Privacy Policy

VPQ (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use, and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement, "Site" refers to the Company's website, which can be accessed at www.vpq.app, or through our mobile application. "Service" refers to the Company's services accessed via the Site, in which users can discover sporting events, capture video on their personal device, upload videos to the platform, and TAG videos so that all videos taken at the same event at the same time by any user are aggregated into the user's video library.

The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of our Site or our Service. By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use, and you consent to our collection, storage, use, and disclosure of your Personal Information as described in this Privacy Policy.

I. Information We Collect

A. Account Identifier (User ID)

When you create an account, we assign you a unique account identifier. Account creation is performed via Apple Sign-In or Google Sign-In. WorkOS acts as our server-side identity provider; your OAuth credentials flow from the VPQ app to our backend servers, which use WorkOS to verify identity and manage sessions. The VPQ app does not include a WorkOS client SDK and does not communicate with WorkOS directly. VPQ does not directly receive or store your Apple or Google account credentials. Your User ID is linked to your identity and is used for account management, session persistence, and content ownership.

B. Precise Location

We collect precise GPS coordinates from your device while you are actively using the app in the foreground. We never request background or "always-on" location permission. Location is used solely to help you find nearby sporting events. Location data is not stored against your profile on our servers, is not retained after each event search, and is not used for tracking. You may deny location permission; the app remains functional with manual event search.

C. Photos and Videos

We collect videos recorded through the app's camera interface. Videos you record are uploaded to VPQ servers and associated with your account. This data is linked to your identity and is used for core app functionality—recording sports moments, uploading, and sharing.

D. Moment Tags

When you tap "tag" during active video recording, we capture the timestamp and location metadata associated with that moment. Moment tags are linked to your account and are used to mark key moments in your videos.

E. Device Diagnostics

We collect device model, OS version, battery level, crash stack traces, session replays (visual recordings of app screens at a 10% sample rate, with video playback surfaces, camera previews, and user-uploaded image thumbnails masked from capture), and performance profiles (at a 20% sample rate) via our Sentry SDK. This information is collected automatically for crash reporting, performance monitoring, and debugging. PII scrubbing is enabled and IP addresses are header-scrubbed. This data is not linked to your identity.

F. Usage Analytics

We collect product metrics that are used for product improvement and understanding usage patterns. Analytics are associated with a pseudonymous user ID (a UUID that is not derived from your email or other personal identifiers). IP tracking is not used. This data is not used for cross-app tracking.

G. Authentication Credentials

Authentication tokens obtained through Apple Sign-In or Google Sign-In are stored in your device's secure storage. Tokens are automatically refreshed; expired tokens trigger re-authentication.

II. How We Use and Share Information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent, or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors performing services for the Company, who use your Personal Information only at our direction and in accordance with this Privacy Policy.

We use Personal Information to contact users in response to questions, solicit feedback, provide technical support, and inform users about promotional offers.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation, or disclosure is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service; address fraud, security, or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public.

We use Non-Personal Information to improve the Service and customize the user experience. We reserve the right to use and disclose such Non-Personal Information to our partners and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition, or sale of assets, your Personal Information may be among the assets transferred. Any acquirer may continue to process your Personal Information as set forth in this Privacy Policy.

III. Third-Party Data Processors

We share data with the following third-party processors to operate the Service:

WorkOS (WorkOS Inc.)

WorkOS serves as our server-side identity provider. Your Apple or Google OAuth credentials flow from the VPQ app to our backend servers, which use WorkOS to verify identity and manage sessions. The VPQ app does not include a WorkOS client SDK. Privacy policy

Sentry (Functional Software Inc.)

Sentry receives crash reports, session replays, and performance profiles for crash reporting and monitoring. Privacy policy

Amplitude (Amplitude Inc.)

Amplitude receives product analytics events for product analytics purposes. Privacy policy

IV. Authentication

VPQ uses only third-party OAuth authentication via Apple Sign-In and Google Sign-In—no email/password authentication is available. Authentication tokens are stored in your device's secure storage.

V. Location Data

Location is collected only while the app is in the foreground and actively being used. Location data is used solely for finding nearby sporting events and is not stored against your user profile. No location history is maintained on your device or on our servers. VPQ does not use geofencing or background location tracking. You may deny location permission; the app remains functional with manual event search.

VI. Background Data Transmission

VPQ may transmit video data in the background when uploads are queued, even when you are not actively using the app. Videos are queued locally on your device and uploaded to VPQ servers. You can restrict background uploads to WiFi-only connections via the app's Settings. Uploads pause automatically when your device is offline and are resumable.

VII. Content Sharing and Public Visibility

When you share a video, it becomes accessible via a public link (share.vpq.app/c/{shareId}) to anyone who has that link. No authentication is required to view shared content. Instagram Reels sharing is also supported; shared video is exported to Instagram. You control when and whether to share your content.

VIII. Data Retention and Deletion

You may delete your account at any time through Profile > Delete Account in the app, which requires double confirmation. When you request account deletion, your account is deactivated immediately and you will no longer be able to access the service. Within 30 days, your personal information and videos you have not shared with other users are permanently deleted from VPQ's servers, your account record is anonymized, and third-party data processors are notified to delete your data. Videos you created that have been incorporated into another user's highlight or shared content will have your personal information removed but the video file may be retained to preserve the integrity of that other user's content.

If you wish to request account deletion outside the app, or to request a copy of your data, please contact us at privacy@vpq.app. You have the right to deletion under GDPR (Article 17) and CCPA (Section 1798.105). You also have the right to know what data we hold about you under GDPR (Article 15) and CCPA (Section 1798.100).

For detailed instructions on how to delete your account, see our account deletion page.

IX. Children's Privacy

VPQ is not intended for children under 13. By creating an account, you confirm you are at least 13 years old. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

Parents or guardians who believe their child under 13 has provided personal information to VPQ may contact us at privacy@vpq.app to request deletion.

Users between the ages of 13 and 17 should have parental or guardian awareness of their use of VPQ. We do not sell the personal information of users under 16 consistent with the California Consumer Privacy Act.

For content featuring minor athletes captured at sporting events, see our Parental Authority & Minor Content Policy.

X. No Cross-App Tracking

VPQ does not track you across other companies' apps or websites. We do not use advertising identifiers (IDFA), advertising SDKs, or cross-app identifiers.

XI. How We Protect Information

We implement security measures designed to protect your information from unauthorized access, including:

• Authentication credentials stored in your device's encrypted keychain
• All network communication transmitted via HTTPS, enforced by App Transport Security
• Automatic token lifecycle management
• Sensitive data scrubbed from crash reports and diagnostics
• Rate limiting and circuit breaker patterns to protect against abuse

However, no security measures are absolute. By using our Service, you acknowledge that you understand and agree to assume these risks.

XII. Your Rights Regarding Your Personal Information

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication, you can opt out by following the unsubscribe instructions provided in each email, or by adjusting your settings in the app. We may continue to send administrative emails, including periodic updates to this Privacy Policy.

Under GDPR and CCPA, you may have additional rights including the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@vpq.app.

XIII. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law, including within 72 hours of becoming aware of the breach where required.

XIV. Links to Other Websites

As part of the Service, we may provide links to or compatibility with other websites or applications. This Privacy Policy applies solely to information collected by us through the Site and the Service and does not apply to third-party websites or applications. We encourage our users to read the privacy statements of other websites before proceeding to use them.

XV. Changes to Our Privacy Policy

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent in-app notification. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

XVI. Contact Us

If you have any questions regarding this Privacy Policy or the practices of this Site, or to submit a data request or deletion request, please contact us at:

Email: privacy@vpq.app

Last Updated: March 30, 2026