Privacy Policy

HaterPicks ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the HaterPicks platform (the "Service").

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, and password when you register
• OAuth profile data: name and email from Google or Apple when you sign in via those providers
• Payment information: billing details processed securely by Stripe — we do not store your full card number
• Bet tracking data: bets you voluntarily log in the bet tracker
• Support correspondence: emails or messages you send to us

1.2 Information Collected Automatically

• Usage data: pages viewed, features used, timestamps
• Device information: browser type, operating system, screen size
• IP address and approximate location
• Cookies and local storage: used for authentication sessions and preferences

2. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Authenticate your identity and secure your account
• Send transactional emails (account verification, password resets, billing receipts)
• Communicate service updates, changes to terms, or security notices
• Administer the 30-Day Profit Guarantee and process refund claims
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

We will not use your personal information for direct marketing without your consent. We do not sell your personal information to third parties.

3. Third-Party Services

We share personal information only with the following categories of service providers, and only to the extent necessary:

• Supabase — authentication and database hosting (stores your account data)
• Stripe — payment processing (receives billing and card information)
• Vercel — application hosting
• Google / Apple — OAuth authentication (only if you choose to sign in with these providers)

Each provider operates under their own privacy policy. We encourage you to review their policies. We do not share your information with advertisers or data brokers.

4. Cookies and Tracking

We use essential cookies to maintain your authentication session. These are strictly necessary for the Service to function and cannot be disabled.

We do not use third-party advertising cookies or cross-site tracking pixels. We may use basic analytics to understand how the Service is used, but we do not build advertising profiles from your data.

5. Data Storage and Security

Your data is stored on servers operated by Supabase and Vercel. While these servers may be located outside Australia, we ensure that appropriate safeguards are in place consistent with the APPs for cross-border data transfers.

We implement industry-standard security measures, including encryption in transit (TLS), secure password hashing, and role-based access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or de-identify your personal information within 90 days, except where we are required to retain it for legal, tax, or compliance purposes.

Payment records are retained for 7 years in accordance with Australian tax law requirements.

7. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated information
• Request deletion of your account and personal data
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise these rights, contact us at support@haterpicks.app. We will respond to access and correction requests within 30 days.

8. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at support@haterpicks.app.

You may also contact the Office of the Australian Information Commissioner at oaic.gov.au if you have an unresolved privacy complaint.