The Record
Privacy Policy
Last updated 13 October 2026 · Version 2026-08-29
The short version. The Record stores your name, your @handle, an optional photo, the bets you make with your friends, and any photos you add to them. There is no money in the app, so there is no payment information. We don't sell your data, we don't advertise, and we don't build a profile of you for anyone else. Analytics record what people do in the app, never who did it or what they wrote.
This policy explains what The Record collects, why, and what you can do about it. It's written to be read, not to be survived.
Who we are
The Record is operated by Trent Jorgensen, an individual based in Toronto, Ontario, Canada. For the purposes of applicable privacy law, that individual is the data controller.
Contact: hello@getontherecord.app
What we collect
When you create an account
You sign in with Apple or Google. We never see or store your password. From that sign-in we receive an account identifier and, depending on your choices with Apple or Google, an email address. Apple's "Hide My Email" is fully supported — if you use it, we only ever see the relay address.
During setup you provide:
- A display name — required.
- An @handle — required, and visible to others so they can find you.
- A profile photo — optional. Skipping it gives you an initials avatar.
When you use the app
| Data | Why |
|---|---|
| Bets you create, join, or vote on | It's the product |
| Your win/loss record and streak | Calculated from your bets; not stored separately |
| Photos you add to a bet | So your League can see them |
| Achievements you earn | Shown on your profile; earned from your bets |
| Leagues you belong to, and who else is in them | To show you the right content |
| Friend connections and requests | To build your friends list |
| Your timezone | So deadlines show in your local time |
| When you last opened the app | To know who is active in a League |
| A push notification token, if you allow notifications | To deliver notifications to your device |
| Reports and blocks you make | Safety and moderation |
| A record of accepting these terms | To know which version you agreed to |
| Which version of the app added each thing you add | To compare one release with the next |
What we deliberately do not collect
- No payment information. The Record involves no money at any point.
- No location data. Not your GPS position, not your IP-derived location. Your timezone is a setting, not a tracker.
- No contact list — see the section below for the one narrow future exception.
- No advertising identifiers, and no third-party advertising or tracking SDKs of any kind.
Analytics and error reporting
Three services help us understand whether the app and the website work. All three are configured to avoid personal information.
PostHog — product analytics
Records actions, keyed to a random identifier: that a bet was created, that onboarding was completed, that a notification was opened. It never receives your name, your @handle, the text of your bets, your friends list, or your email. We use it to answer questions like "where do people give up during signup".
Cloudflare Web Analytics — website visits
The website counts visits with Cloudflare Web Analytics. It sets no cookies and keeps nothing about you.
Sentry — crashes and errors
When something breaks, Sentry receives the technical details: the error, the device model, the OS version, and the sequence of screens that led to it. It is not used to track you and receives no bet content.
We email you about your account and about The Record: a welcome when you finish setting up, and other news about the app. It goes through Resend, which receives your email address and the text of each email. Every email that isn't about your account has a link to stop them.
Contacts matching (not yet available)
We plan to let you find friends already using The Record by matching against your phone's contacts. This is not in the app today. When it arrives it will be entirely optional, and built so we never hold your contact list:
- You would verify your own phone number once, by SMS.
- Your phone would compute a one-way cryptographic hash of each contact number and send only those hashes.
- We compare hashes against hashes. Raw phone numbers from your contacts are never transmitted or stored.
- Nothing is uploaded unless you turn the feature on.
SMS verification, when it exists, will be delivered by Twilio.
Who can see your information
- People in your Leagues, your friends, and their friends can see your profile: display name, @handle, photo, win/loss record, and achievements. Your record counts every settled bet you've been in.
- Friends of your friends may see you suggested as someone to add, with the names of the friends you have in common.
- Bets, picks and photos are seen only by people in that bet's League. Once a bet locks, they can see which option you picked.
- Before a bet locks, others see only how many people chose each option, never who chose what.
- If you top a League's standings, a crown shows on your photo wherever rank is shown to people who can see your profile.
- Nobody else can see your profile. There is no public feed, no public profile page, and no public link to your profile.
- Photos are stored at long, random addresses that only the app shows, and only to the League. Anyone who is given one of those addresses could open that photo.
- If you share a bet's card, you're sending an image. What happens to it after that is up to you and whoever you send it to.
- Your email address is never shown to other users.
Where your data is stored
The Record uses Supabase for its database and authentication, hosted in the United States. Sentry, PostHog and Resend also process data in the United States.
If you are in Canada, the EU, or the UK, this means your information is transferred to and stored in the United States, where it may be accessible to authorities under applicable local law. Transfers rely on the providers' standard contractual clauses.
How long we keep it
- Your account data — for as long as your account exists.
- Analytics events — retained by PostHog on a rolling basis, and not linked to your identity.
- Photos on a bet — until whoever added it, or a League admin, deletes it, or the League is deleted.
- Error reports — retained by Sentry for 90 days.
- Notification records — cleared once delivered.
Deleting your account
You can delete your account from inside the app at any time: Profile → Account → Delete account. No email required.
When you do:
- Your sign-in is deleted. You cannot log in again.
- Your name, @handle, photo, and any phone data are erased.
- Your friend connections, devices, and notification history are deleted.
- You are removed from every League.
One honest exception. Your picks on bets that have already been settled are kept, attached to an anonymised "Deleted user" rather than to you. This is because those results are shared history: erasing them would silently change other people's win/loss records. Nothing identifying you remains attached to them.
Picks on bets that are still open are withdrawn completely.
Photos you added to a bet stay with that bet for the same reason, no longer linked to you. A League admin can delete them, or email us and we'll remove them.
Your rights
Wherever you live, you can ask us to access, correct, export, or delete your information. Most of it you can do yourself in the app; for anything else, email hello@getontherecord.app and we'll respond within 30 days.
If you're in the EU or UK (GDPR)
You have rights of access, rectification, erasure, restriction, portability, and objection. Our legal basis is performance of a contract for the core app, consent for notifications and any future contacts matching, and legitimate interests for keeping the service working and safe. You may complain to your local supervisory authority.
If you're in California (CCPA/CPRA)
You have rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, and never have. We do not use it for cross-context behavioural advertising. You will never be discriminated against for exercising these rights.
If you're in Canada (PIPEDA)
You may access your personal information and challenge its accuracy, and you may complain to the Office of the Privacy Commissioner of Canada.
Children
The Record is not for anyone under 13. We don't knowingly collect information from children under 13. If you believe a child has created an account, email us and we'll delete it.
Security
Data is encrypted in transit and at rest. Access rules are enforced by the database itself rather than only by the app, so a flaw in the app can't expose another League's bets. No system is perfect, and we don't claim otherwise.
Changes
We'll update the date at the top. If a change affects what you agreed to, we'll ask you to review it in the app. The app records which version you accepted.