Effective September 7, 2026
Privacy policy
This policy covers Tenfold, Calio, BowlUp, Stagely and Rankify, personal projects operated by Andres Guerra (Andres Apps). Contact: andresguerrademos@gmail.com.
Account information and Google sign-in
Our shared account service stores your account identifier, email address, sign-in identities and the apps you activate. When you choose Google sign-in, Google provides basic profile information, such as your name and profile picture, email address and Google account identifier. We use this information to authenticate you, maintain your account and populate app profiles. Google sign-in does not grant access to your Gmail messages, Drive files or Google Calendar.
Information used by each app
- Tenfold stores learning progress, interests, quiz results, review timing, streaks, saved paths and preferences. Feedback sharing happens when you choose to share it.
- Calio stores calendar blocks, recurrence and reminder settings, companies, clients and preferences. Local notifications provide reminders, and widgets display schedule information on your device.
- BowlUp stores teams, seasons, player names, scorecards and statistics.
- Stagely stores profiles, squad memberships, festival selections, itineraries, meetups and comments. Information you contribute to shared squads is visible to the relevant participants; festival catalog content can be public.
- Rankify stores profiles, music rankings, drafts, follows and sharing preferences. Public profiles and rankings can be viewed by others; drafts remain private. Anyone with a shared ranking link may access that ranking.
Native apps keep local account data and synchronize with Supabase. They use Supabase for account syncing rather than iCloud. Exported backups and data you deliberately share are under your control.
Optional Spotify connection
When you connect Spotify to Rankify, Spotify provides your account identity and authorized access to your music library and playlists. Rankify uses access and refresh tokens to read the music you select and create a playlist when you request it. We do not receive your Spotify password. You can revoke permission in your Spotify account settings.
Optional BowlUp AI reading
When you request scoreboard reading, BowlUp sends your selected cropped photo or prepared score-grid images, roster names, scores and reading instructions through its authenticated Supabase backend to OpenAI. Results are editable drafts; check them before saving. Manual score entry does not send photos to OpenAI. Camera and photo selection are used only for images you choose.
Uploaded AI files are scheduled for deletion after use and configured to expire after one hour. Private results may be retained for up to 24 hours to handle retries. Request identifiers, Apple App Attest records and hashed IP buckets help prevent abuse and duplicate requests. Provider security logs and backups follow their own retention practices.
Service providers and email
Supabase provides authentication, databases and synchronization. Vercel hosts the websites. Brevo sends account confirmation and password-reset messages. Brevo currently processes delivery events, opens and link clicks and may rewrite email links. Google, Spotify and Apple process information when you use their services; OpenAI processes optional scoreboard-reading requests. Data may be processed outside your country, including in the United States.
Google user information is used for the sign-in and account features described here, not for advertising or training AI models. It is not sent to OpenAI for scoreboard reading. We do not sell personal data or use these apps for targeted advertising. Service providers may process technical logs needed to operate and protect their services.
Keeping and deleting information
Account and app data are retained while needed to provide the features you use. You can delete supported records in each app and delete your shared account from Account settings after a recent sign-in and explicit confirmation. Shared account deletion affects all five apps. Stagely squads or festivals you own must first be transferred or removed. Backup copies may persist for the provider’s retention period; offline devices, screenshots and user-exported files can retain copies until removed. We cannot remove copies held independently by people you shared with.
Your choices
You can skip optional AI features, revoke provider connections, change device permissions, use available export tools, and request access, correction or deletion by contacting us. We may verify your identity before acting. Depending on where you live, you may have additional privacy rights and may contact your local data protection authority.
Children and information about other people
Only add information about other people when you have permission to do so. Avoid uploading sensitive personal information in names, calendar notes or scoreboard photos. Contact us if you believe a child’s information has been provided without required permission so we can investigate and remove it where appropriate.
Changes and contact
We will update this page when these practices change and identify the effective date. Send privacy questions to andresguerrademos@gmail.com.