Privacy

What we collect

Slips, questions, and reports

• The betslip text you paste or build, the questions you ask the Doctor, and the reports we produce.
• A photo of a betslip, if you use the camera or photo upload, and the text a vision model reads out of it. The photo is sent to our AI provider to be read; we do not keep a photo library.
• Your bettor profile, if you set one: betting style, risk tolerance, your unit size in dollars, and the sports and sportsbooks you follow. It personalizes how a verdict is framed.

Connected sportsbook history

Connecting a sportsbook is optional and the app works without it. If you connect one, our provider SharpSports verifies the account with the sportsbook and sends us your open and settled wagers: the events and selections, the odds, the amount at risk, the amount to win, the payout, the net result, and whether each bet won, lost, or pushed. We store that history so the app can grade your real record.

Your sportsbook username and password go to the sportsbook through SharpSports’ own secure portal, they never reach BetSlip Doctor. The connection is read-only: neither we nor SharpSports can place a bet, deposit, or move money in your sportsbook account. You can disconnect any book at any time in the app.

Your location, when you connect a book

Sportsbooks are licensed state by state, so opening the right regional login requires knowing your state. When you start a sportsbook connection the app asks iOS for your location once, turns it into a U.S. state on your device, and sends only that two-letter state code to us and on to SharpSports. Your coordinates never leave your phone, we do not store a location history, and we do not use location for anything else. You can decline; you just won’t be able to link a sportsbook.

The community feed

• The handle you choose, the slips you post, your captions, your comments and replies, who you follow, and what you like or tail. Posts, comments, handles, and follow counts are public to everyone else using the app. Treat the feed as public, don’t put anything in a caption you wouldn’t say out loud.
• Reports and blocks you submit. A report records who reported what and the reason so we can moderate; a block records that you no longer want to see an account.

Account, billing, and device

• You may enter an email address to create or sign in to the same BSD account on more than one device. We send it through our backend to Supabase Auth to deliver the secure sign-in link, and the signed BSD session keeps the address so your account can be identified and exported.
• Before you subscribe, the app creates a random device identifier for preview access. Once you subscribe, Apple handles billing entirely, we receive your subscription status and an Apple transaction identifier, never your card details and never your Apple Account credentials.
• Stripe applies only to legacy web subscriptions. There too we never see your card number; your email address appears on Stripe receipts and inside the signed session cookie that keeps you logged in.
• Your IP address, briefly, to enforce rate limits and stop abuse.
• A referral code, if you were invited by another user or invite someone yourself.
• An Expo push token if this device registers for remote alerts, so we can deliver scan and settlement updates. iOS also supports local reminders that never leave the device.

How you found us

When you land on our website, we store a random first-party browser identifier together with campaign parameters in the link (such as source, medium, campaign, content, term, or referral code), the referring website’s hostname, and the landing path. We keep the first touch and the most recent touch separately and link that record to your BSD account after you sign in, so we can tell which sources lead to a subscription. The identifier is random, is not a device fingerprint, and is not shared with an ad network or data broker.

Analytics and crash reports

We record product events (for example a screen opened, a Grade started or finished, a plan limit reached, a checkout started) in our own database so we can see what works and fix what doesn’t. Each event carries your account id or a random install id, never your email, name, payment details, slip text, Doctor messages or exact stake. You can turn this off in Settings → Share usage analytics. Raw events are kept for up to 400 days and are deleted with your account. Crash reports go to Sentry.

Sharing is on by default. You can turn it off whether or not you’re signed in: the app stops sending events and deletes any it hasn’t sent yet. When you’re signed in, the choice is saved to your account too, so our servers stop recording events for your account. Opting out stops every product event tied to your account or that install. Records we need to run the service, such as your purchases and subscription, are kept as usual.

These events stay in our own database; we don’t send them to any outside analytics company. Vercel records basic website and server logs. There are no advertising trackers and no data brokers anywhere in the product.

Third-party AI, and your permission

Running a Grade, a slip photo read, or a Doctor chat means the slip text, the questions you ask, and relevant parts of your betting profile and approved sportsbook history are sent to third-party AI and web-search providers. That is how the analysis gets done, there is no version of these features that happens only on your phone.

We ask for your permission in the app before the first time this happens, and you can withdraw it at any time in Settings → Third-party AI sharing. With it off, scans, slip photo reads, and Doctor chat stop until you turn it back on; the rest of the app still works.

The outside companies process your content to return the result. Their logging, retention, and model-improvement rules are governed by their own API or service terms and can differ by provider and route; we do not promise zero retention or that every outside provider is universally barred from model improvement. We avoid optional prompt logging where we control it, name the providers below, and never sell your content. Don’t paste personal information into a slip, nothing you wouldn’t type into a search box.

We keep operational analysis records, and train our own models on your data

Separately from the AI companies, we keep operational records needed to deliver and check an analysis: the slip, prompts and answers, model, cost and timing, grades, sources, odds, and eventual result. These operational records expire under our retention schedule.

We use your data to train and improve our own models, and this is on by default. Along with the odds, scores and market data we get from our data providers, we keep a training copy of your saved slips and bets (including results from linked sportsbooks), your Grade and Doctor conversations, what was sent to the AI and what came back, Doctor fixes, and the subscription notices Apple and Stripe send us. Training copies are filed under a random ID instead of your account, with the email, name, contact and payment card fields removed. We do not sell this data or give it to another company to train on.

To stop it, turn off Settings → Improve the Doctor’s models with my data, or email support@betslipdoctor.ai. Nothing new is added from then on; copies already made are kept.

If you delete your account, raw analysis records, including slips, prompts, model answers and linked grades, are deleted. Training copies already made are kept in de-identified form: we delete the link between your account and their random ID. We may also retain non-linkable aggregate outcome and model-quality statistics that contain no account, run, bet, prompt, response, image, or event identifier.

One thing we deliberately do not keep: betslip photos. A photo you upload is sent to be read and then dropped. The record keeps only the text read out of it.

Who processes your data

These are the third parties that can receive data about you, and what each one is for:

• Apple, App Store billing, subscription status, and notification delivery.
• SharpSports, sportsbook account linking, bet-history import, and building a prefilled slip when you choose to open one at your book.
• OpenRouter, the gateway that carries our AI requests. It routes each request to a model vendor, currently Anthropic, OpenAI, Google, DeepSeek, or xAI depending on the job, and that vendor processes the content of the request.
• xAI, a live-context research call we make directly for some Doctor answers, which receives the slip text and your questions.
• Tavily and Firecrawl, the web search and page retrieval that grounds a report in real sources.
• Vercel, hosting, and anonymized page metrics for the website.
• Supabase / Postgres, the database everything above is stored in.
• Upstash, rate limiting; QStash, the scan job queue.
• Expo, app build and update delivery, plus remote notifications for registered devices.
• Stripe, legacy web payments only.
• Sentry, crash and error reports from the app, the website, and our servers.

Each is used to run the service you asked for. Provider logging, retention, and model-improvement terms differ; this policy does not replace or overstate those outside terms.

Separately, we read from odds and schedule sources, The Odds API, TheRundown, and ESPN’s public scoreboard, to show lines and games. We send them no information about you.

How long we keep it

• Working research material from Grades, fetched pages, intermediate model notes, progress events, is pruned on a rolling schedule, normally around 30 days after a scan finishes.
• Finished reports are kept so your scan history keeps working.
• Imported sportsbook history is kept while your account exists, so your record and grades stay accurate. Disconnecting a book stops new imports; deleting your account removes the history.
• Posts and comments stay up until they are taken down by you or removed by us under our community rules.
• Aggregate cost and usage telemetry is kept somewhat longer (around 120 days) for accounting.
• Product events are kept for up to 400 days, or 90 days for the most frequent kinds, such as screen views and Live browsing. They are deleted with your account; daily totals that carry no account or install id are kept.
• Billing and credit-ledger records are retained as long as accounting requires.
• The first-party browser identifier expires after one year, and unlinked website acquisition touches are pruned after 400 days. Linked touches stay with the account until deletion, which removes the linked record and expires the browser identifier.
• Raw operational analysis records normally expire after 45 days. Training copies are kept for model training; account deletion removes raw analysis, keeps the aggregate statistics described above, and leaves training copies de-identified.

Your choices

• Third-party AI sharing: withdraw your permission any time in Settings → Third-party AI sharing. Scans, slip photo reads, and Doctor chat pause until you turn it back on.
• Model training: on by default. Turn it off any time in Settings → Improve the Doctor’s models with my data, or by email. New data stops being added from then on.
• Usage analytics: on by default. Turn it off any time in Settings → Share usage analytics, signed in or out. Product events stop for that install, and for your account when you’re signed in.
• Sportsbooks: connect none, one, or several, it is entirely optional. Disconnect any book in the app and we stop importing new wagers immediately.
• Location: decline the permission, or turn it off in iOS Settings. Everything except sportsbook linking still works.
• The feed: posting is optional. You can take down your own posts, block any account, and report anything that breaks the rules. To have a comment removed, report it or email us.
• Notifications: turn them off in iOS Settings to stop both local reminders and any remote alerts sent to this device.
• Export: use Export account activity in the app’s Account screen, or from the web account page, to download the account activity and settings included in our export. Security credentials, provider tokens, and internal abuse logs are excluded.
• Cancel anytime. App Store subscriptions are canceled in iOS Settings → Subscriptions; legacy web subscriptions from your account. Access continues to the end of the paid period.
• Deletion: use in-app Delete Account (or write support@betslipdoctor.ai). See exactly what that removes below.

What deleting your account removes

Deletion runs in one transaction and is honest about the few things it cannot erase:

• Deleted outright: your scans and reports, your imported sportsbook history and linked-account records, your Doctor profile, your credit balance, your push tokens, your referral and linked acquisition records, your product events, and your likes, follows, tails, and blocks.
• Removed and anonymized: your posts and comments come down and are detached from you. Moderation reports are kept without your identity so abuse accounting still works.
• Kept, anonymized: financial ledger rows, as accounting rules require, non-linkable aggregate outcome/model-quality statistics, and daily product-event totals. Raw prompts, model answers, slips, linked grades, and identifiable analysis records are deleted. These retained rows cannot be traced back to an account or linked across those separate audit purposes.
• Kept, de-identified: training copies already made (see above). They keep their random ID, but the link from that ID to your account is deleted.
• Deliberately not released: your handle stays retired rather than being freed for reuse, so nobody can take a deleted user’s name and impersonate them.
• Deleting your account does not cancel App Store billing. Cancel in iOS Settings → Subscriptions to stop renewals.

No selling, ever

We do not sell or rent personal data, not your slips, not your betting history, not your posts, not your email, not your usage. No data brokers, no ad networks.

Age & jurisdiction

BetSlip Doctor is offered in the United States only and is for adults of legal sports-betting age in their jurisdiction (21+ in most U.S. states). It is entertainment and educational decision support, it never places a wager. It is not for children, and we do not knowingly collect data from anyone under 18. See our responsible-use terms for the full policy.

Changes to this policy

If we start collecting something new or add a provider that receives your data, we update this page and change the date at the top before that change goes live. Questions, or a request about your data, go to support@betslipdoctor.ai.