Blitz

Privacy Policy

Effective 8 August 2026 · Last updated 8 August 2026

Blitz is an invite-only fantasy football assistant for iPhone and iPad. This policy describes exactly what the app and its server collect, why, who else sees it, how long it is kept, and how to delete it.

The short version. Blitz collects the minimum needed to know who you are, connect you to your fantasy league, answer your questions, and stay working. There is no advertising, no analytics SDK, no third-party tracker, and no sale or sharing of your data for marketing. Nothing Blitz collects is used to track you across other apps or websites.

1. Who is responsible

Blitz is built and operated by an independent developer, not a company. The service runs on infrastructure the developer controls, fronted by Cloudflare. For anything in this policy, including a data or deletion request, write to privacy@rosebellai.com.

Blitz is not affiliated with, endorsed by, or sponsored by the National Football League, Sleeper, ESPN, or Apple.

2. What Blitz collects

Account identity

Sign in with Apple identifier. Apple gives Blitz a stable, app-specific identifier for your Apple Account. It is the primary key for your account.
Email address. Supplied by Apple at sign-in. If you chose Hide My Email, Blitz only ever receives Apple's private relay address, never your real one.
Name. Blitz requests your name from Sign in with Apple. Apple returns it only on your very first sign-in.
Invite code. Blitz is invite-only. The code you redeem is recorded against your account so a code cannot be reused.

Fantasy league information

Your fantasy platform username and user ID (currently Sleeper), used to find you inside a league and confirm you own the roster you claim.
League membership — which league you joined, and which one is your default.

League and roster contents themselves — teams, players, matchups, transactions — are read from your fantasy platform's public API. Blitz caches them to answer your questions.

Content you create

Chat messages you send to the assistant, the assistant's replies, and the titles of your conversations.
Notification preferences — which alerts you have turned on.

Device and session information

Push notification token issued by Apple, plus the device model, app version, and whether the token is a sandbox or production token. Only stored once you allow notifications.
Session records. When you sign in, Blitz stores a hash of your session token — never the token itself — along with a device identifier, the app's user-agent string, and sign-in and last-seen timestamps.

Diagnostics

Crash and diagnostic reports. Blitz uses Apple's built-in MetricKit. If the app crashes or hangs, iOS hands Blitz a report — typically at the next launch and up to 24 hours later — containing the stack trace, crash signal, OS version, device model, and app version. There is no third-party crash SDK.
Server error logs recording failures inside the Blitz backend.

What Blitz does not collect

No advertising identifier (IDFA), no analytics or attribution SDK, no location, no contacts, no photos, no microphone or camera access, no health data, no browsing history, no payment information. Blitz has no in-app purchases.

3. Why Blitz uses it

Data	Purpose
Apple identifier, email, name	Create and recognise your account; contact you about the beta if necessary
Invite code	Enforce invite-only access and bind you to the correct league
Fantasy username, user ID, membership	Show content scoped to your league and your roster rather than someone else's
Chat messages	Generate answers, and keep your conversation history so you can return to it
Push token, notification preferences	Send the injury and job alerts you opted into
Session records	Keep you signed in; let you revoke a session by signing out
Crash reports, error logs	Diagnose and fix defects

Blitz does not use any of this for advertising, profiling for marketing, automated decisions with legal effect, or tracking across other companies' apps and websites.

4. Who else receives it

Blitz does not sell your data and does not share it for anyone else's marketing. It is disclosed only to the service providers below, only for the purposes described.

Provider	What it receives	Why
Apple	Sign in with Apple exchange; push tokens and notification payloads	Authentication and push delivery
Anthropic	Your chat messages and the league context needed to answer them	Generating assistant replies and analysis
Google	Fantasy news and league context only — no chat messages, no account identifiers	Generating audio recap episodes
Perplexity	NFL team and player research queries only — no user data	Gathering public NFL news
Sleeper	Your Sleeper username or user ID	Resolving your identity and roster in your league
ESPN	Player and team names only — no user data	Public player statistics
Cloudflare	Network traffic to and from the app, including IP address	Delivering and protecting the service

These providers process your data under their own terms and privacy policies. Blitz has not granted any of them permission to use your content to train their models. Blitz may also disclose data if required by law.

5. How long it is kept

Account, league membership, conversations, preferences — until you delete your account.
Sessions — expire 90 days after sign-in, or immediately when you sign out.
Crash and diagnostic reports — 90 days.
Server error logs — 30 days.
Cached news articles — 14 days.
Database backups — nightly snapshots kept for 7 days, then discarded. A deleted account may persist in a backup until those snapshots age out.

6. Deleting your account

You can delete your account from inside the app, under Settings → Delete Account. It takes effect immediately and cannot be undone.

Permanently removed: your account record and its identifiers, your email, your sessions, your push tokens, your league memberships, and every conversation and message you created.
Revoked: the refresh token Blitz holds for Sign in with Apple.
Retained but unlinked: crash reports and the record that an invite code was used are kept for operational integrity with the link to you severed, so they can no longer be attributed to you.

Blitz keeps no tombstone record of a deleted account. Signing in again with the same Apple Account creates a genuinely new account, which needs a new invite code.

Signing out — rather than deleting — revokes only that device's session and removes that device's push token, and leaves your data intact.

You may also ask for a copy of your data, or ask for it corrected or deleted, by writing to privacy@rosebellai.com.

7. Security

All traffic between the app and the server uses HTTPS.
Session tokens are stored as hashes, so the stored value cannot be replayed if the database is read.
The refresh token from Sign in with Apple is encrypted at rest.
On your device, your session token is held in the iOS Keychain.
The database runs on infrastructure controlled by the developer, and the operator console is behind an identity-gated proxy.

No system is perfectly secure, and Blitz cannot guarantee absolute security.

8. Children

Blitz is not directed to children under 13, and does not knowingly collect their information. If you believe a child has provided data to Blitz, write to privacy@rosebellai.com and it will be deleted.

9. Beta software

Blitz is currently distributed as an invite-only TestFlight beta. Apple collects its own information about TestFlight installs and crashes under Apple's privacy policy, which is outside the developer's control.

10. Changes to this policy

Material changes will be posted on this page with an updated effective date. If a change materially expands what is collected, existing users will be notified in the app before it takes effect.

11. Contact

privacy@rosebellai.com