Privacy Policy

We collect information that you provide directly to us, information that is automatically collected when you use our Services, and information we may receive from third parties. The types of information we collect include:

We use the information we collect for the following purposes:

• Service Delivery: To process transactions, manage subscriptions, provide access to purchased services and digital content, authenticate your identity, and deliver the features and functionality of our Services across web and mobile platforms
• Push Notifications: To deliver pick alerts, signal change notifications, and market movement updates to your iOS device based on your notification preferences (opt-in only)
• Communication: To send transactional and service-related communications, including access instructions, account updates, subscription confirmations, billing receipts, and responses to your inquiries
• Account Management: To create and manage your account, process payments, handle subscription renewals and cancellations, manage AI credit balances, and maintain your preferences
• Service Improvement: To analyze usage patterns, understand how our Services are used, identify trends, improve our website and app, develop new features, and enhance the overall user experience
• Personalization: To customize your experience, provide personalized content and sport-specific data, and tailor our Services to your preferences
• Security and Fraud Prevention: To protect the security of our Services, detect and prevent fraud, unauthorized access, chargebacks, and other illegal activities
• Referral and Affiliate Programs: To track referral attributions, calculate commission earnings, process affiliate payouts, and manage reward distributions
• Analytics: To conduct business analytics, generate reports, understand cancellation trends, and make data-driven business decisions
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests, and to protect our rights, property, and safety

We do not use your data for cross-app tracking or targeted advertising. We do not sell your data to advertisers. We do not use the IDFA or any Apple tracking frameworks.

Your data is stored across the following infrastructure providers, each with specific roles:

• Supabase (PostgreSQL): Primary application database hosted in the United States. Stores user accounts, subscription data, notification preferences, device tokens, community messages, referral data, saved configurations, and application state. Supabase provides row-level security, encryption at rest, and encrypted connections.
• ClickHouse (ClickHouse Cloud): Analytics database for sports data. Stores games, players, teams, box scores, prop consensus data, market data, and analyst picks. This database contains sports analytics data and is not used to store personal information beyond basic pick and account associations.
• Clerk: Authentication provider. Manages user identity, login credentials (passwords are hashed and stored by Clerk, not by us), session tokens, and authentication state. Clerk is SOC 2 Type II compliant.
• Stripe: Payment processor for web subscriptions. Processes payments and stores payment method information. We receive only customer IDs and transaction metadata from Stripe — we never see or store full card numbers. Stripe is PCI DSS Level 1 compliant.
• RevenueCat: Manages Apple App Store subscriptions. Tracks subscription status, purchase history, and entitlements for in-app purchases. RevenueCat receives your Clerk user ID and app user ID to manage subscriptions.
• Vercel: Hosts our website and API routes. Processes web requests and may log IP addresses and request metadata for security and performance purposes.
• AWS Lambda: Processes data pipelines for prop consensus, market data, and player sync operations. Does not store personal user data — processes only sports data.

All data transfers between our systems and third-party services are encrypted using TLS/SSL. All databases use encryption at rest.

We do not sell, rent, or trade your personal information to third parties for their marketing or advertising purposes. We may share your information only in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who perform services on our behalf. These include: Clerk (authentication), Stripe (payment processing), RevenueCat (App Store subscription management), Supabase (data storage), ClickHouse (analytics), Vercel (hosting), Apple (push notifications via APNs), and Mailmodo (email delivery for free-tier users). Each provider is contractually obligated to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.
• Apple: For App Store subscriptions, Apple processes your payment and receives transaction data in accordance with Apple's privacy policy. We share your app user ID with RevenueCat, which coordinates with Apple for subscription management.
• Discord: If you choose to connect your Discord account, we share your membership status with Discord to assign appropriate community roles. This is entirely voluntary.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or government request, or to protect our rights, property, or safety, or that of our users or others.
• With Your Consent: We may share your information with your explicit consent or at your direction.
• Aggregated or Anonymized Data: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, or business purposes.

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards:

• All data transmitted between your device and our servers is encrypted using TLS/SSL
• Sensitive data is encrypted at rest in all databases
• Passwords are managed by Clerk using industry-standard hashing algorithms — we never store passwords
• Payment information is handled by PCI DSS-compliant processors (Stripe, Apple) — we never store card numbers
• Database access is restricted with role-based access controls and API key authentication
• Push notification device tokens are stored securely and associated only with authenticated accounts
• We conduct regular security reviews of our infrastructure and third-party integrations

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If we become aware of a security breach, we will notify affected users and relevant authorities as required by applicable law.

On our website, we use cookies, web beacons, and similar tracking technologies for the following purposes:

• Essential Cookies: Required for authentication, security, session management, and basic website functionality
• Performance Cookies: Help us understand visitor interactions to improve website performance
• Analytics Cookies: Allow us to analyze usage patterns, track user behavior, and gather statistical information
• Functional Cookies: Remember your preferences and settings to provide a personalized experience
• Referral Tracking: Track referral source attribution for our referral and affiliate programs

You can control cookies through your browser settings. Our iOS app does not use browser cookies. The app does not use the IDFA, ATT framework, or any cross-app tracking technologies.

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your personal information in a structured, commonly used format
• Opt-Out of Communications: Unsubscribe from marketing emails using the link in our emails or through your account settings
• Push Notification Controls: Disable or customize push notifications at any time through your iOS device settings or within the app's notification preferences
• Manage Notification Preferences: Control which sports, analysts, signal types, and event types you receive alerts for through the app's settings
• Disconnect Third-Party Accounts: Disconnect your Discord or other linked accounts at any time through your profile settings

To exercise any of these rights, please contact us through our contact page. We will respond within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing your request.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
• Right to Delete: You have the right to request deletion of personal information we have collected, subject to certain exceptions (e.g., completing transactions, detecting fraud, complying with legal obligations).
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Therefore, there is no need to opt out of the sale or sharing of your data.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information (such as account login credentials) as necessary to provide our Services.

Categories of Personal Information Collected: Identifiers (name, email, IP address), commercial information (subscription and purchase history), internet activity (usage data, browsing history on our site), and inferences drawn from the above.

To exercise your California privacy rights, contact us through our contact page with the subject “California Privacy Request.” We will verify your identity and respond within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with additional rights. Our legal bases for processing your personal data are:

• Contract Performance: Processing necessary to provide you with our Services (account management, subscription delivery, customer support)
• Legitimate Interests: Processing for our legitimate business interests (analytics, fraud prevention, service improvement) balanced against your privacy rights
• Consent: Where you have given us explicit consent (push notifications, marketing communications, Discord integration)
• Legal Obligation: Processing necessary to comply with applicable laws

In addition to the rights described in Section 7, you have the right to: withdraw consent at any time, restrict processing, object to processing based on legitimate interests, and lodge a complaint with your local data protection authority. Your data may be transferred to the United States; by using our Services, you consent to this transfer.

Our Services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. Our Services involve sports betting analytics, and all users must be of legal age to access such content in their jurisdiction.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems within a reasonable timeframe.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Account data is retained for the duration of your account and subscription
• After Account Deletion: Upon account deletion request, we will delete or anonymize your personal information within 30 days, except where retention is required by law (e.g., tax records, fraud prevention)
• Transaction Records: Billing and transaction data may be retained for up to 7 years for tax and legal compliance
• Push Notification Tokens: Device tokens are deleted when you disable notifications, uninstall the app, or delete your account
• Community Messages: Community messages may be retained even after account deletion if they are part of public discussions, but will be anonymized
• Analytics Data: Anonymized usage analytics may be retained indefinitely for business analysis

When we no longer need your personal information, we will securely delete or anonymize it.

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to countries outside your country of residence.

We take appropriate safeguards to ensure that your information receives an adequate level of protection, including using service providers that maintain appropriate security certifications and contractual data protection obligations.

Our Services may contain links to third-party websites, sportsbooks, or services that are not owned or controlled by us. This includes links to sportsbook operators, DFS platforms, and sports news sites. We are not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

In compliance with Apple's App Store requirements, here is a summary of our data practices for the iOS app:

• Data Linked to You: Email address, name (display name), user ID, purchase history, subscription status
• Data Used to Track You: None — we do not track users across other companies' apps or websites
• Data Not Linked to You: Crash data, performance data, anonymized usage analytics
• IDFA Collection: We do not collect the Identifier for Advertisers (IDFA)
• ATT Framework: We do not use App Tracking Transparency because we do not engage in cross-app tracking
• Third-Party SDKs: Our app includes RevenueCat (subscription management), Clerk (authentication), and standard Apple frameworks. None of these SDKs are used for advertising or cross-app tracking.

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or for any other reason. When we make material changes, we will update the “Effective Date,” provide notice via email or through our Services, and post the updated policy on this page. Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.