1. Who We Are
PredictX is a cricket & football companion app providing live scores, AI-powered match predictions, standings, and expert analysis. We are operated by Inside Edge Dev, India. Contact: contact@predictx.app
2. Data We Collect
Collected when you sign up or log in. Used solely for authentication via one-time password (OTP). Stored securely in our database.
Optionally provided after signup. Used to personalise your in-app experience. You can change or remove it at any time from your Profile.
Teams you select in the app. Used to tailor match highlights and quick access. Stored linked to your account.
3. Data We Do NOT Collect
- Email address
- Precise or approximate location
- Device identifiers or advertising IDs
- Contacts, camera, or microphone data
- Browsing history or app usage analytics
- Payment or financial information
- Any data from users under 13
4. How We Use Your Data
| Data | Purpose | Shared? |
|---|---|---|
| Phone number | Authentication (OTP login) | OTP provider only (delivery) |
| Display name | In-app personalisation | No |
| Favourite teams | Personalised experience | No |
5. Third-Party Services
We use the following third-party services. No personally identifiable user data is sent to any service except where stated:
- Supabase — Database and realtime infrastructure (AWS, SOC 2 Type II, data encrypted at rest and in transit). Stores phone number, display name, favourite teams, and authentication tokens.
- JSK Bulk Marketing (jskbulkmarketing.in) — SMS OTP delivery. Receives your phone number solely to send the login OTP. No data is retained by them beyond delivery.
- Sportsmonks Cricket API — Cricket match data. No user data is sent.
- Cricbuzz via RapidAPI — Cricket news content. No user data is sent.
- football-data.org — Football match data. No user data is sent.
6. Authentication & Security
We use a custom JWT-based authentication system. Your OTP is hashed using bcrypt before storage and deleted immediately after successful verification. Access tokens expire in 15 minutes. Refresh tokens (90-day validity) are stored as SHA-256 hashes — the raw token lives only on your device. All data is transmitted over HTTPS (TLS 1.2+).
7. Data Retention
- OTP data: Deleted immediately after verification or after 10-minute expiry.
- Refresh tokens: Deleted on logout or after 90 days.
- Account data: Retained until you delete your account.
- Post-deletion: All data permanently removed within 7 days.
8. Your Rights
- Access: Your profile screen shows all data we hold about you.
- Correction: Edit your display name and favourite teams in the Profile screen at any time.
- Deletion: Tap Delete Account in the Profile screen. This immediately and permanently deletes all your data. Alternatively email contact@predictx.app — requests processed within 7 days.
9. Children's Privacy
PredictX is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us at contact@predictx.app and we will delete it promptly.
10. Predictions Disclaimer
Match predictions in PredictX are data-driven statistical estimates for entertainment and informational purposes only. They are not gambling advice, betting tips, or financial recommendations. PredictX is not a betting platform.
11. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via an in-app notice. Continued use after changes constitutes acceptance.
12. Contact Us
For privacy questions or data requests: contact@predictx.app
Inside Edge Dev, India