Privacy Policy
We collect the minimum data needed to run Odds Scanner AI — and we tell you, in plain English, what we do with each piece. CX Media Ltd is the data controller.
What we collect
Account data
Email, name, password hash — for sign-in and support; plus your Google or Apple identifier if you sign in with them.
Betting activity
The bets you track (stake, odds, bookmaker, notes) and the tips you follow — to power My Bets and your alerts.
Preferences
Your market, language, odds format and notification choices — to tailor the app to you.
Device & technical data
OS, app version and push token — for compatibility and notifications; and your IP address, briefly, to rate-limit abuse.
Why we use it
Service delivery: Authenticate you, surface tips, run notifications. Lawful basis: contract.
Communications: Service emails (always) and product updates (only if you opt in). Lawful basis: consent.
Compliance: Detect fraudulent accounts and respond to lawful requests. Lawful basis: legal obligation.
Who sees your data
Our engineers, on a need-to-know basis, with audit logs.
Sub-processors that operate the service: Google and Apple (sign-in), Resend (email), Cloudflare (media storage), and Expo/Apple/Google (push delivery).
Authorities, only when compelled by valid legal process.
How long we keep it
Account & betting data — while your account is active, plus 30 days.
Support emails — 2 years from last contact.
Where it lives
Primary storage is in the EU (Frankfurt). Push tokens and CDN edge data may transit other regions; transfers outside the UK rely on the UK International Data Transfer Agreement and additional safeguards.
Your rights
Under the UK GDPR you can, at any time:
Access a copy of your data.
Correct anything inaccurate.
Delete your account and personal data.
Port your data to another service.
Object to processing based on legitimate interest.
Withdraw consent for marketing — without affecting prior processing.
Exercise any of these from Settings → Data & privacy or by emailing privacy@oddsscanner.com. We respond within 30 days.
Children
Our service is not directed at people under 18 and we do not knowingly collect data from minors. If we learn we hold such data, we delete it.
Security
Data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. We run quarterly third-party penetration tests and disclose incidents per applicable law.
Complaints
You can complain to the Information Commissioner's Office (ICO), the UK's data protection authority. We'd prefer to resolve things first, so please reach out to us before filing a complaint.
Data Protection Officer · CX Media Ltd · Malta.