Privacy

What StatPocket stores

Your authenticated account identifier, email and display name; encrypted provider credentials; saved props, entry research cards and tracked results; and beta feedback you submit.

How data is used

Data is used to deliver the features you request, keep research tied to your account, maintain security, diagnose failures, and improve the beta. StatPocket does not place wagers.

Guest access

Anonymous visitors can view live research without an account. To enforce public-beta safety limits, StatPocket creates a one-way pseudonymous usage identifier from network and device headers. The raw values are not stored, and guest rate-limit records are removed after the short protection window.

Account sign-in

When email or Google sign-in is enabled, Supabase Auth manages account verification and sessions. Passwords are processed by that service and are not saved in StatPocket’s research database. Secure session cookies keep you signed in. Connecting an existing ChatGPT account requires signing in to both accounts; the link allows access to your existing research. Temporary, pseudonymous attempt records help protect sign-in from abuse.

Provider connections

Your PropLine key is encrypted at rest and used server-side to request the sports data shown in your workspace. It is never displayed back in full after connection.

Ask StatPocket

Quick answers are calculated from the research data without an AI service. When AI chat is enabled and you submit a question, StatPocket sends the question, recent conversation, and relevant sports research to OpenAI to generate an answer. Account email, display name, passwords, and provider keys are not included in that chat input. Avoid including personal or sensitive information in your questions.

StatPocket does not save chat transcripts in its research database. The conversation is held in the open panel and sent back in a signed token for follow-up questions. AI request records store an account identifier and timestamp to enforce usage limits, with old records cleaned up as requests are processed. API response storage is disabled; this does not remove any processing or abuse-monitoring retention that OpenAI may apply.

Subscriptions

When subscription purchases are available, Apple processes iPhone payments and RevenueCat and Stripe provide web checkout. RevenueCat receives purchase and renewal information and a pseudonymous identifier to verify and restore access. StatPocket does not collect payment card details. Web checkout asks for your email for receipts and account management. Contact StatPocket support with questions about subscription data.

Support requests

The public support form collects your reply email, topic, platform, optional app version, and message. Requests are stored privately for the StatPocket owner to review and respond to. A one-way identifier derived from your network address protects the form from repeated submissions. Resolving a request schedules its removal after 90 days through routine maintenance; open requests remain available while they are being handled. Support details are not added to a marketing list.

Your choices

You can disconnect PropLine from the website. Delete your account from Account → Delete account on the website, or Settings → Your account → Delete account in the updated iPhone app. You can also open the account deletion page. Sign-in and explicit confirmation are required. Deletion removes your authentication account, synced presets, saved website research and results, account links, feedback, support messages associated with your verified email, and account-owned provider connections. Your sessions are revoked. A failed deletion is shown as an error so you can retry.

The iPhone app keeps saved picks on the device. Deleting your account in the app clears picks on that device; picks on other devices must be removed there. ChatGPT-only deletion removes StatPocket data and does not delete your external ChatGPT account. Linked accounts require StatPocket email sign-in to delete both identities’ research. Anonymous abuse-prevention records and service-provider logs follow their separate retention periods; deletion does not promise immediate erasure of disaster-recovery backups.

For help or a separate support-data request, use the support form. A support message alone does not automatically delete an account.