Legal

Privacy Policy

Effective Date: January 1, 2026

Gara ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Gara mobile application. By using Gara, you consent to the practices described in this policy.

Information We Collect

Account Information

When you register for an account, we collect:

  • Email address for account authentication
  • Display name (optional)
  • Profile photo (optional)
  • Authentication credentials from third-party sign-in providers (Google, Apple)

Betting Activity Data

To provide our tracking service, we collect and store:

  • Bet details including stake amount, odds, and selections
  • Bet outcomes and profit/loss calculations
  • Bookmaker information
  • Betting history and performance statistics

Image Data

When you use our bet slip scanning feature:

  • Original images are stored securely to provide you with a visual history of your betting activity
  • These images are accessible only to you and for essential technical support
  • Images are permanently deleted from our servers if you delete the specific bet record or your entire account
Data Protection. Your betting data is private and encrypted. We do not sell, share, or disclose your betting history to third parties for marketing or advertising purposes.

Device Information

We automatically collect:

  • Device type and operating system version
  • Application version
  • Anonymous usage analytics to improve app performance

How We Use Your Information

We use your information to:

  • Provide and maintain the betting tracking service
  • Process bet slip images using AI technology
  • Generate personalized statistics and insights
  • Send essential account and service notifications
  • Improve application functionality and user experience
  • Provide customer support when requested

Data Security

We implement industry-standard security measures:

  • TLS encryption for all data transmission
  • Secure cloud infrastructure with Supabase
  • Regular security assessments and updates
  • Biometric authentication support (Face ID, Touch ID)

Third-Party Services

We utilize the following third-party service providers:

  • Supabase: Database hosting and user authentication (GDPR compliant)
  • Google Gemini: AI-powered bet slip image processing
  • RevenueCat: Subscription and payment management
  • Apple/Google: Sign-in authentication providers

Data Retention and Your Rights

We retain your data for as long as your account remains active. Specific retention periods:

  • Account & bet records: kept while your account exists; permanently deleted within 30 days after you delete your account.
  • Bet slip images: stored alongside the bet record; removed when you delete the bet or your account.
  • Server logs & rate-limit events: kept for up to 60 days for security and abuse prevention.
  • Subscription records (RevenueCat / Apple / Google): retained as required by tax and consumer-protection laws (typically up to 7 years).

You always have the right to:

  • Access and view all your personal data
  • Export your complete betting history (CSV format)
  • Request correction of inaccurate information
  • Delete your account and all associated data permanently
  • Opt out of non-essential communications

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following GDPR / UK GDPR legal bases:

  • Contract (Art. 6(1)(b)): to provide the betting tracker service you signed up for, including authentication, bet record storage, AI bet-slip parsing, and statistics.
  • Legitimate interests (Art. 6(1)(f)): to keep the service secure (rate-limiting, fraud prevention, abuse logging), to debug crashes, and to improve product quality. You may object to this processing at any time by contacting us.
  • Legal obligation (Art. 6(1)(c)): to retain billing records and respond to lawful requests from authorities.
  • Consent (Art. 6(1)(a)): for any optional cookies on our website and any marketing communications you opt into. You can withdraw consent at any time.

We do not engage in automated decision-making with legal or similarly significant effects, and we do not perform behavioural advertising profiling.

Your GDPR / UK GDPR Rights

If GDPR or UK GDPR applies to you, in addition to the rights listed above, you have the right to:

  • Object to processing based on legitimate interests.
  • Restrict processing while a complaint or correction is being investigated.
  • Data portability: receive your data in a structured, machine-readable format (we provide CSV export for betting history).
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your local supervisory authority. The data controller is established in Finland; the lead supervisory authority is the Finnish Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). UK residents may complain to the Information Commissioner's Office (ico.org.uk).

International Data Transfers

Your data is stored on Supabase EU infrastructure where available. Some service providers may process data outside your country:

  • Google Gemini / Vertex AI (bet-slip parsing & insight generation): may process data in Google Cloud regions including the United States.
  • RevenueCat (subscription management): processes billing metadata in the United States.
  • Apple / Google (sign-in & in-app purchases): operate global infrastructure.

Where personal data is transferred outside the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or equivalent safeguards offered by these providers.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

  • Know what categories of personal information we collect and how we use them (described above).
  • Request a copy of your personal information.
  • Request deletion of your personal information.
  • Correct inaccurate personal information.
  • Opt out of the "sale" or "sharing" of personal information.
  • Limit the use of "sensitive personal information."
  • Be free from discrimination for exercising these rights.

We do not sell or share your personal information as those terms are defined under the CCPA / CPRA, and we do not use sensitive personal information for any purpose other than providing the service you requested.

App Store Privacy Disclosures

This section summarises the data Gara collects, in the categories used by Apple's App Store privacy nutrition labels:

  • Data linked to you: contact info (email), user content (bet records, bet-slip images you upload), identifiers (Supabase user ID, RevenueCat anonymous ID), purchases, and crash & performance data.
  • Data not linked to you: aggregate, anonymised usage analytics used to improve the app.
  • Data used to track you across other companies' apps and websites: none. We do not use third-party advertising identifiers (e.g. IDFA) and we do not run third-party advertising or marketing trackers.

Age Restriction

Gara is intended for users who are 18 years of age or older (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from individuals under this age. If we become aware that we have collected data from an underage user, we will promptly delete such information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes through the application or via email. Your continued use of Gara after such modifications constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

support@garapremium.app