Privacy Policy

Who the controller is

OddsOut is operated by OddsOut Lda, a company with its registered office at Rua dos Álamos 22 B-2 J, 9000-202 Funchal, Portugal, tax number 519558456. We are the data controller for the personal data described here.

For any privacy question, write to support@oddsout.app.

What this policy covers

One policy covers both the OddsOut website and the OddsOut mobile app, so there is never a question about which one applies to you. Where a rule differs between the two, it says so.

OddsOut is built for something people rarely tell anyone. This policy explains, in plain words, what we collect, why, and what we will never do with it.

The website does not track you

This site is made of static pages. It uses no cookies, no analytics tooling, no advertising pixels, and embeds no social buttons that would load third-party content.

If you give us your email address through the signup form, we use it only to send you what you asked for, and you can unsubscribe at any time.

Technical hosting logs

The site is served through a content delivery network which, for security and operational reasons, temporarily processes technical request data — IP address, browser type and requested page. These logs exist to protect the site against abuse and keep it available, on the legitimate interest basis in Article 6(1)(f) GDPR. We do not use them to identify you or to build profiles.

What the app collects

The app collects as little as it needs to work. No real name is required at any point.

• Account data: an email address or sign-in identifier, and an anonymous display name you choose.
• Recovery data you enter: your day one, check-ins, money-saved entries, journal entries, badges and pledges.
• Community content: posts and replies you choose to publish in support groups.
• Odd conversations: messages you send to the AI companion.
• Device and usage data: app version, device type, language, and crash reports.

Why we use it, and on what legal basis

We use your data only to run OddsOut and to keep it safe.

• To keep your count, savings and journal in sync across your devices — necessary to perform our contract with you, Article 6(1)(b) GDPR.
• To run the community and moderate it for safety — contract, and our legitimate interest in keeping members safe, Article 6(1)(f).
• To let Odd respond to what you write — contract, on your instruction.
• To send notifications you have turned on — your consent, Article 6(1)(a), withdrawable at any time in settings.
• To fix bugs and understand which features help — legitimate interest, Article 6(1)(f).

What we never do

We do not sell your data. We do not share it with gambling operators, affiliates or advertisers. We do not use your journal or your conversations with Odd to target advertising, and we do not build profiles for third parties.

Odd, the AI companion

Odd is an AI, and the app says so. Your messages to Odd are processed by Anthropic to generate replies. Odd is not a therapist and does not provide medical or emergency care.

We do not use your conversations to train models.

Who else processes your data

We rely on a small number of service providers who process data on our behalf under contract.

• Google Firebase — hosting, database, authentication and cloud functions (europe-west1)
• Anthropic — AI processing for Odd
• Sentry — crash reporting
• RevenueCat — subscription management
• Apple — App Store, subscriptions and push notifications

How long we keep it

Your recovery data stays as long as your account exists. If you delete your account, we delete your personal data within 30 days, except what we must keep by law.

Community posts may remain visible in anonymised form after deletion so conversations stay coherent. You can ask us to remove them.

International transfers

Our own processing runs in the European Union. Some providers process data outside the EEA — Anthropic in particular, which handles your messages to Odd.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection in relation to your personal data. You can also withdraw consent at any time. To exercise any of them, contact us at support@oddsout.app and we will respond within one month.

If you believe your data has not been handled properly, you may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

Security

Data is encrypted in transit and at rest. Access is limited to people who need it to run the service. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Children

OddsOut is for adults. You must be at least 18, or the legal gambling age where you live if that is higher. We do not knowingly collect data from anyone younger.

Changes to this policy

If this policy changes, the update date at the top of the page changes with it. Material changes will be flagged visibly, and in the app before they take effect.