Privacy Policy

We collect information that you provide directly to us, information that is automatically collected when you use our Services, and information we may receive from third parties. The types of information we collect include:

We use the information we collect for the following purposes:

• Service Delivery: To process transactions, manage subscriptions, provide access to purchased services and digital content, authenticate your identity, and deliver the features and functionality of our Services across web and mobile platforms
• Push Notifications: To deliver pick alerts, signal change notifications, and market movement updates to your iOS device based on your notification preferences (opt-in only)
• Communication: To send transactional and service-related communications, including access instructions, account updates, subscription confirmations, billing receipts, SMS messages you opt into, and responses to your inquiries
• Account Management: To create and manage your account, process payments, handle subscription renewals and cancellations, manage AI credit balances, and maintain your preferences
• Social and Community Features: To operate public profiles, leaderboards, follows, and shared picks and systems for users who opt in to these features
• Advertising and Measurement: To promote our Services and measure the effectiveness of our marketing, including through advertising and attribution partners such as Meta, Google, X (Twitter), Branch, and ManyChat. On iOS, advertising identifiers are used for this purpose only with your consent via the App Tracking Transparency prompt
• Service Improvement: To analyze usage patterns (including via Mixpanel and Google Analytics), understand how our Services are used, identify trends, improve our website and app, develop new features, and enhance the overall user experience
• Personalization: To customize your experience, provide personalized content and sport-specific data, and tailor our Services to your preferences
• Security and Fraud Prevention: To protect the security of our Services, detect and prevent fraud, unauthorized access, chargebacks, and other illegal activities
• Referral and Affiliate Programs: To track referral attributions, calculate commission earnings, process affiliate payouts, and manage reward distributions
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests, and to protect our rights, property, and safety

Your data is stored and processed across the following infrastructure providers, each with specific roles:

• Supabase (PostgreSQL): Application database hosted in the United States. Stores user accounts, subscription data, notification preferences, device tokens, community messages, referral data, and saved configurations. Supabase provides row-level security, encryption at rest, and encrypted connections.
• Amazon Web Services (AWS): Our API backend (api.thebettinginsider.com) runs on AWS, using a PostgreSQL database and ElastiCache (Redis) for real-time odds delivery, saved betting systems, user pick tracking, and social features. AWS Lambda processes sports-data pipelines. Personal data stored here is limited to your authenticated user ID and the picks, systems, and social profile data you create.
• ClickHouse (ClickHouse Cloud): Analytics database for sports data (games, players, teams, box scores, prop consensus, market data, analyst picks). Not used to store personal information beyond basic pick and account associations.
• Clerk: Authentication provider. Manages user identity, login credentials (passwords are hashed and stored by Clerk, not by us), session tokens, and authentication state. Clerk is SOC 2 Type II compliant.
• Stripe: Payment processor for web subscriptions. We receive only customer IDs and transaction metadata — we never see or store full card numbers. Stripe is PCI DSS Level 1 compliant.
• RevenueCat: Manages Apple App Store subscriptions and in-app purchases. Receives your Clerk user ID and app user ID to manage subscription entitlements.
• Mixpanel: Product analytics for our iOS app. Receives your user ID, email, and usage events to help us understand feature usage and improve the app.
• Vercel: Hosts our website and web API routes. May log IP addresses and request metadata for security and performance purposes.

All data transfers between our systems and third-party services are encrypted using TLS/SSL. All databases use encryption at rest.

We do not sell your personal information for money. However, our use of advertising and analytics partners (described in Section 7) may constitute “sharing” or a “sale” of certain identifiers under some state privacy laws. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who perform services on our behalf. These include: Clerk (authentication), Stripe (payment processing), RevenueCat (App Store subscription management), Supabase and AWS (data storage and APIs), ClickHouse (analytics), Vercel (hosting), Apple (push notifications via APNs), Mailmodo (email delivery), and Twilio (SMS delivery for opt-in messages). Each provider is contractually obligated to use your information only for the purposes we specify.
• Advertising, Analytics, and Attribution Partners: We share certain identifiers and activity data (such as the IDFA where you have consented, event data, and IP address) with advertising, analytics, and attribution partners including Meta (Facebook), Google (Google Analytics), X (Twitter), Branch, ManyChat, and Mixpanel, to measure and improve our advertising and understand product usage. See Section 7 and Section 12 for your choices and opt-out rights.
• Sports Data Providers: We receive data from and interact with sports data and odds providers including The Odds API, SportsDataIO, BallparkPal, ESPN, and live-odds feeds. These interactions generally involve sports data, not your personal information.
• Apple: For App Store subscriptions, Apple processes your payment and receives transaction data in accordance with Apple's privacy policy.
• Discord: If you choose to connect your Discord account, we share your membership status with Discord to assign community roles. This is voluntary.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or government request, or to protect our rights, property, or safety, or that of our users or others.
• With Your Consent: We may share your information with your explicit consent or at your direction.
• Aggregated or Anonymized Data: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you.

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards:

• All data transmitted between your device and our servers is encrypted using TLS/SSL
• Sensitive data is encrypted at rest in all databases
• Passwords are managed by Clerk using industry-standard hashing algorithms — we never store passwords
• Payment information is handled by PCI DSS-compliant processors (Stripe, Apple) — we never store card numbers
• Sportsbook connection credentials, where used for wallet or bet sync, are encrypted and stored on your device, not on our servers
• Database access is restricted with role-based access controls and API key authentication
• Push notification device tokens are stored securely and associated only with authenticated accounts
• We conduct regular security reviews of our infrastructure and third-party integrations

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If we become aware of a security breach, we will notify affected users and relevant authorities as required by applicable law.

On our website, we use cookies, web beacons, pixels, and similar tracking technologies for the following purposes:

• Essential Cookies: Required for authentication, security, session management, and basic website functionality
• Analytics: Google Analytics helps us understand how visitors use our website and measure performance
• Advertising and Conversion: An X (Twitter) conversion pixel and similar advertising technologies help us measure the effectiveness of our marketing campaigns
• Attribution: Referral tracking (via a referral-source cookie) and ManyChat parameters help us attribute signups and marketing sources
• Functional: Remember your preferences and settings to provide a personalized experience

You can control cookies through your browser settings, and many browsers support Global Privacy Control (GPC) signals, which we honor as an opt-out of sharing where applicable. Our iOS app does not use browser cookies; app-based tracking and advertising identifiers are governed by Apple's App Tracking Transparency framework as described in Section 7.

We work with the following partners for advertising, analytics, and attribution. Some of these involve identifiers that certain laws treat as “sharing” or a “sale” of personal information; see Section 12 for your opt-out rights.

• Meta (Facebook): Our iOS app includes the Meta SDK to measure ad conversions and support advertising. Where you consent via App Tracking Transparency, this may use the IDFA and share conversion events with Meta.
• Apple App Tracking Transparency (ATT): On iOS 14.5+ we present Apple's tracking prompt. If you allow tracking, we may use the IDFA for advertising measurement; if you deny it, we do not use the IDFA to track you.
• Mixpanel: Product analytics in our iOS app, tied to your user ID, to understand feature usage. Not used for cross-app advertising.
• Google Analytics: Website analytics measuring pageviews and interactions.
• X (Twitter) Pixel: Website conversion tracking for advertising campaigns.
• Branch: Deep-linking and install/referral attribution, which may use your IP address for one-time deferred-link matching.
• ManyChat: Marketing attribution based on campaign parameters in links you click.

Your controls: On iOS, decline the App Tracking Transparency prompt (or change it in Settings → Privacy & Security → Tracking) to prevent IDFA-based tracking. On the web, use your browser's cookie controls or a Global Privacy Control signal. You may also contact us to opt out of sharing as described in Section 12.

Our Services include optional social and community features. These are private by default and become visible to others only when you opt in.

• Public Profiles: You may create a public profile with a username, display name, avatar, and bio. Your profile and activity remain private until you set your profile to public.
• Leaderboards and Feeds: If your profile is public, your tracked picks and performance metrics (such as win/loss and ROI) may appear on leaderboards and in feeds visible to other users.
• Follows: Users may follow one another; follow relationships are associated with your account.
• Shared Picks and Systems: You may choose to share picks or saved betting “systems” publicly or via a share link. Content you choose to share may be viewed by others.
• Messaging: Content of community messages and interactions is stored and may be visible to other participants.

You control your social visibility through your profile settings. Making a profile private removes it from public leaderboards and feeds. Content shared publicly or with other users may persist or be retained by them even after you change your settings.

Our bet-tracking tools let you record and analyze your own betting activity.

• Tracked Bets and Picks: Bets, picks, stakes, odds, results, and notes you enter or import are associated with your account and are private to you unless you choose to share them through social features.
• Sportsbook Connections: If you connect a sportsbook account to import or sync your activity, any credentials used for that connection are encrypted and stored on your device. We do not store your sportsbook passwords on our servers.
• Imported Data: Bet data imported from a connected sportsbook is stored with your account so you can track performance over time.

You can delete tracked bets and disconnect sportsbook connections at any time within the app.

Our Services include AI-powered features, including the Quantum AI chat assistant and AI-generated game scripts and analysis. To provide these features, prompts, questions, and related context may be processed by third-party AI providers, including Anthropic and OpenAI. We do not use your private financial account credentials or payment card data in these features, and you should not submit sensitive personal information into AI chat. AI-generated content may contain errors and should not be relied upon as the sole basis for any decision. See our Terms of Service for additional disclaimers.

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your personal information in a structured, commonly used format
• Opt-Out of Tracking (iOS): Decline the App Tracking Transparency prompt, or change it later in your device settings, to prevent IDFA-based advertising tracking
• Opt-Out of Sale/Sharing: Opt out of the sharing of identifiers with advertising partners as described in Section 12
• Opt-Out of Communications: Unsubscribe from marketing emails or SMS using the provided controls or through your account settings
• Push Notification Controls: Disable or customize push notifications at any time through your iOS device settings or the app's notification preferences
• Social Visibility: Set your social profile to private at any time through your profile settings
• Disconnect Third-Party Accounts: Disconnect your Discord, sportsbook, or other linked accounts at any time

To exercise any of these rights, please contact us through our contact page. We will respond within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing your request.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information for money. However, our use of advertising and attribution partners (such as Meta, Google, and X) may involve “sharing” identifiers (such as the IDFA and online activity) for cross-context behavioral advertising. You have the right to opt out. To opt out: on iOS, decline the App Tracking Transparency prompt; on the web, enable a Global Privacy Control signal in your browser or contact us with the request “Do Not Sell or Share My Personal Information.”
• Right to Limit Use of Sensitive Personal Information: We use sensitive information (such as account login credentials) only as necessary to provide our Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your rights.

Categories of Personal Information Collected: Identifiers (name, email, IP address, device and advertising identifiers), commercial information (subscription and purchase history), internet and app activity (usage and analytics data), and inferences drawn from the above.

To exercise your California privacy rights, contact us through our contact page with the subject “California Privacy Request.” We will verify your identity and respond within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with additional rights. Our legal bases for processing your personal data are:

• Contract Performance: Processing necessary to provide our Services (account management, subscription delivery, customer support)
• Legitimate Interests: Processing for our legitimate business interests (product analytics, fraud prevention, service improvement) balanced against your privacy rights
• Consent: Where you have given us explicit consent (push notifications, marketing communications, advertising tracking via App Tracking Transparency, Discord integration)
• Legal Obligation: Processing necessary to comply with applicable laws

In addition to the rights described in Section 11, you have the right to withdraw consent at any time, restrict processing, object to processing based on legitimate interests, and lodge a complaint with your local data protection authority. Your data may be transferred to the United States; by using our Services, you consent to this transfer.

Our Services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. Our Services involve sports betting analytics, and all users must be of legal age to access such content in their jurisdiction.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems within a reasonable timeframe.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Account data is retained for the duration of your account and subscription
• After Account Deletion: Upon a verified account deletion request, we will delete or anonymize your personal information within a reasonable period (generally within 30 days), except where retention is required by law (e.g., tax records, fraud prevention)
• Transaction Records: Billing and transaction data may be retained for up to 7 years for tax and legal compliance
• Push Notification Tokens: Device tokens are deleted when you disable notifications, uninstall the app, or delete your account
• Community and Shared Content: Content you shared publicly or with other users may be retained after account deletion but will be anonymized where reasonably practicable
• Advertising and Analytics Data: Data held by advertising and analytics partners is retained according to their policies; anonymized usage analytics may be retained indefinitely

When we no longer need your personal information, we will securely delete or anonymize it.

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to countries outside your country of residence.

We take appropriate safeguards to ensure that your information receives an adequate level of protection, including using service providers that maintain appropriate security certifications and contractual data protection obligations.

Our Services may contain links to third-party websites, sportsbooks, or services that are not owned or controlled by us. This includes links to sportsbook operators, DFS platforms, and sports news sites. We are not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

In compliance with Apple's App Store requirements, here is a summary of our data practices for the iOS app. These should be reflected in the app's App Store privacy “nutrition label.”

• Data Linked to You: Email address, name/display name, user ID, purchase history, subscription status, usage and analytics data, and tracked bet/pick data
• Data Used to Track You: With your App Tracking Transparency consent, we use device advertising identifiers (IDFA) and advertising/usage data with partners such as Meta to measure and support advertising. If you decline the prompt, we do not track you using the IDFA.
• App Tracking Transparency: We present Apple's ATT prompt on supported devices and honor your choice.
• Third-Party SDKs: Our app includes Clerk (authentication), RevenueCat (subscription management), Mixpanel (product analytics), the Meta SDK (advertising measurement), and Branch (deep-linking and attribution).

We offer an optional browser extension, “The Betting Insider – ESPN Connector,” that lets you connect your own ESPN fantasy league to our fantasy rankings tools. The extension is not required to use our Services, and it runs only on espn.com and thebettinginsider.com.

Insider Sports Inc uses an internal integration with QuickBooks Online (Intuit) to manage our own business accounting — for internal financial reporting, reconciliation, and analysis of our company's books. This integration accesses our own QuickBooks company data (such as our invoices, bills, transactions, and financial reports). It does not access, use, or expose your personal account information, and it is not part of the consumer-facing Services. Our handling of Intuit and QuickBooks data complies with Intuit's applicable developer and data-use requirements.

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or for any other reason. When we make material changes, we will update the “Effective Date,” provide notice via email or through our Services, and post the updated policy on this page. Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.