Privacy Policy

Last updated: October 11, 2026

This policy explains what information the SportsMetrics mobile app and the website sportsmetrics.pro (together, the "Service") collect, how we use it, and the choices you have. "We" means DIX Company.

1. Information we collect

• Account information. When you sign in with Google or Apple we receive an account identifier, your email address and, if provided, your display name. We do not receive your Google or Apple password. If you use Apple's "Hide My Email", we only see the relay address.
• Wallet and activity data. Your token balance, a ledger of token changes, your daily free pick usage, the predictions you unlock, and your token pack purchases.
• Session data. To keep you signed in we store a hashed refresh token (never the token itself), along with when it was issued and expires.
• Technical data. Server logs may include IP address, device and app version, and request details. These are used for security, rate limiting and debugging. Secrets and credentials are redacted from logs.
• Purchase information. Payments are processed by Apple or Google. We receive confirmation of the purchase, not your payment card details.

We do not collect your precise location, contacts, photos or microphone data.

2. How we use information

• To create and secure your account and keep you signed in.
• To operate the token wallet, free daily pick, unlocks and purchases.
• To provide, maintain and improve the Service and fix problems.
• To detect and prevent abuse, fraud and security incidents.
• To respond to your support requests and meet legal obligations.

We do not sell your personal information and we do not use it for third-party advertising.

3. Service providers

We share data only with providers that help us run the Service, under their own terms and privacy policies:

• Google (Firebase Authentication, Google Sign-In) and Apple (Sign in with Apple) for authentication.
• Supabase for database hosting.
• Our hosting provider DIX Company for running our servers.
• Apple App Store and Google Play for app distribution and payments.
• API-Football supplies sports data to our servers. We do not send your personal information to it.

We may also disclose information if required by law or to protect our rights, users or the public.

4. Retention

We keep account and wallet data while your account is active. Refresh tokens expire after 30 days or earlier on sign-out. When you delete your account we delete or anonymise your personal data, except records we must keep for legal, tax or fraud-prevention reasons.

5. Your rights and choices

Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. To exercise these rights, or to request account deletion, email support@sportsmetrics.pro. We will respond within a reasonable time and within any period required by law. You may also complain to your local data protection authority.

6. Security

We use encryption in transit (HTTPS), short-lived access tokens, hashed refresh tokens, rate limiting and access-controlled databases. No system is perfectly secure, so we cannot guarantee absolute security.

7. International transfers

Our providers may process data in countries other than yours, including outside the EU/EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses.

8. Children

The Service is not directed to anyone under 18 and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

9. Changes

We may update this policy. The "Last updated" date will change, and for material changes we will give notice in the app or by email where appropriate.

10. Contact

Questions about this policy: support@sportsmetrics.pro.