This policy explains what personal information EdgeCourt collects, why, who processes it, how long it is kept, and how you can access or erase it. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU and UK GDPR, and Apple App Store and Google Play requirements.
In short. We collect your email address, your favourite team if you choose one, the time of your last visit, and a record of when you agreed to our Terms and this policy. EdgeCourt publishes one analysis each night that everyone sees, so nothing about which picks you look at is collected or tied to you. We do not sell personal information, we do not use advertising trackers, and we do not share your data for anyone else's marketing. You can export or permanently delete everything from inside the app at any time.
EdgeCourt is an NBA prop analytics application operated by an independent sole developer based in Ontario, Canada ("EdgeCourt", "we", "us"). We are the controller of the personal information described here.
Under PIPEDA's accountability principle, one person is responsible for our privacy practices:
Privacy Officer: Arun, Founder and Operator, EdgeCourt
Email: arunselva9966@gmail.com
We collect only what the product needs to function. All of it comes directly from you or is generated by your use of the app — we do not buy personal information or obtain it from data brokers.
| Category | Specifics | Source |
|---|---|---|
| Account identifiers | Email address; display name if you choose to provide one at sign-up; a system-generated account ID | You |
| Last visit | The time you last opened the app, so it can show what changed since then | Generated by your use |
| Consent record | The version of the Terms and this policy you agreed to when you confirmed your age (21 or older in the US, 19 or older in Ontario and elsewhere), and the time our server recorded it | You (the time is set by our server) |
| Preferences | Your favourite NBA team, if you choose one, and whether you have answered that question — so we ask it once rather than on every device you sign in from | You |
| Technical data | Standard server logs kept by our hosting provider, including IP address and request metadata, for security and reliability | Automatic |
| Error diagnostics | When the app crashes or a request fails: the error message and stack trace, the screen it occurred on, the app version, and the device or browser type. This is sent only when something goes wrong — never during normal use — and carries no email, name, or account identifier | Automatic, on error only |
We do not collect payment card details, precise or coarse location, contacts, photos, microphone or camera data, health data, biometrics, browsing history on other sites, or device advertising identifiers. We use no third-party advertising SDKs, analytics trackers, or cross-site tracking cookies, and we do not build advertising profiles. We do not use your data to train machine-learning models.
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under US state privacy laws.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and authenticate your account; send one-time sign-in links | Email, account ID | Performance of a contract |
| Remember your favourite team and show what changed since your last visit | Preferences, last visit | Performance of a contract |
| Keep a record that you confirmed your age and agreed to the Terms and this policy | Consent record | Legal obligation and legitimate interests (showing what was agreed, and by whom) |
| Keep the service secure, debug faults, prevent abuse | Technical data | Legitimate interests (security and reliability) |
| Comply with legal obligations | As required | Legal obligation |
Under PIPEDA we rely on your consent, which you give by creating an account, and which you may withdraw at any time by deleting your account (section 8). Withdrawing consent does not affect processing already carried out.
EdgeCourt stores a small amount of data in your browser or device storage so the app works the way you left it: your theme and sound preferences, any notes you attach to a pick, favourite players and team, and your sign-in session token. This is functional storage, not tracking — none of it is transmitted to advertisers or used to follow you across other websites. Clearing your browser data or deleting the app removes it.
We share personal information only with service providers who process it on our instructions ("processors"), and only for the purposes below. We do not disclose it to anyone else except where legally compelled.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Authentication and database | Email, account ID, consent record, preferences, last visit time |
| Vercel | Application hosting and serverless functions | Technical data, and account data in transit |
| Anthropic (Claude) | Reviews the statistical model's candidate picks each night and writes the daily scouting report | Public betting-market data and public sports statistics only — no email, name, or account identifier is sent |
| The Odds API | Public sportsbook odds and lines | No personal information |
| ESPN (public data) | Public scores, box scores, injury reports | No personal information |
| Sentry | Error monitoring — tells us when the app crashes or an API call fails, so faults are found before you have to report them | Technical error data only: the error message and stack trace, the screen it happened on, app version, and device/browser type. No email, name, or account identifier is sent, and we do not record your session, page views, or anything you type. |
| Cloudflare Turnstile | Checks that a request for a sign-in email comes from a person rather than a script, so nobody can use EdgeCourt to send mail to addresses that are not theirs | Technical data from your browser at that moment — IP address and browser/device characteristics. No email, name, or account identifier. Turnstile sets no advertising or cross-site tracking cookies. |
| GitHub | Stores our nightly database backups, so the service can be restored after a failure | The backup files, encrypted before they leave our systems with a key GitHub does not hold. Kept for 30 days. |
| Email delivery provider | Sends your sign-in links | Email address |
We may also disclose personal information where required by law, to respond to a valid legal process, to enforce our Terms, or to protect the rights and safety of our users or the public. If EdgeCourt is ever involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction; we would notify you before it becomes subject to a different privacy policy.
Your account database is hosted in Canada (Supabase, ca-central-1 region). However, some of our processors — notably Vercel, Anthropic, Sentry, Cloudflare and GitHub — operate infrastructure in the United States and other countries, so your information may be processed or stored outside Canada, the EU and the UK.
PIPEDA requires us to tell you this plainly: while your information is in another country, it may be accessible to the courts, law enforcement and national security authorities of that country. Where personal information is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or an applicable adequacy decision, and we remain accountable for its protection through contractual and technical safeguards.
| Data | Retention |
|---|---|
| Account identifiers, consent record, preferences, last visit | For as long as your account exists. Erased immediately when you delete your account. |
| Notes on picks | Stored only on your device, never on our servers. Removed when you clear the app's data or uninstall it. |
| Analyses created before 5 October 2026 | Before EdgeCourt moved to one shared nightly analysis, analyses were run per account. Any such analyses and their graded picks stay linked to the account that ran them until it is deleted; then the link is removed and they remain as anonymous entries in the record. |
| Backups | Residual copies may persist in our providers' encrypted backups for a short period (typically up to 30 days) before being overwritten. |
| Server logs | Retained by our hosting provider for a short period as part of normal operation, then discarded. |
| Records we must keep by law | Only as long as the applicable legal obligation requires. |
Depending on where you live, you have the right to access your personal information, correct it, delete it, obtain a portable copy, withdraw consent, object to or restrict certain processing, and not be discriminated against for exercising these rights. EdgeCourt implements the main ones directly in the product rather than behind a request form:
We respond to requests within 30 days. We do not charge a fee, and we will not ask you to give up any right in exchange for service. We may need to verify your identity — normally by confirming control of the account email — before acting on a request.
All traffic is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure providers. Database access is governed by row-level security policies, which make it technically impossible for one account to read another's data. Sign-in uses one-time email links, so there is no password for us to store or for an attacker to steal. Administrative credentials are held server-side only and are never exposed to the browser.
No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping access to your email account secure, since sign-in links are delivered there.
If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as PIPEDA requires, and will maintain records of the breach. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours where required.
EdgeCourt uses a statistical model to produce probability and expected-value estimates about basketball outcomes, and a large language model to review those estimates and write a daily scouting report. These are analyses of public sports data — they are not decisions about you, they do not profile you, and they produce no legal or similarly significant effect on you. We do not use automated decision-making within the meaning of Article 22 of the GDPR.
EdgeCourt is intended solely for adults: 21 and over in the United States, and 19 and over in Ontario and elsewhere. It is not directed to children. We do not knowingly collect personal information from anyone under those ages. If we learn that we have, we will delete it promptly. If you believe a minor has created an account, contact the Privacy Officer and we will remove it.
We may update this policy as the product changes. The effective date and version at the top will change, the current version will always be available at this URL, and we will notify signed-in users in the app of any material change before it takes effect.
For any privacy question, request, or complaint, contact our Privacy Officer:
arunselva9966@gmail.com
We will acknowledge your complaint, investigate it, and tell you the outcome. If you are not satisfied with our response, you have the right to escalate: