Privacy Policy

HaterPicks ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the HaterPicks platform (the "Service").

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, and password when you register
• OAuth profile data: name and email from Google or Apple when you sign in via those providers
• Payment information: on the web, billing details processed securely by Stripe — we do not store your full card number. In the iOS and Android apps, subscriptions are billed by Apple or Google; we receive your subscription status, never your payment details
• Bet tracking data: bets you voluntarily log in the bet tracker
• Push notification tokens: device identifiers for delivering push notifications, if you enable them
• Support correspondence: emails or messages you send to us

1.2 Information Collected Automatically

• Usage data: pages viewed, features used, timestamps
• Device information: browser type, operating system, screen size
• IP address and approximate location
• Cookies and local storage: used for authentication sessions and preferences

2. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Authenticate your identity and secure your account
• Send transactional emails (account verification, password resets, billing receipts)
• Communicate service updates, changes to terms, or security notices
• Email account holders HaterPicks news and feature updates (see "Emails we send you" below)
• Process refund requests
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

Emails we send you. If you have a HaterPicks account, we may email you HaterPicks news and feature updates: new features, changes to how the Service works, and sports or tools we add. If you joined on or after 8 October 2026, we send these only if you ticked "Email me HaterPicks news and feature updates" when you signed up. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, we send them only if you said yes, whenever you joined. We do not send emails on behalf of bookmakers or any other third party.

You can stop these emails at any time. Every one has an unsubscribe link, you can switch them off in the app under Profile › Notifications, or you can ask us at support@haterpicks.app. We act on an unsubscribe request within five business days, and usually straight away. Unsubscribing does not stop the emails we need to send to run your account: sign-in codes, password resets, billing receipts, subscription confirmations and security notices.

We do not sell your personal information to third parties.

3. Third-Party Services

We share personal information only with the following categories of service providers, and only to the extent necessary:

• Supabase — authentication and database hosting (stores your account data)
• Stripe — payment processing (receives billing and card information)
• Vercel — application hosting
• Apple App Store / Google Play — in-app subscription billing in the iOS and Android apps
• RevenueCat — manages in-app subscriptions (receives your account ID and subscription status)
• Apple Push Notification service (APNs) — push notifications on iOS devices
• Firebase Cloud Messaging (Google) — push notifications on Android devices
• Google / Apple — OAuth authentication (only if you choose to sign in with these providers)
• Cloudflare — bot protection on sign-up and sign-in forms
• Anthropic — reads a bet slip image when you choose to scan one into the bet tracker
• Telegram — internal alerts to our own staff about account and billing events
• DigitalOcean — hosts our own servers in Sydney, which run the projection and odds engines, settle the bets you track, and send email
• Resend — delivers account email and, if you receive it, news email (receives your name, email address and the message)
• Upstash — rate limiting that protects the Service from abuse (briefly holds your account ID or IP address)

Each provider operates under their own privacy policy. We encourage you to review their policies. We do not share your information with advertisers or data brokers.

4. Cookies and Tracking

We use essential cookies to maintain your authentication session. These are strictly necessary for the Service to function and cannot be disabled.

We do not use third-party advertising cookies or cross-site tracking pixels. We may use basic analytics to understand how the Service is used, but we do not build advertising profiles from your data.

5. Data Storage and Security

Your account data is stored in Sydney: our database (Supabase), the servers that run the website and apps (Vercel) and our own servers (DigitalOcean). Some of the service providers in section 3, including Stripe, Apple, Google, Anthropic and Resend, may also process it outside Australia, mainly in the United States. Where that happens, we take reasonable steps, consistent with APP 8, to make sure they handle it in line with the APPs.

We implement industry-standard security measures, including encryption in transit (TLS), secure password hashing, and role-based access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or de-identify your personal information within 90 days, except where we are required to retain it for legal, tax, or compliance purposes.

Payment records are retained for 7 years in accordance with Australian tax law requirements.

7. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or outdated information
• Request deletion of your account and personal data
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise these rights, contact us at support@haterpicks.app. We will respond to access and correction requests within 30 days.

If you are in the European Union, the UK or Switzerland

HaterPicks is used around the world, so the EU and UK General Data Protection Regulations (GDPR) and the Swiss Federal Act on Data Protection apply to you as well. HaterPicks Pty Ltd, an Australian company, is the controller of your personal information. You can reach us at support@haterpicks.app.

• Why we may use your information: to provide the Service you signed up for and your subscription (performing our contract with you); to keep it secure, prevent abuse and improve it (our legitimate interests); to keep records the law requires (legal obligation); and to send news and feature emails, only with your consent, which you can withdraw at any time.
• Your rights: to access, correct or delete your information; to restrict or object to how we use it; to receive it in a portable format; to withdraw consent; and to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
• Transfers: your information is stored in Australia, and some service providers in section 3 process it in the United States. Where the law requires it, we rely on the European Commission's standard contractual clauses (and the UK addendum) or another lawful safeguard.
• Cookies: we only use cookies that are strictly necessary to run the Service (section 4), so we do not ask for cookie consent.

We respond to a request about these rights within one month.

8. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at support@haterpicks.app.

You may also contact the Office of the Australian Information Commissioner at oaic.gov.au if you have an unresolved privacy complaint.