Information we collect
We process the email address and authentication records needed to secure your account; the username, position, jersey choices, and optional profile photo you choose to share; gameplay, progression, friendship, gift, leaderboard, notification, and settings records; store transaction identifiers and entitlement state; and limited device information: a push notification token with the device model, operating system build, and platform.
We do not ask for precise location, contacts, advertising identifiers, or microphone access. Password secrets are handled by the authentication service and are not available to other players or portal operators.
How we use information
We use this information to authenticate accounts, run server-authoritative matches, calculate progression, provide social and safety features, deliver requested notifications and account emails, verify purchases, prevent fraud and abuse, provide support, and maintain service reliability. We do not sell personal information or use it for cross-app advertising.
Service providers
We use Convex for application data, authentication, and the public trust center; Resend for essential account email; RevenueCat plus Apple or Google for purchase verification; and Expo notification infrastructure with Apple Push Notification service or Google Firebase Cloud Messaging for optional push delivery. These providers process only the information required for their role and apply their own security and privacy terms.
Social visibility and safety
Your username, selected avatar, cosmetic position, level, and gameplay statistics may be visible to other signed-in players. Your email and store transaction details are never public. You can report or block another player in the app; blocking removes direct social interaction in both directions. Reports are reviewed for safety and abuse prevention.
Retention and deletion
Account data is retained while your account is active and as needed to operate or secure the service. You can request permanent deletion in the app or by email without reinstalling the app. See the account and data deletion page for the steps and full details.
Deletion removes your profile and username, stored profile photos, friends and invitations, gift records, personal progression and inventory, settings, notifications, push tokens, authentication records, access to purchased features, and account-linked records used to check purchases. Match history and reward records remain under a shared Deleted player identity. Purchase and fulfillment records remain without their account link, but retain store transaction identifiers. Events linked to your account have their account identifiers and stored payload cleared; other purchase-provider event records can retain identifiers, including events received after deletion.
Reports filed by or about you remain with account references replaced by Deleted player. Report text and moderation notes are retained and may still contain information supplied about you. Administrative audit logs remain; deletion clears direct actor and user-subject links and redacts their metadata. Other audit entries and free-text fields can still contain identifiers or information about you. These retained records are not all anonymous.
For deletions handled by support, we keep the operator's identity, how the request was submitted, whether ownership was confirmed, and the type of deletion request. We remove your account details and the operator's free-text note from that record.
Retained records are kept as reasonably required for other players' history, safety and service security, fraud prevention, refunds, accounting, or legal obligations. No fixed additional retention period is specified for these records.
Account deletion does not automatically delete RevenueCat customer records or Apple or Google purchase history. Service providers apply their own privacy and retention terms. Contact support for help with a privacy request involving those records.
Our email and push-notification providers keep their own delivery logs under their privacy and retention policies. Account deletion removes account-linked delivery records stored by Let's Volley!, but does not automatically delete those providers' logs.
Your choices
You can edit profile information, control sound, music, motion, email, and push preferences, restore eligible purchases, block players, and delete your account in the app. Camera, photos, and notifications remain optional and can also be changed in device settings.
Security, children, and changes
We use access controls, server-side authorization, encrypted transport, restricted operator tools, and auditable changes. No system can guarantee absolute security. Let's Volley is not directed to children under 13. We may update this policy as the service changes and will revise the effective date or provide additional notice when appropriate.
Contact
For privacy questions or requests, email letsvolleyllc@gmail.com. Include the account email only when needed to locate your request; never send your password or store credentials.