Privacy Policy

Effective date: September 14, 2026

The Oracle ("we", "us") provides sports analytics and prediction market intelligence. This policy explains what we collect, why, and what rights you have.

1. What We Collect

• Account data: email address, hashed password, sign-in provider (Google, Apple).
• Usage data: tracked picks, saved parlays, favorites, followed lenses, virtual bankroll history, and app preferences.
• Ask content: when you use Ask, your question, recent conversation context, and selected league. We also send relevant Oracle picks and market odds for that league to help generate a response.
• Device data: device type, operating system, app version, anonymized IP for security and rate limiting. If you opt in to alerts, we store an Apple push notification token and, when applicable, a Live Activity token with your account to deliver them.
• Diagnostic data: crash and hang reports that can include app version, operating system, device model, error or hang details, and call stacks. The diagnostic record does not include your account ID.

We do not collect government IDs, payment instruments, or financial account numbers. In-app subscription purchases are processed entirely by Apple through the App Store. We never see your card or bank details; we receive only Apple-signed transaction records (product, transaction identifiers, expiry) to activate your membership. The Oracle does not accept wagers and does not hold user funds.

2. How We Use Data

• Authenticate your account and protect it from abuse.
• Persist your tracked picks, favorites, bankroll history, and preferences across sessions.
• Generate an Ask response when you choose to use Ask.
• Personalize app state, such as favorites and preferences.
• Surface relevant notifications you opted into.

We do not sell personal data and do not share it with advertisers.

3. Data Processors

• A cloud database and authentication provider hosts your account and app data in the United States. Data is encrypted in transit and at rest.
• A serverless compute and content delivery provider runs our backend functions and delivers content to your device.
• Apple processes in-app purchases and delivers push notifications.
• An AI service provider processes Ask requests through our server. When you use Ask, it receives your question, recent conversation context, selected league, and relevant Oracle picks and market odds to generate a response. We do not store Ask transcripts in our app database; the provider may retain request logs under its own policy.

These processors act on our instructions and are bound by data processing agreements. A current list of our processors is available on request at support@theoracle.app.

4. Third-Party Data Sources

We read public sports and market data from third-party data providers. These reads are one-way: we pull odds, scores, and rosters. No personal data about you is sent to them.

5. Cookies and Local Storage

We use first-party local storage to remember your session, age confirmation, theme, and onboarding state. We do not use cross-site advertising cookies.

6. Data Retention

• Account data is retained while your account is active.
• Tracked picks and performance history are retained while your account is active so your record stays accurate.
• Deleted account data is purged within 30 days of deletion, except where retention is legally required.

7. Your Rights

You may at any time:

• Access your data.
• Correct your data.
• Export your tracked picks.
• Delete your account, which removes your profile, picks, and bankroll history.

Requests for a copy of your data are served in-app to the signed-in account (Account → Data & privacy → Full account export) and by email from the address on the account. We do not act on requests naming another account.

To delete your account, open the app and go to Account → Data & privacy → Delete account. You can also email support@theoracle.app.

8. GDPR (European Economic Area, UK, Switzerland)

We process personal data on the lawful bases of contract performance (delivering the service you signed up for) and legitimate interest (security, fraud prevention, product improvement). You have the right to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with your supervisory authority. Our data protection contact is support@theoracle.app.

9. CCPA / CPRA (California)

California residents have the right to know what categories of personal information we collect, to request deletion, to correct inaccurate data, and to opt out of any sale or sharing of personal information. The Oracle does not sell or share personal information as defined by the CCPA. To exercise rights, email support@theoracle.app.

10. Children

The Oracle is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact support@theoracle.app and we will remove it.

11. Changes

We will post material changes to this policy in-app and update the effective date above.

12. Contact

support@theoracle.app