Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how Over Under Labs ("we", "us", the "Service Provider") collects, uses, and shares information when you use the OverUnder AI application (the "Application"), a freemium sports-prediction service. By using the Application you agree to the practices described here. For the purposes of the GDPR, Over Under Labs is the data controller; you can reach us at [email protected].

1. Information We Collect

Information you provide:

Account data — your email address and a user ID, created and managed through Firebase Authentication, Google Sign-In, or Sign in with Apple. If you use Sign in with Apple, Apple may provide us with a private relay email address instead of your real one.
Any content or requests you send us (e.g. support messages).

Information collected automatically:

Your device's IP address;
Device and technical information (device model, operating system and version, language, app version) and device identifiers;
Usage and interaction data — the screens you visit, features you use, and the time and duration of use (via Firebase Analytics);
Diagnostic and crash data (via Firebase Crashlytics);
Advertising identifiers (Google Advertising ID on Android, IDFA on iOS) used to deliver and measure ads, where permitted.

The Application does not collect precise geolocation from your device.

Payment information: subscriptions are processed by RevenueCat together with the Apple App Store and Google Play. We do not receive, store, or have access to your card, banking, or payment credentials.

2. How We Use Information

To provide, operate, and maintain the Application and your account;
To generate and display sports predictions and premium content;
To process and manage subscriptions;
To send push notifications you have enabled (via Firebase Cloud Messaging);
To understand usage, fix crashes, and improve the Application;
To display advertising and measure its performance;
To protect against fraud and abuse, and to comply with legal obligations.

3. Advertising & Tracking

The Application shows ads through Unity LevelPlay (formerly ironSource) mediation together with Unity Ads. LevelPlay mediates third-party ad networks (including Google) that may use advertising identifiers to serve and measure ads. We do not control, and are not responsible for, the independent practices of those networks.

iOS: before any cross-app tracking we request your permission through Apple's App Tracking Transparency prompt. If you decline, we do not track you across other companies' apps and websites for advertising.
Android: you can reset your advertising ID or opt out of ad personalization in your device settings.

4. Third-Party Services

The Application relies on the third-party services below, each governed by its own privacy policy:

Google — Firebase (Authentication, Analytics, Crashlytics, Cloud Messaging), Google Sign-In, and Google Play Services (Firebase, Google);
Apple — Sign in with Apple and App Store services (Apple);
RevenueCat — subscription management (RevenueCat);
Unity — Unity LevelPlay / ironSource and Unity Ads (Unity, ironSource);
Expo — app delivery and over-the-air updates (Expo).

5. Use of Artificial Intelligence

The Application uses AI and machine-learning models to produce match predictions from historical sports data. These models do not use your personal data for training. AI processing is performed in accordance with this Policy and applicable law.

6. How We Share Information

We do not sell your personal data for money. We share information only:

with the service providers and processors listed above, who act on our behalf to operate the Application;
as required by law, such as to comply with a subpoena or similar legal process;
where we believe in good faith it is necessary to protect our rights, your safety or that of others, investigate fraud, or respond to a government request.

7. International Data Transfers

The providers above may process your information in countries outside your own, including the United States. Where required, such transfers are protected by appropriate safeguards (for example, the European Commission's Standard Contractual Clauses).

8. Data Retention & Deletion

We retain your data for as long as you use the Application and for a reasonable period afterwards. You may delete your account at any time from within the app or by emailing [email protected] — see Delete Your Account for full instructions. After deletion we keep residual data in backups for up to 30 days, after which it is permanently removed, except where longer retention is required by law.

9. Your Rights (EU/EEA & UK — GDPR)

If you are in the EU/EEA or the UK, you have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data ("right to be forgotten");
restrict or object to certain processing;
data portability;
withdraw consent at any time, without affecting prior processing;
lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact [email protected].

10. Your Rights (California — CCPA/CPRA)

If you are a California resident, you have the right to:

know what personal information we collect and how it is used;
request deletion or correction of your personal information;
opt out of the "sale" or "sharing" of personal information;
not be discriminated against for exercising your rights.

We do not sell personal information for money. However, sharing advertising identifiers with ad partners for cross-context behavioral advertising may be considered "sharing" under California law. To opt out, decline the App Tracking Transparency prompt on iOS, or reset/limit your advertising ID and opt out of ad personalization on Android. To make any other request, contact [email protected].

11. Children

The Application is intended only for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us data, contact [email protected].

12. Security

We use physical, electronic, and procedural safeguards — including encryption in transit and authenticated access — to protect the information we process. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Continued use of the Application after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

For any questions about this Policy or your data, contact the Service Provider at [email protected].