League Ledger
Privacy Policy

Overview

League Ledger is an offline-first Android application for commissioners to manage Fantasy Football leagues and March Madness pools, including memberships, entry fees, payment records, standings, awards, payouts, archives, and history. League Ledger does not currently require an account or send application records to a developer-operated server.

Information you can enter

The app can store information that you choose to enter, including:

• names and competition-specific aliases;
• phone numbers, email addresses, preferred payment methods, and contact notes;
• league, season, pool, participant, roster, bracket-entry, score, rank, placement, and status information;
• dues, assessed fees, payment amounts, payment methods, dates, confirmation or reference values, and notes; and
• planned awards, intended recipients, payout transactions, archive state, and historical results.

The commissioner is responsible for having an appropriate reason and any necessary permission to enter information about other people.

How information is stored and used

League Ledger uses this information only to provide the ledger, standings, history, contact, backup, restore, and export features requested by the user. Application records are stored in an app-private Room/SQLite database on the Android device. The database is not separately encrypted by League Ledger; protection depends on Android's application sandbox, device security, and the user's control of the device.

League Ledger currently has no developer-operated cloud service, authentication service, analytics, advertising, or crash-reporting service. It does not sell personal information. It does not use participant information for advertising or profiling.

Contact actions

When the user chooses a phone or email action, League Ledger opens an installed dialer or email application through Android. League Ledger does not automatically place calls or send messages. The receiving application is governed by its own privacy practices.

Secure backups

League Ledger can create a password-protected .leagueledger backup containing all supported application records, including contact and financial-ledger information. Encrypted Backup Format v1 uses Argon2id password-based key derivation and AES-256-GCM authenticated encryption. League Ledger cannot recover a forgotten backup password.

The user chooses where to save or open a backup through Android's Storage Access Framework. If the user selects a cloud or third-party document provider, that provider may store or transmit the encrypted file under its own terms and privacy policy. Users should protect their backup password separately from the backup file.

CSV exports

League Ledger can create Fantasy Football and March Madness CSV reports. CSV files are not encrypted and may contain names, financial totals, and standings. Contact information is excluded from Fantasy Football CSV files by default. Phone numbers and email addresses are included only when the user explicitly selects Include contact information for that export. March Madness CSV exports do not include linked Contact Profile information.

Export is user-directed through Android's document picker. Once exported, a CSV is outside League Ledger's private application sandbox. Anyone with access to the file may be able to read it. Users are responsible for choosing a trusted destination, sharing only with intended recipients, and deleting copies they no longer need. A CSV cannot restore the app.

Android system backup

League Ledger disables Android Auto Backup and excludes application data from configured cloud-backup and device-transfer rules. The supported portable migration method is the user-created encrypted League Ledger backup. Android backup or device-transfer behavior can vary by Android version and device manufacturer.

Data sharing and transmission

League Ledger does not transmit application records to the developer. Information leaves the application only when the user deliberately invokes an Android contact action, encrypted backup, restore, or plaintext CSV export and selects another application or document provider. Contact data is never included in CSV by default and requires an explicit export choice. Those third parties process the information under their own policies.

Retention and deletion

Application records remain on the device until the user edits or deletes supported records, removes an available association, clears the app's storage in Android settings, or uninstalls League Ledger. Archive features preserve historical data and do not delete it. Removing a membership or profile association does not necessarily delete a referenced Contact Profile because historical integrity protections prevent hard deletion of referenced people. Exported backup and CSV files are controlled separately by the user and are not deleted automatically when the app is uninstalled.

League Ledger has no online account, so there is no account-deletion process. Clearing app storage or uninstalling removes the app's local database from the device, subject to Android and device behavior. Users should separately delete any exported files from their chosen storage providers.

Security

Reasonable technical measures include Android app-private storage, no broad storage, contact, phone, or network permission, authenticated encryption for portable backups, strict backup validation, and transactional restore. No system is completely secure. Device compromise, rooted or debuggable devices, weak backup passwords, screenshots, and plaintext CSV files can expose information.

Children

League Ledger is intended for adult commissioners and general sports-pool administration. It is not designed or directed specifically to children. The Google Play target-audience declaration must match the published application and listing.

Changes

This policy may be updated when League Ledger's features or data practices change. The published policy will identify its effective date. Material changes will be reflected in the app, Play Console Data Safety declaration, and release notes as applicable.

Contact

Support: support@snuffridgegroup.com
Privacy inquiries: privacy@snuffridgegroup.com