Legal

Privacy Policy

Last updated: July 20, 2026

Who we are

This page is maintained by the owner of Oddo AI to explain what personal data we collect, why we collect it, and how you can control it. Oddo AI is an AI-powered analysis tool for football matches — we do not accept bets and are not a bookmaker.

What data we store and why

Email address
Required to create an account, sign you in, and send password reset or important service emails.
Display name
Shown in the app (for example on your dashboard as 'Welcome back'). You can change it at any time.
Password (hashed)
Stored as a one-way hash by our authentication provider so we can verify sign-ins. We never see or store your plaintext password.
Google account ID (if you use Google sign-in)
Used to link your Google identity to your Oddo AI account so you can sign back in.
Age confirmation (18+)
You confirm at sign-up that you are 18 or older. Required to comply with responsible-gambling rules.
Saved predictions and favorites
Stored so you can review, compare and manage the AI predictions you generated.
Subscription status (if you upgrade to Premium)
Used to unlock Premium features and manage renewals. Payment details themselves are handled by our payment processor — we never see your card or IBAN.
Technical logs (IP address, browser, timestamps)
Used for security, abuse prevention, and debugging. Kept only as long as needed.

What we do not store

  • We do not store card numbers, IBANs or full payment details.
  • We do not sell your personal data to third parties.
  • We do not use your data to train third-party AI models.

Who processes your data (subprocessors)

Oddo AI relies on a small number of trusted providers to operate the service. Each only receives what they need to perform their function:

  • Lovable Cloud — hosting, database and authentication.
  • Stripe — payment processing for Premium subscriptions (only when you upgrade).
  • API-Football — provides match fixtures and team data. Receives no personal data.
  • The Odds API — provides bookmaker odds. Receives no personal data.
  • AI providers — process anonymised match data to generate match predictions. Your account details are not sent.

Data processing agreements

Where a provider processes personal data on our behalf, we rely on their data processing agreement (DPA) and, where data leaves the EEA, on the EU Standard Contractual Clauses:

  • Hosting, database & auth — DPA in place (processor of account data).
  • Stripe — DPA in place; Stripe also acts as an independent controller for payment data.
  • Email delivery — DPA in place for transactional emails (sign-up, password reset).
  • API-Football & The Odds API — no DPA needed: they receive sports data only, never personal data.
  • AI providers — receive only anonymised match statistics; no personal data is shared, so no processing of your data takes place.

You can request an overview of our current subprocessors and the agreements in place at privacy@oddo.ai.

Cookies

We use only essential cookies and local storage needed to keep you signed in and remember your preferences (such as language). We do not use advertising or third-party tracking cookies.

How long we keep your data

We keep your account data for as long as your account is active. If you delete your account, we remove your profile, saved bets and favorites. Some limited logs and billing records may be retained longer where required by law (for example tax and accounting).

Your rights (GDPR)

Signed in? You can export a full copy of your data or permanently delete your account yourself under Account & privacy.

You have the right to access, correct, export or delete your personal data, and to withdraw consent at any time. You can request any of these by contacting us at privacy@oddo.ai. You also have the right to file a complaint with your national data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

Contact

Questions about this policy? Email privacy@oddo.ai.