Privacy policy

Bullpen is built to need as little of your data as possible. This policy explains what the Bullpen iOS app and this website collect, why, and what we do with it, in plain language, because our users are teens and their parents.

The short version

• Your learning progress and practice portfolio are stored on your device, not on our servers.
• Signing in uses Sign in with Apple: no email or password for us to hold.
• We do not sell personal data and we do not show targeted advertising.
• A few features send limited data to our servers to work, described below.

Data stored on your device

Bullpen keeps your XP, coins, streak, lesson completion, badges, flashcard schedule, practice portfolio, transactions, and watchlist in local storage on your iPhone. Deleting the app deletes this data. We cannot see it.

Signing in

Bullpen's only sign-in option is Sign in with Apple, required to save and sync your progress. We create a profile containing a display name and a randomly generated friend code, stored in Apple's iCloud (CloudKit). We never see your Apple ID password, and Apple lets you hide your email address from us.

Data sent to our servers

Some features route requests through our server so the app can work without embedding secrets. In each case we send the minimum needed:

• Written-answer grading and explanations. When you submit a written quiz answer, or tap "Why?" on a question, the text of that question and your answer are sent to our server, which forwards them to an AI provider for grading or explanation. These requests are not tied to an account or profile.
• Market data. Showing stock quotes requires requesting them from market-data providers. These requests contain tickers, not personal information.
• Question reports. Reporting a bad question sends the question's identifier and your optional note, anonymously. We apply rate limiting by IP address to prevent abuse; IPs are used only for that purpose.

This website

If you join the waitlist or contact support, we collect the email address and message you provide, via our hosting provider (Netlify). We use it to reply to you and to send the launch announcement you asked for, nothing else. This site does not use advertising trackers.

What we never do

• Sell or rent personal data to anyone
• Show third-party or targeted advertising
• Ask for real financial account details (Bullpen has none to connect to)
• Message your contacts or post on your behalf

Children's privacy

Bullpen is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

Data retention and deletion

On-device data is yours: delete the app and it's gone. To delete a CloudKit profile (display name and friend code) or any support/waitlist emails we hold, contact us and we'll remove them.

Changes to this policy

If we change this policy, we'll update the date at the top and, for meaningful changes, note it in the app or by email to the waitlist.

Contact

Questions or requests: support@bullpen.example, or use the support page.