Skip to main content
Back to home
Legal

Privacy Policy

PickleBuddy Mobile Application & Website

Effective May 8, 2026 · Last updated May 8, 2026

1. Who We Are

PickleBuddy is a product of SudoWorks, LLC, a company organized under the laws of the State of North Carolina, United States. In this Privacy Policy, "PickleBuddy," "we," "us," and "our" refer to SudoWorks, LLC.

We operate the PickleBuddy mobile application (iOS and Android) and the website at picklebuddy.app (together, the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights regarding that data.

The Service is available to users in the United States, Canada, India, Vietnam, Australia, and the United Arab Emirates.

2. Data We Collect

2.1 Data You Provide Directly

Data TypeDetails & Purpose
Phone numberRequired for account creation. Used to verify your identity via one-time passcode (OTP) through Firebase Authentication. We do not use your phone number for marketing calls or SMS.
Display nameThe name you choose when creating your account. Shown to other group members so they can identify you. We do not require your legal name.
Group membership dataGroups you create or join, your role (organizer or player), RSVP responses, session participation, announcement and chat messages you post.

2.2 Data Collected Automatically

Data TypeDetails & Purpose
Device identifierA randomly generated unique ID (UUID) created on your device at first launch. Used to associate your device with your account and maintain your session. This is not your hardware device ID.
FCM tokenA Firebase Cloud Messaging token generated by your device. Used solely to deliver push notifications you have opted into (session updates, RSVP changes, announcements, waitlist promotions). This token changes periodically and is not tied to your personal identity.
Firebase Analytics dataStandard analytics collected by the Firebase SDK, including app opens, screen views, session duration, device model, operating system version, country, and crash reports. This data is aggregated and used to understand how the app is used and to fix bugs. We do not use it to build advertising profiles.
Server logsIP address, request timestamps, user agent string, referring URL, and pages visited on our website. Used for security monitoring, abuse prevention, and infrastructure performance.

2.3 Data We Do Not Collect

We want to be explicit about what we do not collect:

  • Location data (GPS, Wi-Fi, Bluetooth)
  • Contacts or address book data
  • Photos, camera, or microphone access
  • Payment or financial information
  • Biometric data
  • Data from other apps on your device
  • Advertising identifiers (IDFA/GAID)

3. How We Use Your Data

We use your data for the following purposes and no others:

  • Account creation and authentication: Verifying your identity via phone OTP and maintaining your logged-in session.
  • Core app functionality: Enabling you to create and join groups, RSVP to sessions, send and receive chat messages, and receive announcements.
  • Push notifications: Delivering timely alerts about session changes, RSVP updates, waitlist promotions, and group announcements.
  • App improvement: Using aggregated, non-identifying analytics to understand usage patterns, identify bugs, and improve the app experience.
  • Security and abuse prevention: Monitoring for unauthorized access, spam, and disruptive behavior.
  • Customer support: Responding to your inquiries when you contact us.

4. Third-Party Services

We use the following third-party services to operate PickleBuddy. Each processes data strictly on our behalf and under our instructions:

ServiceProviderWhat It Processes
AuthenticationFirebase Auth (Google LLC)Phone number, OTP verification status
Push notificationsFirebase Cloud Messaging (Google LLC)FCM token, notification content
AnalyticsFirebase Analytics (Google LLC)Aggregated app usage, crash data, device model/OS
DatabaseSupabase (PostgreSQL hosting)All app data (account, groups, sessions, messages)
API hostingDigitalOceanServer-side request processing
Caching / queuesUpstash (Redis)Temporary session state, background task queues

We do not use advertising SDKs, tracking pixels, or third-party analytics platforms beyond Firebase Analytics. We do not share your data with data brokers.

5. Data Sharing and Sale

We do not sell, rent, or trade your personal data to any third party. We do not share your personal data with third parties for their own marketing purposes.

We may disclose your data only in the following limited circumstances:

  • To comply with a valid legal obligation, such as a court order, subpoena, or regulatory requirement.
  • To protect the rights, safety, or property of SudoWorks, LLC, our users, or the public.
  • In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you will be notified of any change in data handling practices.

6. Data Retention

We retain your personal data only for as long as necessary to provide the Service and fulfill the purposes described in this policy:

  • Account data (phone number, display name, device ID): Retained for the lifetime of your account. Deleted within 30 days of account deletion.
  • Chat messages and announcements: Retained for the lifetime of the group. Soft-deleted messages (where you delete your own message) are marked as deleted and the content is no longer visible to other users, but the record is retained for moderation purposes.
  • FCM tokens: Automatically refreshed by your device. Old tokens are overwritten. Tokens are removed when you delete your account.
  • Firebase Analytics data:Retained by Google for 14 months per Google's default retention policy, then automatically deleted.
  • Server logs: Retained for 90 days, then deleted.

7. Account Deletion

You may delete your account at any time from within the PickleBuddy mobile app (Settings → Account → Delete Account) or by contacting us at support@picklebuddy.app. When you request account deletion:

  • Your phone number, display name, and device identifier are permanently deleted from our database within 30 days.
  • Your group memberships are removed.
  • Your chat messages will show as "deleted" to other users (the content is erased, but a placeholder remains so conversation threads remain coherent).
  • Your RSVP history is disassociated from your identity.
  • Your FCM token is deleted and you will no longer receive push notifications.

Whether you delete your account in the app or by emailing support@picklebuddy.app, we will process your request within 30 days under the timeline described above.

8. Data Security

We implement industry-standard security measures to protect your data:

  • All data transmitted between your device and our servers is encrypted using TLS/HTTPS.
  • Authentication tokens (JWTs) are stored in encrypted secure storage on your device.
  • Database access is restricted to authenticated API connections only.
  • Server infrastructure is hosted on DigitalOcean with standard security configurations.

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security of your data.

9. Push Notifications

PickleBuddy uses Firebase Cloud Messaging (FCM) to deliver push notifications. Notifications are used for:

  • Session updates (creation, cancellation, changes)
  • RSVP confirmations and waitlist promotions
  • Group announcements from organizers
  • Chat mentions (when another user mentions you by name)

You can control notification preferences within the app. You can choose to receive all notifications or announcements only. You can also mute specific chat threads. You may disable push notifications entirely through your device settings at any time.

Announcements from group organizers always trigger a push notification regardless of your chat notification preference. This is by design to ensure critical information (such as session cancellations) reaches all group members.

10. Children's Privacy

PickleBuddy is not directed at children under 16 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at support@picklebuddy.app and we will delete it promptly.

11. International Data Transfers

PickleBuddy is operated from the United States. Our servers and third-party service providers are located in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States.

For users in jurisdictions that require specific transfer mechanisms (such as the EU/EEA, UK, or other regions with data transfer restrictions), we rely on Standard Contractual Clauses or equivalent safeguards as adopted by our third-party service providers.

12. Your Rights

Depending on where you live, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at support@picklebuddy.app. We will respond within the timeframe required by applicable law (typically 30 days).

United States

California (CCPA/CPRA): Right to know what personal information is collected; right to delete; right to opt out of the sale or sharing of personal information (we do not sell your data); right to non-discrimination for exercising your rights.

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), North Carolina: Right to access, correct, and delete your personal data; right to opt out of targeted advertising (we do not engage in targeted advertising); right to appeal our decision regarding your request.

Canada (PIPEDA)

Right to access your personal information; right to challenge accuracy and completeness; right to withdraw consent.

India (DPDPA 2023)

Right to access information about your personal data; right to correction and erasure; right to grievance redressal; right to nominate another person to exercise rights in case of death or incapacity.

Vietnam (PDPD)

Right to be informed; right to consent and withdraw consent; right to access; right to delete or restrict processing; right to object to data processing.

Australia (Privacy Act 1988)

Right to access your personal information; right to correction of inaccurate data; right to complain to the Office of the Australian Information Commissioner (OAIC).

United Arab Emirates (PDPL)

Right to access; right to correction; right to restrict or stop processing; right to request deletion; right to be informed of data breaches.

13. Cookies (Website Only)

The PickleBuddy website at picklebuddy.app uses only essential, first-party cookies required for site functionality. We do not use advertising cookies, tracking pixels, or third-party analytics cookies on the website.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where feasible, notify you through the app or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to file a complaint, contact us at:

SudoWorks, LLC

Email: support@picklebuddy.app

Website: https://picklebuddy.app/contact

We aim to respond to all privacy-related inquiries within 30 days.