Pick Six Utah

Privacy

Last updated 28 August 2026

Pick Six Utah is a pick’em game for Utah high school football. It collects what it needs to run the game and nothing else. There are no analytics, no advertising, and no tracking of any kind, so nothing here is shared with anyone for marketing.

Who runs this

Pick Six Utah is operated by Defi LLC. Questions, complaints, and deletion requests go to privacy@picksixut.com, and we answer them.

What we collect

When you sign in

You sign in with Apple or with a code sent to your email address. Either way we store an account identifier and your email address. If you use Sign in with Apple and choose to hide your email, Apple gives us a relay address instead and we never see your real one.

There is no password, because there is nothing to set one on.

Your profile

• A handle. Dealt by the app, never typed. There is no username field anywhere in the product, which is deliberate: it means there is nothing for anyone to put their real name into.
• The part of Utah you say you are from. One of ten regions you choose yourself. This is not your location. The app never requests location access and could not read it if it wanted to.
• A school, if you pick one. Optional, and changeable at any time.
• When you joined, and whether you were one of your school’s first fifty members.

How you play

• The games you pick and which side you took.
• Your votes for which matchups should be featured.
• Your weekly and season scores.
• Any private groups you create or join, and their names.

Notifications

If you turn notifications on, we store a push token for that device, which platform it is, and which of the three notification types you want. We also record the day we last sent you each type, so you never get more than one a day. Turning notifications off, or signing out, removes the token.

Feedback

If you send a suggestion, we store what you wrote and your handle. Suggestions are one way: they go to whoever runs the app and are never shown to another user.

What other people can see

Your handle, your region, your school, your scores, and your week’s results appear on leaderboards and on your public profile, which anyone signed in can open by tapping you on a board. Group members can see the same about each other.

Your email address is never shown to another user, and neither is anything you send as feedback.

What we never collect

• Your location. The app has no location permission.
• Your contacts, photos, camera, microphone, or calendar.
• Anything for advertising. There are no ad networks in the app.
• Analytics or behavioural tracking. There is no analytics SDK in the app.

We also do not sell or rent anything to anybody, and we never will. There is no business here that would be improved by doing so.

Who else touches your data

These are service providers doing work for us, not partners we share data with.

• Apple, if you use Sign in with Apple, and to deliver notifications to iPhones.
• Supabase, which handles sign-in and stores your account identifier and email.
• Expo, whose push service relays notifications to Apple and Google.
• Our hosting and database providers, which store the game data described above.

Game schedules and scores come from a public sports feed. Nothing about you is ever sent there.

Deleting your account

Open the app, go to Profile, and choose Delete account. It asks twice, then removes your handle, your picks, your votes, your scores, your group memberships, your notification tokens, and any groups you created. It cannot be undone and there is no recovery window.

If you would rather we did it, email privacy@picksixut.com from the address on the account.

How long we keep things

Account and game data stay while the account exists, so that season standings hold up. When you delete the account it goes with it. Feedback you sent is kept without your account attached, because a suggestion still stands after its author leaves.

Age

This app is about high school football and is meant for people aged 13 and over. We do not knowingly collect anything from children under 13. If you believe a child under 13 has an account, email us and we will remove it.

Security

Sign-in tokens are verified on every request and stored in the device keychain. The app has no direct database access: everything goes through our own API, so the rules that matter, like the kickoff lock, cannot be bypassed by a modified client.

Changes

If this policy changes in a way that matters, we will update the date at the top and say so in the app before the change takes effect.