Privacy Policy
This Privacy Policy explains what personal data Matchwise (matchwise.pro and the Matchwise iOS/Android apps, operated by Anıl Kıral) collects, why, and the rights you have over it. It applies to everyone who creates a Matchwise account, on the web or in the mobile app.
1.What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Email address, password (stored as a salted bcrypt hash — we never see or store your plaintext password) | Create and secure your account, sign you in |
| Billing data | Subscription plan, token balances, transaction/ledger history, purchase history (mobile in-app purchases via Apple/Google) | Deliver paid features, show your balance and history |
| Activity data | Predictions you've revealed, portfolios you've built, favorites, performance stats, search terms you enter | Show your history, compute your personal analytics, run the search feature |
| Technical data | IP address and standard request logs (server access logs); on mobile, a device identifier, push-notification token, and in-app screens/actions | Security, abuse/rate-limit prevention, debugging, push notifications, product analytics |
We do not collect payment card or bank account numbers — those are entered directly with Apple, Google, or our payment processor and never pass through our servers.
2.How we use it
- To operate the service: authenticate you, track your token balance, store and show your prediction/portfolio history.
- To generate predictions: match statistics, odds, and other public sports data are sent to our AI infrastructure providers to produce a forecast. Your personal account information (email, password, billing data) is never included in these requests — only sports data about the match itself.
- To prevent abuse and secure accounts (rate limiting, fraud detection).
- To respond to support requests you send us.
3.Cookies, analytics & tracking
Web (matchwise.pro): your login session token is stored in your browser's local storage, not a cookie. The site uses Google Analytics (gtag.js) to see which pages get visited and whether App Store/Play Store buttons get clicked — this can set analytics cookies from Google. gtag.js does not load until you make a choice in the cookie banner shown on your first visit — nothing is set before that. You can change your choice anytime using the "Do Not Sell or Share My Info" link in the footer of any page.
Mobile app: we use Firebase Analytics (a Google product) to understand how the app is used — screens viewed, features used, purchases made — tied to your account so we can improve the product and see which features matter. This data, along with your device's advertising identifier, may also be used to measure the performance of our own ad campaigns on Google Ads. On iOS this requires your permission through Apple's App Tracking Transparency prompt, shown the first time you use the app; you can change your answer anytime in iOS Settings → Privacy & Security → Tracking. On Android, the system's Advertising ID is used the same way and can be reset or limited from your device's Google settings. We do not use this data to track you across other companies' apps or websites beyond measuring our own campaigns, and we never sell it.
3a.Your California privacy rights — Do Not Sell or Share My Personal Information
We do not sell personal data for money, and we don't work with data brokers. However, the CCPA (as amended by the CPRA) defines "share" broadly enough that using Google Analytics/Google Ads with an advertising identifier to measure our own ad campaigns (Section 3, above) can count as a "share" of personal information with Google, even without any payment changing hands.
If you are a California resident, you have the right to opt out of that sharing at any time, with no impact on any feature of the site or app:
- On the web: click "Do Not Sell or Share My Info" in the footer of any page (or the cookie banner on first visit) and choose Decline. This stops gtag.js from loading for that browser.
- Global Privacy Control: if your browser or an extension sends the Global Privacy Control signal, we honor it automatically as a valid opt-out request — you won't even see the banner.
- On mobile: decline the App Tracking Transparency prompt (iOS) or limit ad personalization in your Google account settings (Android) — see Section 3.
- By email: support@matchwise.pro — we'll confirm your opt-out within 15 business days, as required by the CCPA.
California residents also have the right to know what personal data we've collected, to request deletion, to correct inaccurate data, and to not be discriminated against for exercising any of these rights — all covered by the "Your rights" section below (Section 7), which applies equally to California residents.
4.Who we share data with
We use a small number of infrastructure providers to run the service. They process data on our behalf under their own security and confidentiality commitments — they don't use your data for their own purposes.
- Database hosting — MongoDB Atlas, for storing account and application data.
- Server hosting — DigitalOcean, for running the application.
- AI infrastructure providers — process sports/match data (not your personal account data) to generate predictions.
- Google (Firebase Analytics, Google Ads) — mobile app analytics and, where permitted (see Section 3), measuring our own ad campaigns. Also provides push notification delivery (Firebase Cloud Messaging) and Sign in with Apple/Google account verification infrastructure.
- Apple — if you use Sign in with Apple, Apple verifies your identity and passes us a stable account identifier (and your email, or a private relay address, if you choose to share it).
- RevenueCat — processes in-app purchase/subscription receipts from Apple and Google on our behalf so we can credit your account correctly.
- Payment processor / app stores — Apple App Store and Google Play process mobile purchases directly; our web payment processor handles web billing. They receive the billing information needed to process your payment, per their own privacy policy.
We do not sell, rent, or trade personal data to third parties for their marketing purposes. Where analytics/advertising identifiers are shared with Google as described in Section 3, that's solely to run and measure our own product and campaigns — not to let Google or anyone else target you with third-party ads.
5.Data retention
We keep your account data for as long as your account is active. If you ask us to delete your account (see Section 7), we delete your personal data — email, password hash, billing/ledger records tied to you — within a reasonable time, except where we're required to keep transaction records for legal, tax, or fraud-prevention purposes.
6.Security
Passwords are hashed with bcrypt and never stored in plaintext. Sessions use signed JWTs. All traffic to matchwise.pro is encrypted in transit (HTTPS/TLS). No method of transmission or storage is 100% secure, but we take reasonable, industry-standard measures to protect your data.
7.Your rights
Depending on where you live (this covers rights available under the EU/UK GDPR, Turkey's KVKK, and US state privacy laws such as the CCPA), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated personal data.
- Export your data in a portable format.
- Object to or restrict certain processing.
You can delete your account directly from the mobile app (Profile → Delete Account) — this removes your personal data immediately, subject to the retention note in Section 5. Data export, or account deletion from the web, is handled manually: email us at support@matchwise.pro from your account's registered address and we will process your request within 30 days.
8.Children
Matchwise is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will remove it.
9.International data transfers
Our infrastructure providers may process and store data in the United States, the European Union, or other countries. Where required, we rely on standard contractual safeguards offered by those providers for cross-border transfers.
10.Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a new "Last updated" date above.
11.Contact
Questions about this policy or your data: support@matchwise.pro