Privacy Policy.

Account information. When you sign up, we collect your email address and authentication credentials. Authentication is handled by Supabase; passwords are stored as salted hashes and are never visible to us in plain text.

Billing information. Payments are processed by Stripe. Your card number never touches our servers — it goes directly to Stripe. We receive and store only what we need to manage your subscription: a Stripe customer ID, your plan, subscription status, and the last four digits and brand of your card as reported by Stripe.

Usage analytics. We collect information about how you use the Service — pages viewed, features used, approximate location derived from IP address, browser and device type — to understand what works and fix what doesn’t.

AI assistant messages. Messages you send to the AI betting assistant are transmitted to Google’s Gemini API for processing and are stored with your account so you can view your chat history. Do not include sensitive personal information in chat messages.

Cookies and session tokens. We use cookies and similar technologies to keep you signed in and to remember preferences. See Section 8 for details.

We use the information we collect to: (a) provide, maintain, and improve the Service; (b) authenticate you and keep your account secure; (c) process subscription payments and send billing-related communications; (d) respond to your requests and provide support; (e) generate aggregate, de-identified analytics about how the Service is used; (f) enforce our Terms of Use, including age and acceptable-use requirements; and (g) comply with legal obligations.

We do not use your data to build advertising profiles, and we do not send your personal data to data brokers.

We share personal data only with the service providers below, only as needed to run the Service, and under contracts that restrict how they may use it:

We may also disclose information if required by law, subpoena, or court order, to protect the rights and safety of our users, or as part of a merger or acquisition (in which case this Policy would continue to apply to previously collected data).

We do not sell, rent, or trade your personal information to anyone, and we have not done so in the past. We do not share personal information with third parties for their own marketing purposes.

We keep your personal data for as long as your account is active. If you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain it longer: billing records may be retained for up to 7 years to satisfy tax and accounting requirements, and we may retain limited data as needed to resolve disputes, prevent fraud, or enforce agreements. Aggregate analytics that cannot identify you may be retained indefinitely.

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccuracies, delete your data, receive an export of it in a portable format, and object to or restrict certain processing.

To exercise any of these rights, email bettingbuddyhelp@gmail.com from the address on your account. We will respond within 30 days. We will never discriminate against you for exercising a privacy right.

The Service is intended for adults 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and certainly not from children under 13 (or 16 where applicable law sets a higher bar). If we learn we have collected personal information from an underage user, we will delete the account and associated data promptly. If you believe an underage person has an account, contact us at the email in Section 6.

We use a small set of cookies: essential cookies (session tokens that keep you signed in — the Service cannot function without them), preference cookies (remembering settings like display options), and analytics cookies (helping us understand aggregate usage). We do not use third-party advertising cookies or cross-site tracking pixels. You can control cookies through your browser settings; blocking essential cookies will prevent you from staying signed in.

We protect your data with industry-standard measures: TLS encryption for all data in transit, encryption at rest for stored data, hashed and salted passwords, row-level security on database access, least-privilege access controls for our team, and reliance on audited processors (Stripe is PCI-DSS Level 1 certified). No system is perfectly secure, however — if we learn of a breach affecting your personal data, we will notify you as required by applicable law.

The Service is operated from the United States, and your data is processed on servers located there. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice within the Service before the changes take effect. The “Last updated” date at the top of this page reflects the current version. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

Questions, concerns, or requests about your privacy? Email bettingbuddyhelp@gmail.com and we will get back to you within 30 days.