Privacy Policy
Last updated April 3, 2026
Data Controller
BetCaddy is operated by Bloomcode AB, a company registered in Sweden. For privacy inquiries, contact privacy@betcaddy.app.
Data we collect
Account data
Email address, display name, username, avatar (color choice and optional photo), phone number (optional), country, and preferred currency.
Game data
Rounds, bets, scores, side games, debts, and the payment method used when marking a debt as settled.
Payment handles
Usernames for external payment apps you add (e.g. Venmo, Cash App, PayPal, MobilePay, Revolut, Swish). Stored to help other players send you payments. We never process, hold, or facilitate monetary transactions.
Device and technical data
Push notification tokens (when you enable notifications), device type, and user agent string (recorded at the time of consent).
Analytics data WITH CONSENT
Aggregated usage events such as rounds created and features used. No personal message content or session recordings. Processed by PostHog on EU-hosted infrastructure.
Error data
Crash reports and error traces via Sentry to maintain service quality. Contains technical stack traces and app version only — no personal content.
Legal basis for processing
Contract
Account and game data are necessary to provide the BetCaddy service
Consent
Analytics data is collected only after you accept our consent prompt
Legitimate interest
Error monitoring and security measures to keep the service stable and safe
How we use your data
- Provide and operate the BetCaddy service (games, bets, scoring, settlements)
- Send push notifications about game updates, invitations, and results
- Improve the app through anonymized analytics (with your consent)
- Monitor and fix errors to maintain service quality
- Prevent abuse and enforce our Terms of Service
We do not sell your personal data to third parties.
Third-party services
Supabase
Database, authentication, real-time sync
PostHog
Analytics (consent-gated)
Sentry
Error monitoring
Google & Apple OAuth
Optional sign-in providers
APNs / FCM
Push notification delivery
Payment apps (Venmo, Swish, PayPal, etc.) are opened via external links at your request. We do not share your data with these services.
Data storage and international transfers
Your primary data is stored in Supabase, hosted in EU-West-1 (Ireland). Analytics are processed by PostHog within the EU. Sentry may process error data in the United States under EU Standard Contractual Clauses (SCCs). Push notification tokens are routed through Apple (APNs) and Google (FCM) infrastructure as required for delivery.
Data retention
Account data
Until account deletion
Game data
Anonymized after deletion
Analytics data
PostHog default retention
Error data
Up to 90 days
Consent records
Retained for compliance
Cookies and local storage
BetCaddy does not use cookies. We use your browser's or device's localStorage to store authentication tokens, dark mode preference, consent status, and app preferences. You can clear this data at any time through your browser or device settings.
Your rights under GDPR
Access
Request a copy of your data
Rectification
Correct inaccurate data
Erasure
Delete your account and data
Restriction
Limit how we process data
Portability
Export in machine-readable format
Objection
Object to legitimate interest
You can also withdraw consent for analytics at any time via the app. To exercise any right, use account settings or email privacy@betcaddy.app. We respond within 30 days. You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
Account deletion
You can delete your account at any time from Account Settings within the app. Your personal data (profile, payment handles, notification preferences) will be permanently removed within 30 days. Anonymized game records may persist so that other participants' round history remains intact.
Additional information
Children's privacy
BetCaddy is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.
Security
We use TLS encryption for all data in transit, encryption at rest within our database infrastructure, role-based access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. For material changes, we will notify you via an in-app notice. Continued use of BetCaddy after changes constitutes acceptance.
Questions?
Contact us at privacy@betcaddy.app
