Privacy Policy

The short version

• We collect what odex needs to work: your account, the matches you follow, the slips you share and your Premium status.
• We never see your password or card details. Google handles sign-in and payments.
• Ads and analytics are provided by Google. In the EEA, the UK and Switzerland we ask for your consent before personalised ads.
• We do not sell your personal data.
• You can delete your account at any time in the app (Settings > Delete my account) or at odexpicks.com/delete-account.

1. Data we collect

Account. If you create an account: your email address, display name and, with Google Sign-In, your profile photo. Passwords are handled by Firebase Authentication and are never visible to us. If you use odex without an account, a random guest ID is created.

Profile and community. Your public tipster profile (display name, photo, badges, slip statistics such as form and ROI, follower counts), the slips you share to the community, comments, likes, the people you follow and the slips you bookmark.

Preferences and notifications. Your notification token, the matches you follow, the notification types you mute, your app language, your time-zone offset and app version. Favourite teams and leagues, the theme and similar settings are stored on your device.

Premium purchases. Payments are processed by Google Play. We receive the purchase token, product, subscription status and renewal or expiry dates, and verify them with Google. We never receive your card or bank details.

Advertising. Google AdMob may collect your device's advertising ID, IP address, device information and ad interactions. When you watch a rewarded ad, we store a record that the reward was earned.

Usage and diagnostics. Through Google Analytics for Firebase: app events (for example screens opened or the Premium page viewed), an app-instance ID, device model, operating system and approximate country. Our servers also keep short technical logs that can include your IP address.

Security. Firebase App Check and Google Play Integrity confirm that requests come from a genuine copy of the app.

Support. Messages you send us and the in-app ratings or feedback you submit.

We do not collect your precise location, contacts, photos or other files.

2. How we use your data and our legal bases

• To provide odex (account, live scores, picks, slips, following matches, community features): performance of our contract with you.
• To send notifications you asked for (goals, line-ups, results of picks and slips): your consent, given through your phone's notification permission and the in-app settings.
• To provide and verify Premium: performance of the contract, and our legal obligations for billing records.
• To show ads: your consent for personalised ads where the law requires it; otherwise our legitimate interest in funding a free app. Ads are switched off for Premium members.
• To measure and improve the app: our legitimate interest, or your consent where the law requires it.
• To keep odex secure and prevent fraud, spam and abuse: our legitimate interest.
• To answer you and to comply with the law: legitimate interest and legal obligation.

We do not make decisions with legal or similarly significant effects on you based solely on automated processing. Picks are generated by our algorithm from public sports odds, not from your personal data.

3. What other people can see

Your display name, photo, badges, statistics, shared slips and comments are public to other users and can be opened from shared links on odexpicks.com. Slips you keep private, your email address, your followed matches and your purchases are never shown to other users.

4. Who we share data with

• Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Hosting, Cloud Messaging, Analytics, App Check, Google Sign-In, Google Play billing and AdMob), which processes data for us or, for some advertising purposes, as an independent controller under Google's own privacy policy (policies.google.com/privacy).
• Authorities or other parties when the law requires it, or when needed to protect the rights, safety or property of our users or ourselves.
• A successor if odex is transferred, in which case this policy continues to protect your data.

Sports data comes from API-Sports; we do not send them your personal data. The odex Telegram channel is run on Telegram, whose own policy applies when you use it. We do not sell or rent your personal data.

5. Where your data is stored

Our main database is located in the European Union. Google may process some data in other countries, including the United States. Where required, these transfers are protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism. By using odex you acknowledge that your data may be transferred abroad for these purposes, as permitted by Turkish personal data law (KVKK).

6. How long we keep data

• Account, profile and community data: as long as your account exists. When you delete your account, it is erased, normally within 30 days.
• Notification records: deleted 60 days after the app last synced them.
• Analytics data: up to 14 months. Server logs: about 30 days.
• Purchase records: as long as required for billing, tax, refunds and fraud prevention.
• Guest data that is no longer used may be deleted at any time.

7. Your choices

• Notifications: turn them off or mute types in Settings, or in your phone's settings.
• Ads: in the EEA, the UK and Switzerland you choose on Google's consent form when ads are first shown. You can reset or delete your advertising ID in Android settings (Google > Ads), or remove ads with Premium.
• Account deletion: Settings > Delete my account, or follow the steps at odexpicks.com/delete-account.

8. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, Türkiye's KVKK or California's CCPA), you may have the right to access your data, correct it, delete it, receive a copy, restrict or object to its processing, and withdraw consent at any time without affecting earlier processing. To use these rights, email support@odexpicks.com from the address linked to your account. We answer within 30 days. You may also complain to your data protection authority (in Türkiye, the Personal Data Protection Authority). We do not sell personal data. Personalised ads from Google may count as "sharing" under California law; you can opt out by deleting your advertising ID in Android settings or by emailing us. We will not treat you differently for using your rights.

9. Age limit

odex is for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.

10. Security

Data is encrypted in transit, access is limited by strict database rules, and only the operator has administrative access. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell you in the app about important changes.

12. Contact

Ömer Özçelik (odex), Türkiye. Email: support@odexpicks.com.