← The Record

Privacy Policy

Last updated 30 August 2026 · Version 2026-08-29

The short version. The Record stores your name, your @handle, an optional photo, and the bets you make with your friends. There is no money in the app, so there is no payment information. We don't sell your data, we don't advertise, and we don't build a profile of you for anyone else. Analytics record what people do in the app, never who did it or what they wrote.

This policy explains what The Record collects, why, and what you can do about it. It's written to be read, not to be survived.

Who we are

The Record is operated by Trent Jorgensen, an individual based in Toronto, Ontario, Canada. For the purposes of applicable privacy law, that individual is the data controller.

Contact: hello@getontherecord.app

What we collect

When you create an account

You sign in with Apple or Google. We never see or store your password. From that sign-in we receive an account identifier and, depending on your choices with Apple or Google, an email address. Apple's "Hide My Email" is fully supported — if you use it, we only ever see the relay address.

During setup you provide:

When you use the app

DataWhy
Bets you create, join, or vote onIt's the product
Your win/loss record and streakCalculated from your bets; not stored separately
Leagues you belong to, and who else is in themTo show you the right content
Friend connections and requestsTo build your friends list
Your timezoneSo deadlines show in your local time and notifications respect quiet hours
When you last opened the appTo know who is active in a League
A push notification token, if you allow notificationsTo deliver notifications to your device
Reports and blocks you makeSafety and moderation
A record of accepting these termsTo know which version you agreed to

What we deliberately do not collect

Analytics and error reporting

Two services help us understand whether the app works. Both are configured to avoid personal information.

PostHog — product analytics

Records actions, keyed to a random identifier: that a bet was created, that onboarding was completed, that a notification was opened. It never receives your name, your @handle, the text of your bets, your friends list, or your email. We use it to answer questions like "where do people give up during signup".

Sentry — crashes and errors

When something breaks, Sentry receives the technical details: the error, the device model, the OS version, and the sequence of screens that led to it. It is not used to track you and receives no bet content.

Contacts matching (not yet available)

We plan to let you find friends already using The Record by matching against your phone's contacts. This is not in the app today. When it arrives it will be entirely optional, and built so we never hold your contact list:

SMS verification, when it exists, will be delivered by Twilio.

Who can see your information

Where your data is stored

The Record uses Supabase for its database and authentication, hosted in the United States. Sentry and PostHog also process data in the United States.

If you are in Canada, the EU, or the UK, this means your information is transferred to and stored in the United States, where it may be accessible to authorities under applicable local law. Transfers rely on the providers' standard contractual clauses.

How long we keep it

Deleting your account

You can delete your account from inside the app at any time: Profile → Settings → Delete account. No email required.

When you do:

One honest exception. Your picks on bets that have already been settled are kept, attached to an anonymised "Deleted user" rather than to you. This is because those results are shared history: erasing them would silently change other people's win/loss records. Nothing identifying you remains attached to them.

Picks on bets that are still open are withdrawn completely.

Your rights

Wherever you live, you can ask us to access, correct, export, or delete your information. Most of it you can do yourself in the app; for anything else, email hello@getontherecord.app and we'll respond within 30 days.

If you're in the EU or UK (GDPR)

You have rights of access, rectification, erasure, restriction, portability, and objection. Our legal basis is performance of a contract for the core app, consent for notifications and any future contacts matching, and legitimate interests for keeping the service working and safe. You may complain to your local supervisory authority.

If you're in California (CCPA/CPRA)

You have rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, and never have. We do not use it for cross-context behavioural advertising. You will never be discriminated against for exercising these rights.

If you're in Canada (PIPEDA)

You may access your personal information and challenge its accuracy, and you may complain to the Office of the Privacy Commissioner of Canada.

Children

The Record is not for anyone under 13. We don't knowingly collect information from children under 13. If you believe a child has created an account, email us and we'll delete it.

Security

Data is encrypted in transit and at rest. Access rules are enforced by the database itself rather than only by the app, so a flaw in the app can't expose another League's bets. No system is perfect, and we don't claim otherwise.

Changes

If we make a material change we'll update the version at the top and ask you to review it in the app before you continue. The app records which version you accepted.

Contact

hello@getontherecord.app