This policy explains what personal information EdgeCourt collects, why, who processes it, how long it is kept, and how you can access or erase it. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU and UK GDPR, and Apple App Store and Google Play requirements.
In short. We collect your email address, the analyses you run, and a daily usage count. We do not sell personal information, we do not use advertising trackers, and we do not share your data for anyone else's marketing. You can export or permanently delete everything from inside the app at any time.
EdgeCourt is an NBA prop analytics application operated by an independent sole developer based in Ontario, Canada ("EdgeCourt", "we", "us"). We are the controller of the personal information described here.
Under PIPEDA's accountability principle, one person is responsible for our privacy practices:
Privacy Officer: Arun, Founder and Operator, EdgeCourt
Email: arunselva9966@gmail.com
We collect only what the product needs to function. All of it comes directly from you or is generated by your use of the app — we do not buy personal information or obtain it from data brokers.
| Category | Specifics | Source |
|---|---|---|
| Account identifiers | Email address; display name if you choose to provide one at sign-up; a system-generated account ID | You |
| Product content | The analyses you run and the picks they generate, including the player, prop, line, model estimates, and the graded outcome | Generated by your use |
| Usage counts | The number of analyses you run per day | Generated by your use |
| Preferences | Your favourite NBA team, if you choose one, and whether you have answered that question — so we ask it once rather than on every device you sign in from | You |
| Technical data | Standard server logs kept by our hosting provider, including IP address and request metadata, for security and reliability | Automatic |
| Error diagnostics | When the app crashes or a request fails: the error message and stack trace, the screen it occurred on, the app version, and the device or browser type. This is sent only when something goes wrong — never during normal use — and carries no email, name, or account identifier | Automatic, on error only |
We do not collect payment card details, precise or coarse location, contacts, photos, microphone or camera data, health data, biometrics, browsing history on other sites, or device advertising identifiers. We use no third-party advertising SDKs, analytics trackers, or cross-site tracking cookies, and we do not build advertising profiles. We do not use your data to train machine-learning models.
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under US state privacy laws.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and authenticate your account; send one-time sign-in links | Email, account ID | Performance of a contract |
| Generate analyses and maintain your accuracy record, which is graded automatically against published box scores | Product content | Performance of a contract |
| Apply fair-use limits and control processing costs | Usage counts | Legitimate interests (protecting the service from abuse and runaway cost) |
| Keep the service secure, debug faults, prevent abuse | Technical data | Legitimate interests (security and reliability) |
| Comply with legal obligations | As required | Legal obligation |
Under PIPEDA we rely on your consent, which you give by creating an account, and which you may withdraw at any time by deleting your account (section 8). Withdrawing consent does not affect processing already carried out.
EdgeCourt stores a small amount of data in your browser or device storage so the app works the way you left it: your theme and sound preferences, any notes you attach to a pick, favourite players and team, and your sign-in session token. This is functional storage, not tracking — none of it is transmitted to advertisers or used to follow you across other websites. Clearing your browser data or deleting the app removes it.
We share personal information only with service providers who process it on our instructions ("processors"), and only for the purposes below. We do not disclose it to anyone else except where legally compelled.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Authentication and database | Email, account ID, product content, usage counts |
| Vercel | Application hosting and serverless functions | Technical data, and account data in transit |
| Anthropic (Claude) | Generates the statistical analysis and news summaries | Public betting-market data and public sports news only — no email, name, or account identifier is sent |
| The Odds API | Public sportsbook odds and lines | No personal information |
| BallDontLie | Public scores, box scores, injury data | No personal information |
| Sentry | Error monitoring — tells us when the app crashes or an API call fails, so faults are found before you have to report them | Technical error data only: the error message and stack trace, the screen it happened on, app version, and device/browser type. No email, name, or account identifier is sent, and we do not record your session, page views, or anything you type. |
| Email delivery provider | Sends your sign-in links | Email address |
We may also disclose personal information where required by law, to respond to a valid legal process, to enforce our Terms, or to protect the rights and safety of our users or the public. If EdgeCourt is ever involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction; we would notify you before it becomes subject to a different privacy policy.
Your account database is hosted in Canada (Supabase, ca-central-1 region). However, some of our processors — notably Vercel, Anthropic and Sentry — operate infrastructure in the United States and other countries, so your information may be processed or stored outside Canada, the EU and the UK.
PIPEDA requires us to tell you this plainly: while your information is in another country, it may be accessible to the courts, law enforcement and national security authorities of that country. Where personal information is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or an applicable adequacy decision, and we remain accountable for its protection through contractual and technical safeguards.
| Data | Retention |
|---|---|
| Account identifiers, product content, usage counts | For as long as your account exists. Erased immediately when you delete your account. |
| Backups | Residual copies may persist in our providers' encrypted backups for a short period (typically up to 30 days) before being overwritten. |
| Server logs | Retained by our hosting provider for a short period as part of normal operation, then discarded. |
| Records we must keep by law | Only as long as the applicable legal obligation requires. |
Depending on where you live, you have the right to access your personal information, correct it, delete it, obtain a portable copy, withdraw consent, object to or restrict certain processing, and not be discriminated against for exercising these rights. EdgeCourt implements the main ones directly in the product rather than behind a request form:
We respond to requests within 30 days. We do not charge a fee, and we will not ask you to give up any right in exchange for service. We may need to verify your identity — normally by confirming control of the account email — before acting on a request.
All traffic is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure providers. Database access is governed by row-level security policies, which make it technically impossible for one account to read another's data. Sign-in uses one-time email links, so there is no password for us to store or for an attacker to steal. Administrative credentials are held server-side only and are never exposed to the browser.
No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping access to your email account secure, since sign-in links are delivered there.
If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as PIPEDA requires, and will maintain records of the breach. Where the GDPR applies, we will notify the relevant supervisory authority within 72 hours where required.
EdgeCourt uses statistical models and a large language model to produce probability and expected-value estimates about basketball outcomes. These are analyses of public sports data — they are not decisions about you, they do not profile you, and they produce no legal or similarly significant effect on you. We do not use automated decision-making within the meaning of Article 22 of the GDPR.
EdgeCourt is intended solely for adults aged 19 and over and is not directed to children. We do not knowingly collect personal information from anyone under 19. If we learn that we have, we will delete it promptly. If you believe a minor has created an account, contact the Privacy Officer and we will remove it.
We may update this policy as the product changes. The effective date and version at the top will change, the current version will always be available at this URL, and we will notify signed-in users in the app of any material change before it takes effect.
For any privacy question, request, or complaint, contact our Privacy Officer:
arunselva9966@gmail.com
We will acknowledge your complaint, investigate it, and tell you the outcome. If you are not satisfied with our response, you have the right to escalate: