Draft Written for the iPhone field test. A lawyer will review this page before the public beta.

Privacy Policy

Last updated October 18, 2026

Who we are

Official Visit is run by Crews Enterprises LLC, a Tennessee limited liability company. In this policy, "we" and "us" mean Crews Enterprises LLC.

This policy covers the Official Visit iPhone app during its field test, and this website, officialvisit.app. Questions go to [email protected].

Our promise, and its limits

We know that you have an account. We know which program you said you played for. We don't know which rating is yours.

Our database holds nothing that links you to your rating. So we can't hand that link to anyone, including a coach, a school, a court or a hacker.

We say "we hold no link to you" because that is what we can stand behind. We don't promise that nobody could ever guess. If very few people rate a program, someone who knows you well might guess from what a rating says. That is why program pages show only totals, and only after enough people have rated.

How a rating stays apart from you

1. When you claim a program, your phone makes a random code called a token. Our server signs the token without ever seeing it. This is called a blind signature, and it is the method behind the Privacy Pass standard.
2. The token stays on your phone. It carries only broad facts: the program, a range of years, your side of the ball, and that your rating is self-reported.
3. When you rate, the app sends your rating sealed, with no sign-in attached.
4. We hold it for a random 1 to 7 days. Then it posts in a batch, beside at least two other ratings with the same broad facts.
5. A posted rating has no date and no account. Its publish time is rounded to the hour.

What we collect

• Your account

  What

  Your email address, or the ID Apple gives us if you use Sign in with Apple. Apple may give us a private relay address instead of your email.

  Why

  To sign you in and to reach you about your account.

  How long

  Until you delete your account.

• Your age group

  What

  The app asks for your birth month and year. We keep only your age group, such as "18 or older".

  Why

  The field test is for adults only.

  How long

  Until you delete your account.

• Your program claim

  What

  The program you say you played for, your seasons there, your side of the ball, and the month you made the claim.

  Why

  To give you a token for that program, and to keep each person to one rating per program.

  How long

  Until you delete your account.

• A one-way code for the duplicate check

  What

  When you claim a program, you type your name and birth year. Our server uses them once to make a one-way code, then discards them. We store the code, never your name or birth year. Next to the code we keep a count of the tokens it has received and the month of the last one.

  Why

  So one person can't make several accounts to rate the same program again.

  How long

  The code and its count stay after you delete your account, so deleting and starting over doesn't reset the limit. Neither holds your name, your email or your account.

• Settings

  What

  Choices you make in the app, such as programs you save.

  Why

  To show you the app the way you set it up.

  How long

  Until you delete your account.

• Feedback you send

  What

  What you write through the "Tell us" button or by email, plus your app version and phone model. Feedback from the app is tied to your account. Email shows your address. Please don't tell us which rating is yours.

  Why

  To fix problems and make the app better.

  How long

  Up to 12 months.

• Crash and error reports

  What

  When the app crashes or hits an error, it sends a report to Sentry. The report says what went wrong, plus the app version, phone model and iOS version. We set Sentry to drop IP addresses and personal details.

  Why

  To find and fix bugs.

  How long

  90 days at most.

• Usage counts

  What

  Which screens get opened and which steps of the rating flow get finished, sent to PostHog under a random app ID. Never your name or email, and never which rating is yours. The rating flow sends no program.

  Why

  To see where the app is confusing.

  How long

  Up to one year.

• Technical logs

  What

  When the app or this website reaches our servers, our providers record the IP address and the time. Our sign-in system also records when, and from what IP address, you sign in.

  Why

  To keep the service running and secure.

  How long

  Request logs, 14 days or less. Sign-in records, only while needed to keep you signed in, and never after your account is deleted. We never store an IP address with a rating.

What we don't collect

• Anything that links you to your ratings.
• The date you sent a rating.
• Your location, contacts, photos, camera or microphone. The test app doesn't ask for them.
• ID documents or face scans.
• Advertising IDs. We don't track you across other apps or websites.
• Cookies on this website. It has no analytics and no ads.

Your ratings

• Ratings are anonymous content. Program pages show totals, not single ratings, and only once a program has at least 10 ratings.
• Your rating posts within about a week. It can take longer when the app waits for other ratings like yours, so it can post beside them.
• During the field test every rating is self-reported. We don't check that you played where you say, and program pages say so.
• You can delete or replace your rating in the app. A change takes about a week to show. A replacement counts as a new rating, and each person can replace a rating only a limited number of times.
• Only your phone holds your token. If you delete the app or lose your phone, we can't find your rating for you, because we never knew which one was yours.
• Deleting your account doesn't delete your ratings. They stay as anonymous content. If you want a rating gone, delete it in the app first.

Who we share data with

We don't sell or rent your personal information. We share it only with the companies that run parts of Official Visit for us, and only what each one needs.

• Supabase hosts our database and sign-in, in the United States.
• Apple provides Sign in with Apple and TestFlight. If you send feedback through TestFlight, Apple passes it to us.
• Sentry receives crash and error reports.
• PostHog receives usage counts.
• Expo builds the app and may deliver app updates.
• Cloudflare hosts this website and forwards email sent to our addresses.
• Google hosts the inbox where that email arrives.

We may also share information when the law requires it (see Legal requests), or with a new owner if the company or the app is sold. A new owner would have to keep the promises in this policy, or tell you first and let you delete your account.

Legal requests

Courts, police and lawyers sometimes ask companies for information about their users. Here is what we can and can't provide.

What we hold

• Your account email or Apple ID.
• Sign-in records, while we still have them.
• Your age group.
• Your program claims: the program, your seasons, your side of the ball and the month.
• The one-way code and its token count.
• Feedback you sent us.

What we can't produce

Which rating is yours. We don't have it. No table, log or backup holds that link, so we can't hand it over, whoever asks.

How we respond

• We need valid legal process, such as a subpoena or a court order. We review each request and push back on any that ask for too much.
• Where the law allows, we tell the user before we hand anything over, so they can object.
• If we believe someone faces an immediate risk of death or serious injury, we may share what we hold without waiting for legal process.

Requests go to [email protected].

Security

Data travels encrypted. Our database provider encrypts it at rest. Each part of our system can reach only what it needs. Every change to the privacy design is tested and reviewed before it reaches testers.

No system is perfect. If a breach affects your information, we will tell you as the law requires.

Your choices

• Delete your account in the app: tap Me, then Delete account. Or email [email protected] from the email address on your account. We finish deleting within 30 days.
• What stays after you delete: your ratings, as anonymous content. The one-way code and its count. Feedback, for up to 12 months, unless you ask us to delete it. Our providers' short logs, until they expire.
• You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We answer within 30 days, after we confirm the request comes from your account's email address.
• Some states give their residents these rights by law. We give them to every user.
• This website doesn't track you, so there is nothing to opt out of.

Adults only during the test

The field test is for people 18 or older. During the test we don't knowingly collect information from anyone under 18, and we never knowingly collect it from anyone under 13. If we learn a tester is under 18, we delete the account.

If you think a minor is using the app, tell us at [email protected]. Later versions may let recruits under 18 read and rate in limited ways. We will update this policy before that happens.

This is a test

• The field test runs without automatic backups, so data can be lost.
• We may reset test data at any time. A reset erases ratings, accounts and everything else from the test. We will try to warn you in the app first.
• Test data is stored in the United States. The app is meant for people in the United States.

Changes to this policy

We will post any change on this page and update the date at the top. If a change matters, we will tell you in the app before it takes effect.

Contact us

• Privacy questions and requests: [email protected]
• Legal requests and content disputes: [email protected]
• Help with the app: [email protected]