as your name, email address, phone number, username, and password; (b) profile information, such as your photo, biography, sport, team, institution, graduation year, and athlete or alumni status; (c) content you create, post, upload, or send through the Service, including messages, photos, comments, and other User Content; (d) communications you send to us, such as support requests or reports of violations; and (e) any other information you choose to provide.

1.2 Information We Collect Automatically. When you use the Service, we automatically collect certain information, including: (a) device and technical information, such as device type, operating system, unique device identifiers, and mobile network information; (b) usage and log information, such as the features you use, pages or screens you view, access times, and interactions; (c) approximate location derived from your IP address (we do not collect precise geolocation without your permission); and (d) information collected through cookies and similar technologies (see Section 5).

1.3 Information From Third Parties. We may receive information about you from third parties, including: (a) athletic departments, alumni associations, or other institutions that invite you to the Service or that provide roster or alumni information in connection with a partnership; (b) other users who provide information relating to you (for example, by referring or connecting with you); and (c) service providers that help us operate, secure, and analyze the Service.

1.4 Categories, Purposes, and Retention (Notice at Collection).The following table summarizes the categories of personal information we collect, why we use them, and how long we keep them, and also serves as our notice at the point of collection. Retention periods marked in brackets are subject to your confirmation of Legacy Locker's actual retention schedule.

We use the information we collect to: (a) provide, operate, maintain, and improve the Service; (b) create and manage your account and authenticate you; (c) enable you to connect and communicate with other users and the athlete-alumni community; (d) personalize your experience and provide relevant content and recommendations; (e) communicate with you, including by email, push notification, and, where you have opted in, SMS or text message, about the Service, updates, and support; (f) promote safety and integrity, including to moderate content, investigate and prevent fraud, abuse, and violations of our Terms, and enforce our policies; (g) measure and analyze usage, including to track Service success metrics and develop new features; and (h) comply with legal obligations and protect our legal rights.

We may use automated and AI-assisted features, such as content recommendations, search, and content-moderation tools, as described in Section 2.3 of the Terms of Service. We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you without a lawful basis, and where we engage in profiling, you may exercise the rights described in Section 8.

3.1 With Other Users. Your profile and the content you post are shared with other users consistent with the features of the Service and your settings. Information you choose to make public may be viewed, copied, and shared by others.

3.2 With Service Providers. We share information with vendors and service providers that perform services on our behalf, such as cloud hosting, data storage, analytics, customer support, and communications (including email, push-notification, and SMS providers). These providers are permitted to use information only to provide services to us.

3.3 With Institutions. Where you access the Service through, or are affiliated with, a partner institution (such as an athletic department or alumni association), we may share information with that institution in connection with the Service, as described at the point of collection or in our arrangements with that institution.

3.4 For Legal and Safety Reasons. We may disclose information if we believe in good faith that doing so is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms and other agreements; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Legacy Locker, our users, or the public.

3.5 Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy.

3.6 With Your Consent. We may share information for other purposes with your consent or at your direction.

8.1 Account and Communications. You can review and update your account and profile information at any time in the Service. You may opt out of promotional emails by using the unsubscribe link, opt out of SMS messages by replying STOP, and manage push notifications and app permissions through your device settings. You may delete your account as described in Section 6.

8.2 State Privacy Rights (Generally). Depending on where you live, applicable law may give you the right to: (a) confirm whether we process your personal information and access it; (b) correct inaccuracies; (c) delete your personal information; (d) obtain a portable copy of your personal information; and (e) opt out of targeted advertising, the sale of personal information, and certain profiling. Where required, you also have the right to appeal a denial of your request and to be free from discrimination for exercising your rights.

8.3 California (CCPA/CPRA). If you are a California resident, you have the rights described in Section 8.2, including the rights to know, delete, and correct your personal information and to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. In the preceding twelve (12) months, we have collected the categories of personal information described in Section 1 (identifiers, customer records, internet or network activity, approximate geolocation, and audiovisual information such as photos), from the sources described in Section 1, for the business purposes described in Section 2, and have disclosed such information to the categories of recipients described in Section 3. We do not sell or share personal information as described in Section 4. You may submit requests as described in Section 8.5, and may use an authorized agent to do so.

8.4 Minnesota (MCDPA). If you are a Minnesota resident, the Minnesota Consumer Data Privacy Act (Minn. Stat. §§ 325M.10 to 325M.21) gives you the rights described in Section 8.2, and additionally the right to obtain a list of the specific third parties to which we have disclosed your personal data and, where we engage in certain profiling, the right to question the result of the profiling and to review certain information about it. You may exercise these rights and appeal as described in Section 8.5.

8.5 How to Exercise Your Rights. To submit a privacy request, contact us at admin@legacylockerapp.com or through the Service. We will verify your request using information associated with your account and will respond within the time required by applicable law (generally forty-five (45) days, with an extension where permitted). We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our response or contacting us at the same address; if your appeal is denied, you may contact the applicable state attorney general.