Privacy Policy

The short version

We collect the minimum information needed to run a bet tracker: your email, your bets, your settings. We store it in a managed database in the EU. We don’t sell it, share it, advertise against it, or train AI on it. You can export it or delete it whenever you want.

What we collect

• Your email address — required to create an account so you can sync bets across devices.
• Your bets — every bet you log, including the event, selection, odds, stake, status, result, tipster, tags, notes, and timestamps. Plus any closing-line prices and CLV/profit derived from them.
• Your profile — handle, optional display name, optional bio, optional avatar image, public/private flag.
• Settings — preferred currency unit, theme, active book selection.
• Infrastructure logs— IP address, browser user-agent, and timestamps of requests, retained for up to 30 days for abuse-prevention and debugging. We don’t link these to your identity for any other purpose.

What we don’t collect

• Real-world identity (no full name, address, or ID required)
• Payment details (the app is free; we don’t take payments)
• Bookmaker account credentials
• Information about anyone besides you

Where it lives

Your data is stored in a managed Postgres database operated by Supabase, hosted in the eu-west-1 AWS region (Ireland). Daily backups with 7-day point-in-time recovery are managed by Supabase.

Row-Level Security at the database layer means even other authenticated users can’t see your private books or bets. Only public-profile data (aggregate stats, last 30 settled bets from your chosen public book) is visible at your /u/your-handle URL, and only if you have the public-profile toggle on.

Who processes it on our behalf

• Supabase — database, authentication, file storage (for profile avatars). EU-hosted, GDPR-compliant.
• Resend — sending the magic-link sign-in emails. Receives your email address only.
• Anthropic (Claude) — when you use the paste parser to extract bets from free text, the text you paste is sent to Anthropic for processing. The model never sees your email or any account identifier. Pasted text is not retained beyond the request.
• Railway — hosts the application server. Receives requests as part of routing.

We don’t use third-party analytics scripts, ad networks, or cross-site trackers. There’s no Google Analytics, no Facebook pixel, no Hotjar. The only cookies set are the ones Supabase uses to keep you signed in.

Your rights

If you’re in the UK, EU, or anywhere with comparable data laws, you have the right to:

• Accessyour data — go to Settings > Your data > Export to CSV. You get every bet you’ve logged. Email us if you want the profile / settings data too and we’ll send it.
• Correct your data — edit any bet or profile field in the app directly.
• Delete your data — email us at privacy@amiup.ioand we’ll delete your account and bets within 30 days. (Self-serve deletion is on the roadmap.)
• Restrict processing— turn your profile private in Settings to remove it from public discovery, then stop using the app until you’re ready.
• Objectto processing — if you think we’re processing your data unfairly, tell us at privacy@amiup.io.
• Complainto a supervisory authority. In the UK that’s the ICO.

How long we keep your data

For as long as your account exists. When you delete your account, all your bets, books, profile, and avatar are removed within 30 days. Backups may retain copies for an additional 30 days before being overwritten.

Infrastructure logs (IP, user-agent, timestamps) are retained for up to 30 days then deleted.

Children

Am I Upis not intended for anyone under 18. We don’t knowingly collect data from children. If you believe we have, contact us and we’ll delete it immediately.

Changes to this policy

We’ll update the “Last updated” date when this policy changes. For material changes, we’ll notify you in the app or by email before the new policy takes effect.

Contact

Privacy questions, data requests, or anything else: privacy@amiup.io