Privacy Policy

This Privacy Policy describes how Edgity ("we", "our", "us") collects, uses and protects your personal data when you use the Edgity Android app and the Edgity website and web app at edgity.app (together, "the App"). We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

The data controller responsible for your personal data is:

If you have any questions about this policy or wish to exercise your data protection rights, please contact us using the email above.

2. Age Restriction

3. Data We Collect

Account data

• Email address — for account creation and sign-in
• Name — only if you sign in with Google, as provided by your Google account
• Account identifier — a unique ID assigned by Firebase Authentication

Your password is handled by Firebase Authentication. We never see or store it.

Subscription data

• Your plan, its status, billing period and next renewal date, and the purchase token issued by Google Play, which we use to verify your subscription with Google. We do not receive your payment card or bank details.

Usage data (linked to your account)

• The screens you open in the App (screen names only)
• The matches you open, and whether you opened them from the match list or from a notification
• When you open the App, and your favourite leagues
• The matches you unlock with your daily free matches, and when you reach the daily limit or view the subscription page
• Sign-in events: the sign-in method, whether it succeeded, and the reason if it failed
• Whether you allowed notifications when the App asked

Technical data

• App version
• Time zone of your device — stored with your account, so match times and notifications follow your local time; before you sign in, we use it to see by country where sign-in fails
• Language — the language of your phone and the language you selected in the App (notifications are sent in the App's language)
• Network type — only whether you are on Wi-Fi, mobile data or offline. We do not collect your carrier, network name or IP address in our database
• Load time — how long the first match list takes to appear, to measure the App's speed
• Crash reports — if the App crashes, a crash report is sent through Firebase Crashlytics: the error and where it happened in the App, the App version, your device model and Android version, and a random installation identifier. A crash report does not contain your email address, your account identifier or your AI Assist messages
• Whether notifications are enabled on your device
• A random identifier generated by the App when it is installed. Before you sign in, we use it to record that you opened the App for the first time, that the sign-in screen was shown, and whether sign-in succeeded. Your device's time zone and the App version are sent with these events. It is not the advertising ID
• Install source — if you installed the App from a link or a campaign, Google Play passes us the campaign tags. We record only these three: source, medium and campaign name — once, on first open. Everything else (for example click identifiers) is discarded. They contain no information about you

Notifications

• Your push notification token (Firebase Cloud Messaging), and a log of the notifications we sent you: date, morning or evening round, the matches included, and whether delivery succeeded

Content you create

• Saved predictions — the matches and markets you save in My Predictions
• AI Assist messages — the questions you type into AI Assist and the answers. See Section 8
• Waitlist — if you joined the waitlist on our website, your email address
• Support messages — if you write to us from the App (Menu → Support): the topic, your message, the reply e-mail address you give, and technical details sent with the message: App version, Android version, device model, where the App was installed from, language, time zone, your plan, and the status of your last purchase attempt. The form shows these details before you send

Server logs

• Our servers keep technical logs for troubleshooting. These can contain your account identifier and the IP address your request came from. They do not contain your email address or your AI Assist messages. See Section 9 for how long they are kept.

We do not collect:

• Payment card data or financial account information (handled directly by Google Play)
• Your actual bets or wagering history
• Your address or phone number (unless you provide them in a support email)
• Location data (GPS or IP-based location)
• Your device's advertising ID, contacts, photos or other device content. Your device model is sent only with a crash report or with a support message you choose to send

4. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)) — your account, sign-in, subscription, daily free matches, saved predictions and AI Assist
• Legitimate interest (Art. 6(1)(f)) — usage and technical data to understand how the App is used and to improve it, measuring the App's speed, crash reports, server logs for troubleshooting, and preventing abuse
• Consent (Art. 6(1)(a)) — push notifications. You give consent through your device's notification permission and can turn notifications off at any time in the App's Settings or your device settings
• Support messages — to answer your request: performance of the contract where it concerns your subscription (Art. 6(1)(b)), otherwise our legitimate interest in answering users (Art. 6(1)(f))

5. How We Use Your Data

• To sign you in and provide the App's features
• To verify your subscription with Google Play
• To manage your daily free matches
• To send notifications about the day's matches, at your local time and in the App's language
• To understand how the App is used and to improve it
• To understand where installs come from and where sign-in fails
• To measure and improve the App's speed
• To answer your questions in AI Assist
• To provide support when you contact us
• To detect and prevent abuse of the App

We do not sell your data. We do not use your data for advertising, and we do not build advertising profiles. We do not share your data with third parties for their own marketing.

6. Where Your Data Is Stored and Processed

• Our database (Google Cloud Firestore) is located in the United States. It holds your account, subscription, usage and technical data, your saved predictions, AI Assist conversations and support messages.
• Sign-in is handled by Firebase Authentication, which Google runs only in the United States.
• Our backend servers run on Google Cloud Run in the United States (us-central1), next to the database, and in Frankfurt, Germany (europe-west3), which reads and writes the database in the United States. Scheduled background processing runs in the United States. We are moving all servers to the United States; the Frankfurt servers will be retired once older App versions are no longer in use.
• Background functions — account creation, subscription verification and account deletion — run on Google Cloud Functions in the United States (us-central1).
• Push notifications and crash reports (Firebase Cloud Messaging, Firebase Crashlytics) are processed by Google on its global infrastructure, which includes the United States.
• AI Assist questions are processed by Anthropic in the United States (see Section 8).
• E-mail: support messages sent from the App, and occasional service e-mails about your subscription, are sent through Resend, which stores e-mail data in the United States. Our support mailbox is hosted by Namecheap (Private Email) and read in Gmail.

Transfers outside the European Economic Area. Most of your data is processed in the United States. Google LLC and Resend, Inc. are certified under the EU–U.S. Data Privacy Framework, and their data processing terms also include the European Commission's Standard Contractual Clauses. Transfers to Anthropic PBC are covered by Standard Contractual Clauses (GDPR Art. 46). You can ask us for more information about these safeguards at the contact address in Section 17.

7. Service Providers

These providers process personal data on our behalf, only to provide the App:

• Google LLC — Firebase Authentication, Cloud Firestore, Cloud Run, Cloud Functions, Firebase Cloud Messaging, Firebase Crashlytics, Cloud Logging, Firebase Hosting, and Gmail (where our support e-mail is received). Privacy: firebase.google.com/support/privacy
• Google Play — subscriptions and payments. Privacy: policies.google.com/privacy
• Anthropic PBC — the language model behind AI Assist. See Section 8. Privacy: anthropic.com/legal/privacy
• Resend, Inc. — delivery of support messages sent from the App to our support mailbox, and of occasional service e-mails about your subscription. Privacy: resend.com/legal/privacy-policy
• Namecheap, Inc. — hosting of our support e-mail address (Private Email). Privacy: namecheap.com/legal/general/privacy-policy

We also use the following data sources. No personal data is sent to them — only requests for sports data:

• API-Football (API-Sports) — football fixtures, statistics and odds
• api-tennis.com — tennis fixtures, statistics and odds
• Open-Meteo — weather forecasts for stadium locations
• OpenStreetMap Nominatim — locating stadium cities for the weather forecast

8. AI Assist

AI Assist answers questions about the statistical context of a match. This is how it handles your data:

• What is sent to Anthropic: the text of your question, your earlier messages in the same match conversation (up to the last 12 messages), and the statistical context of the match (team form, model probabilities, odds and similar public sports data)
• What is not sent: your email address, account identifier, subscription status or any other identifier
• What we store: the questions and answers of your conversation about a match, so AI Assist can follow the conversation. A conversation is deleted automatically 4 hours after your last message in it, and immediately if you delete your account. We also keep a count of how many questions you asked per day and per month, to apply usage limits; this count is deleted with your account
• Who processes it: Anthropic PBC (United States), under its commercial terms. Transfers are covered by Standard Contractual Clauses under GDPR Art. 46

Please do not enter personal or sensitive information into AI Assist. It is designed to discuss sports statistics only.

9. How Long We Keep Your Data

• Account, subscription and technical data, usage data, notification log, daily free-match history and saved predictions: as long as your account exists. They are deleted when you delete your account
• AI Assist conversations: 4 hours after your last message, or earlier if you delete your account
• Usage data recorded before you sign in (linked only to the App's random identifier): deleted with your account if you signed in on that device. If you never sign in on that device, they are deleted automatically after 6 months; only aggregated daily counts that contain no identifier (by country and step) are kept
• Server logs: deleted automatically after 30 days
• Crash reports: deleted by Google after 90 days
• Support messages sent from the App: 12 months, or earlier if you delete your account. E-mails in our support mailbox are kept as long as needed to handle your request
• Billing records: we do not keep billing records of our own. Google Play is the seller of subscriptions purchased in the App and keeps the purchase records under its own policy
• Aggregated statistics that do not identify you (for example, daily totals) may be kept indefinitely

10. Account Deletion

You can delete your account and personal data at any time:

• In the App: Menu → Settings → Delete account. Your account and the data listed in Section 9 are deleted automatically, usually within minutes
• On the web: sign in at edgity.app and delete your account in Settings
• By email: write to support@edgity.app from the address linked to your account. We will delete your account within 30 days and reply to confirm

More details: edgity.app/delete-account.

Deleting your account does not cancel your Google Play subscription. You must cancel it separately in the Google Play Store, otherwise you will continue to be charged. Server logs are deleted when their retention period ends (Section 9).

11. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights:

• Right of access (Art. 15) — request a copy of your personal data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction (Art. 18) — limit how we process your data
• Right to data portability (Art. 20) — receive your data in a machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent — for any consent-based processing, at any time

To exercise these rights, contact us at support@edgity.app. We will respond within one month.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Hungary, this is:

EU residents may also contact their local data protection authority.

13. Security

• All data is transmitted over encrypted connections (HTTPS/TLS)
• Data at rest is encrypted by Google Cloud
• Access to personal data is limited to what is needed to run the App

No system is 100% secure. If a personal data breach occurs, we will notify the supervisory authority within 72 hours, and you without undue delay where the breach is likely to put your rights at high risk (GDPR Art. 33–34).

14. Children's Privacy

Edgity is not directed to anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at support@edgity.app and we will delete it.

15. Sports Analytics Disclaimer

Edgity provides statistical analysis and probability calculations for sports events. The App is not a gambling platform — we do not facilitate, accept or process bets, and we do not link to bookmakers. However, the analytics provided may relate to gambling activities, which are restricted to adults (18+) and may be regulated or prohibited in your jurisdiction. You are solely responsible for complying with local laws regarding sports betting.

Statistical models cannot predict outcomes with certainty. Nothing in the App constitutes financial or betting advice.

If you have a gambling problem, please seek help at gamblingtherapy.org or your local support organization.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in the App or in legal requirements. The "Last updated" date at the top shows the current version. We will inform you of significant changes in the App.

17. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

Privacy · Terms · Refund policy · Contact