Privacy Policy

Effective November 4, 2026

This policy covers the Predict2Win website (predict2.win), the Predict2Win Android app, and the Predict2Win extension, which share one account. They're run by Predict2Win INC, Duluth, GA 30097, which decides how your data is used. Send questions to support@predict2win.app.

In short: we use your data to run Predict2Win, we don't use advertising or analytics tools, and we don't sell your data. Some features send data to the companies listed below. You can ask us to see, correct, export, or delete your data.

What we collect

• Your account. If you sign in with Google: your name, email address, profile photo, and Google account ID. If you sign in with X: your name, username, profile photo, X account ID, and, if X shares it, your email address. We never post to X for you. If you sign in with email: your email address, the name you enter, and your password, which Firebase Authentication (Google) stores for us; we never see it.
• Your member record. Your name, email, and photo; when you first and last used Predict2Win; whether you joined on the website or in the extension; when you confirmed you're 21 or older; and your plan and any free trial.
• What you save. Your game notes, picks and wagers, archived games, the odds and prices shown on your dashboard, and your settings, including the SportsLine and Action Network experts, Telegram channels, X accounts, and Splash players you follow. Other members can't read this. Our server reads it only to run features such as syncing and your weekly recap, and we look at it only when we need to, such as to fix a problem you report or to meet a legal duty.
• What analysts and commenters post. An analyst's profile name, bio, picks, analysis, and results are shown to members who are signed in. A comment shows your name and its text to signed-in users. Anyone can see the featured analyst's name and record, and the X account an analyst links, without an account. Free picks emails go to the people who signed up for them. An analyst can see how many members subscribe to them and their account IDs, but not their names or email addresses.
• Analysts' applications and payouts. If you apply to be an analyst: your name, what you tell us about yourself, your referral code, and when you accepted the terms. If you earn commission: your monthly statements and, before your first payout, your payment details and tax form. A US tax form (W-9) includes your Social Security or taxpayer ID number.
• Referrals. If you open an analyst's link or type their code: the code, who it belongs to, and when it was recorded, so we can credit that analyst.
• Payments. Whop takes payment for paid plans, so we don't receive your card number. We receive what we need to run your plan and pay analysts, such as your email address, plan, payment amounts and status, and refunds.
• Cloud Sync (Polymarket, Kalshi, and ProphetX). If you turn it on in Settings (Premium and Pro): the API key you paste in for each exchange and your time zone. A key's secret part is stored encrypted, only our server can read it, and it's never shown or sent back to you. Our server uses it to read your positions, open orders, and settled bets on that exchange and save them to your account, every 5 minutes and whenever you open your dashboard. It places or cancels an order only if you turn on dashboard orders for that exchange in Settings (they're off until you do) and confirm that order or cancel on your dashboard; it never does so on its own. Disconnecting deletes the key, and you can also revoke it on the exchange.
• Questions you type in the search box. A question the box can't read on its own goes to Anthropic to be turned into a search, and we count how many you ask each day. If the question can't be answered, we keep its text and the time for up to 90 days, without your name or account, to decide what to build next. Please don't type personal details into it.
• Emails you ask for. If you sign up to get the featured analyst's picks by email: your email address and when you signed up and confirmed it. You don't need an account for this. If you turn on the weekly recap in Settings, we use your email address and your graded picks to write it.
• Technical data. Our server and hosting provider receive your IP address with each request and keep logs of server activity, which can include your account ID. To limit free picks sign-ups, we keep a one-way hash of your IP address for about a day.
• On your device. The website and the Android app keep your sign-in session and settings in the browser's local storage; the extension keeps its data in Chrome's storage. Signing out removes the session from that device.
• Pages the extension reads. On Kalshi, Novig, Polymarket US, ProphetX, 4cx, DraftKings, SportsLine, Action Network, and X, the extension reads the page you have open to convert odds, show your notes, and pick up picks and prices. What it finds stays in your browser and, when you're signed in, syncs to your account. It doesn't run on other sites.
• People who aren't members. We read public posts by analysts on X, Telegram, and similar services, and may show their names, picks, and results so members can follow and grade them. To object or ask for a correction, email us.

We don't use advertising, analytics, or tracking tools. Our own code sets no cookies, though Google's or X's sign-in pages may set their own. We don't respond to Do Not Track or similar browser signals, because we don't track you across other sites. We don't collect your precise location or your contacts.

How we use it

• To sign you in and keep your notes, picks, and settings in sync across the website, the app, and the extension.
• To match picks to games, show prices, and grade results.
• To send account emails: address verification and password resets.
• To email the featured analyst's free picks to addresses that signed up and confirmed, and the weekly recap to accounts that turned it on. Every one of these emails has a link to stop them, and unsubscribing from free picks deletes your address from the list.
• To keep Predict2Win for adults and to turn on paid plans (Light, Premium, and Pro) and Analyst features for accounts. We can see the member list (name, email, photo, and dates) to manage access.
• To credit and pay analysts and to meet tax and other legal duties.
• To keep the service secure and stop abuse.

We don't make decisions about you by automated means that have legal or similarly significant effects.

Who else handles it

• Google Firebase (Authentication, Realtime Database, Hosting, and Cloud Functions) stores and processes your data for us, in the United States.
• X, when you sign in with it, confirms who you are to Firebase. X's own privacy policy covers what it does.
• Whop takes payment for paid plans and receives what you give it at checkout. Whop's own privacy policy covers what it does.
• Public data services. To fetch scores, prices, weather, and the picks you follow, the website, the extension, or our server contacts services including ESPN, PGA Tour, Open-Meteo, FxTwitter (public X posts), Splash Sports, Telegram's public channel pages, Kalshi, Novig, Polymarket, ProphetX, and 4cx. Those requests carry the team, place, contest, channel, or account names being looked up, and requests from your device carry your IP address; they don't include your account details.
• jsDelivr delivers the tool that reads a bet slip screenshot on the website, so it receives your IP address. The screenshot itself stays on your device.
• Polymarket US, Kalshi, and ProphetX, if you turn on Cloud Sync for them, receive our server's requests for your positions, orders, and settled bets, and any orders and cancels you confirm on your dashboard, signed with your API key.
• SMTP2GO sends the free picks emails, their confirmation emails, and the weekly recap for us, so it receives your email address and each message, including the wagers and results in a recap.
• Analysts who referred you or whom you follow receive your account ID and credit for your membership, not your name or email address.
• Anthropic (Claude) does two jobs. It reads a question the search box's own words can't answer and rewrites it as a search; our server sends only the question's text, with no account details. It also reads public X posts to work out which picks and games they're about. Anthropic's own privacy policy covers what it does.
• Links out. Kalshi, Novig, 4cx, sportsbooks, Telegram, and X have their own privacy policies once you open them. Some links to other companies are referral links, and we may get a reward when you sign up through one.

We don't sell your personal information or share it for cross-context advertising. We've collected the categories above in the last 12 months and disclosed them only to the recipients listed here, for the purposes above. We'd otherwise disclose your data only if the law requires us to.

Keeping and deleting your data

We keep data only as long as we need it:

• Your account, saved content, and posts: until you delete them or close your account. We then delete them within 30 days.
• Exchange API keys: until you disconnect them or close your account.
• Free picks list: until you unsubscribe. A sign-up you never confirm is removed after about a week.
• Search box questions it can't answer: up to 90 days, without your name or account.
• Sign-up limits (hashed IP address): about a day.
• Server logs: about 30 days.
• Our saved readings of public X posts: 30 days.
• Payment records, analysts' statements, payout details, and tax forms: for 4 years after the tax year they relate to, because tax law requires it, even if the account is closed.

You can delete notes and picks yourself at any time, and the dashboard's Export button downloads your saved bets as CSV or JSON.

To delete your account and everything stored with it, apart from the records the law requires us to keep, email support@predict2win.app from the address you sign in with. If you sign in with X, tell us your X username. We delete it within 30 days and reply when it's done. Uninstalling the app or the extension removes what it kept on that device.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, give you a copy in a portable format, correct it, or delete it. You can also stop our optional emails at any time. Email support@predict2win.app from your sign-in address; we may need to confirm it's you, and an authorized agent can ask for you where the law allows. We reply within 30 days. We won't treat you worse for asking. If we say no, reply to that decision and we'll review it and tell you the result, along with how to complain to your regulator if your state or country provides for one.

US state residents

Depending on your state, including California, you may have the rights above and the right to opt out of the sale or sharing of your data, targeted advertising, and certain profiling. We don't do any of those, so there's nothing you need to opt out of. Sensitive data we hold, namely exchange API secrets, passwords handled by Firebase Authentication, and analysts' tax ID numbers, is used only to provide the feature it's for or to meet legal duties.

Europe and the UK

If you're in the European Economic Area or the UK, you also have the right to restrict or object to our use of your data and to complain to your data protection authority (in the UK, the ICO). Our legal reasons for using your data are:

• Our contract with you: your account, saved content, plans, Cloud Sync, and analyst payments.
• Your consent: optional emails and features you choose to turn on. You can withdraw it at any time.
• Our legitimate interests: security, preventing abuse, and showing and grading analysts' public picks. You can object to these.
• Legal duties: tax records and responses to lawful requests.

We and our main providers are based outside Europe, and your data is processed in the United States and in other countries where those providers work. Where the law requires it, we rely on the European Commission's standard contractual clauses and the UK's equivalent, or on a provider's certification under the EU-US Data Privacy Framework. Email us for a copy of those safeguards.

Security

Everything travels over HTTPS, exchange secrets are stored encrypted, and the database only lets each account read and write its own private data. No system is perfectly secure, so use a strong password if you sign in with email.

Adults only

Predict2Win is for adults 21 and older. We don't knowingly collect data from anyone younger, and we delete an account if we learn it belongs to someone under 21.

Changes

If this policy changes, we'll update the date at the top of this page, and we'll say so on the site when a change affects what we collect or share.

Contact

Predict2Win INC, Duluth, GA 30097
support@predict2win.app