Acid Drip Software ACID DRIP SOFTWARE
  • Home
  • About
  • PredictEdge
  • Contact

PRIVACY POLICY

How we handle your data and protect your privacy.

Last updated: September 5, 2026

1. Introduction

Acid Drip Software ("we," "our," or "us") is a development studio that builds data-driven applications end to end. This Privacy Policy explains what information we hold, why we hold it, who processes it on our behalf, and what we deliberately do not collect.

This is one policy for the whole company. It applies to every Acid Drip Software application, website and service, present and future — including PredictEdge, our flagship product, and any product we release later. Acid Drip Software is the data controller for all of them. Where a future product needs a disclosure of its own, we add it here rather than publishing a separate policy.

We keep this deliberately short on collection because the underlying system is deliberately short on collection. The list below is the whole list.

2. What We Collect, and Why

2.1 Account Information

When you create an account, we store:

  • Your email address — it is your login identifier, the address we use for account and billing notices, and the route for support. It is the only contact information an account requires.
  • A bcrypt hash of your password — a one-way cryptographic hash. We never store your password in plaintext and cannot read or recover it.
  • An email-verified flag — records whether the address has been confirmed, so we can distinguish real accounts from typos and abuse.
  • Your subscription plan, its source, and its expiry date — so the product knows which tier to unlock and when access ends.

2.2 Website Subscription and Billing Data

If you subscribe on our website, we store your Stripe customer ID and Stripe subscription ID against your account, plus a record of the subscription itself: subscription ID, customer ID, the price or plan purchased, the status, and the current period end date. We hold these so we can grant the access you paid for, show you the right billing state, and open the correct Stripe billing portal when you click "Manage billing."

We do not receive or store your card number. Card details are entered on Stripe's own checkout, held by Stripe, and never passed to us — see section 5.

2.3 App-Store Subscription Data

Where a product is offered through an app store and you subscribe inside the app, we store a subscription record containing: a random per-install device identifier we generate ourselves, the platform (iOS or Android), the app-store receipt or purchase token, the product ID purchased, and the subscription's status and expiry. We hold these to verify the purchase directly with Apple or Google — receipts are validated on our server, never trusted from the device — and to keep access in sync with what the store says you are entitled to. The device identifier is random and generated per install; it is not your device's advertising ID, hardware serial, or any identifier that follows you between apps.

2.4 Push Notification Tokens and Alert Preferences

If you turn on notifications, we store an Expo push token (the address a notification is delivered to), your platform (iOS or Android), and your notification preferences — which sports you have pinned, which alert types are switched on, and your line-movement threshold. We hold these solely to send the alerts you asked for, to the right device, about the right games. Turning notifications off in the app or in your device settings stops them.

2.5 Server Logs and Abuse Prevention

Our servers keep standard request logs, and we run a file-based rate limiter that throttles abusive traffic. Both key on IP address — for IPv6, on a truncated /64 network prefix rather than the full address. We hold this to keep the service up, to diagnose errors, and to block credential stuffing, scraping and denial-of-service attempts. It is not used to build a profile of you, and it is not combined with your account data for marketing.

2.6 Support and Contact-Form Correspondence

If you email us, we keep the message and our reply so we can answer you and keep a record of what was decided.

If you write to us through the contact form on our website instead of by email, we receive the name, email address, subject and message you type into it. That form is relayed to us by a third-party form-delivery service, listed in section 5. Nothing typed into the contact form is connected to an account or a subscription, and the name field exists only so we know how to address the reply.

2.7 Information Stored on Your Own Device

Some information never reaches us at all. Your signed-in session token is stored in your browser's local storage on our websites, and app preferences and display settings are stored locally on your device. We do not use third-party advertising or tracking cookies.

3. What We Do Not Collect

This list is as much a part of the product as the features are:

  • No card numbers. Stripe holds those. We never see them.
  • No real name required. An email address is all an account needs. We never ask for your date of birth, postal address or phone number, and we do not store a legal name against your account. Two narrow exceptions, both outside our systems: Stripe may ask for billing details such as a cardholder name or postal code in order to take the payment and work out tax, and those stay with Stripe; and the contact form asks for a name so we know how to address the reply.
  • No location tracking. Not precise, not coarse, not background. We do not request location permission.
  • No advertising identifiers. No IDFA, no Android advertising ID, no device fingerprinting.
  • No third-party ad networks and no ad SDKs in our applications.
  • No sale of personal data. We do not sell, rent, trade or license your personal information to anyone, for any purpose, and we do not share it for cross-context behavioural advertising.
  • No contacts, photos, files, microphone, camera, health or biometric data.
  • No tracking of your activity on other sites or apps.

4. Sports Data Is Not Data About You

The great majority of what our systems store is public information about games — schedules, box scores, team and player statistics, injuries, and published odds. That data describes sporting events, not users. It is obtained from third-party providers, kept entirely separate from account data, and contains nothing personal about you.

5. Service Providers and Sub-Processors

We do not sell your information. We share the minimum necessary with the following providers, each of which processes it only to deliver the function named:

  • Stripe — payment processing for website subscriptions. Stripe receives your email address and payment details, holds your card data, and returns us a customer and subscription ID. Stripe's own privacy policy governs what it holds.
  • Apple — in-app purchase billing and receipt validation, and push delivery to iOS devices, where a product is offered through the App Store.
  • Google — in-app purchase billing and purchase-token validation, and push delivery to Android devices, where a product is offered through Google Play.
  • Expo — push notification delivery. Expo receives the push token and the notification payload in order to route the message to Apple's or Google's push service.
  • Our web hosting and infrastructure provider — hosts the servers and databases on which the information described in section 2 is stored.
  • Our contact-form delivery provider — receives the name, email address, subject and message typed into the contact form on our website, and does nothing with them except deliver the message to us. Writing to our support address directly does not pass through it.
  • Sports data providers — supply schedules, statistics, scores and odds to us. They receive no user data whatsoever; the flow is one-way, into our systems.

We may also disclose information where we are legally required to — in response to a valid legal process, court order, or government request — or where necessary to investigate fraud or abuse, or to protect our rights or the safety of others. If our business or its assets were ever transferred, this policy would continue to govern the information until you were notified of a replacement.

Our providers may process and store information in the United States or in other countries where they operate.

6. How We Use Information

We use what we hold only to:

  • Create your account, authenticate you, and keep your session signed in
  • Grant, renew and end the level of access you have paid for
  • Process subscriptions and verify purchases with Stripe, Apple or Google
  • Email you about your account, your subscription, receipts, and price or policy changes
  • Send the push notifications you have switched on
  • Answer your support requests
  • Keep the service available, diagnose faults, and detect and prevent fraud, scraping and abuse
  • Meet our legal obligations

Where the law requires a legal basis for processing, ours is the performance of our contract with you (accounts, subscriptions and support), our legitimate interest in keeping the service secure and working (logs and rate limiting), your consent (push notifications, which you can withdraw at any time), and compliance with legal obligations (tax and financial records).

7. Data Retention

  • Account data — kept while your account exists. If you ask us to delete your account, we delete or anonymise your personal information within 30 days, except where retention is required by law.
  • Billing records — transaction records are retained as long as required for tax, accounting and dispute-resolution purposes, typically several years, even after an account is closed. Stripe retains its own records under its own policy.
  • Push tokens and notification preferences — kept while the token is in use. A token we have recorded no activity on for 90 days is deleted automatically, and a token the push service tells us is no longer registered — which is what uninstalling the app produces — is deleted the next time we try to send to it. Turning notifications off stops the alerts straight away; if you want the token and its preferences removed immediately rather than on that schedule, ask us and we will delete them.
  • Server logs and rate-limiter records — short-lived, retained only as long as needed for security and diagnostics.
  • Support email — kept as long as needed to resolve the matter and keep a record of it.

8. Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure or destruction. In practice that includes: passwords stored only as bcrypt hashes, encrypted connections (HTTPS/TLS) for all traffic between our apps, our websites and our servers, signed request authentication for device-to-server writes, server-side validation of every purchase receipt, rate limiting on authentication endpoints, and access to production data restricted to those who need it.

Card data is never in our systems to protect — that risk is removed rather than mitigated. No method of transmission or storage is perfectly secure, and we cannot promise absolute security; if a breach ever affected your personal information, we would notify affected users and any regulator we are required to inform.

9. Children's Privacy

Our services are not directed to children. We do not knowingly collect personal information from anyone under 18, and never from a child under 13. PredictEdge, our sports analytics product, has a higher bar still: it is intended only for those 21 or older, or the legal age for sports wagering in their jurisdiction, whichever is higher. If we become aware that we have collected personal information from a child, we will delete it promptly. A parent or guardian who believes we hold such information should contact us at the address in section 12.

10. Your Rights

Privacy laws in various places — including the EU and UK General Data Protection Regulation and the California Consumer Privacy Act — give people rights over their personal information. Rather than sorting people by location, we honour the following requests for everyone:

  • Access — get a copy of the personal information we hold about you
  • Correction — have inaccurate information corrected
  • Deletion — have your account and personal information deleted, subject to records we must keep by law
  • Portability — receive your information in a portable, machine-readable format
  • Objection and restriction — object to or ask us to restrict a particular use
  • Withdraw consent — turn off push notifications at any time, in the app or in your device settings, without affecting the rest of your account
  • Non-discrimination — exercising any of these rights never changes the price you pay or the service you receive

There is nothing to opt out of regarding the sale of personal data, because we do not sell it.

How to exercise a right: email support@predictedge.bet from the address on the account. We may need to verify that the request comes from you before we act on it, and we aim to respond within 30 days.

Deleting your account does not by itself cancel a paid subscription. Cancel the subscription first — in the Stripe billing portal for a website subscription, or in your device's app store settings for one bought inside an app — and then ask us to delete the account. If you delete the account without cancelling, the billing relationship carries on at the biller even though the account is gone. Cancellation is described in section 6 of our Terms of Service.

11. Changes to This Policy

We may update this Privacy Policy — for example when we add a product or a new provider. We will post the updated policy on this page with a new "Last updated" date, and for material changes we will also notify you in the relevant application or by email to the address on your account before the change takes effect where we are required to. Your continued use of our services after an update constitutes acceptance of it.

12. Contact Us

If you have questions or concerns about this Privacy Policy, or want to exercise any of the rights in section 10, please contact us:

  • Email: support@predictedge.bet
  • Website: aciddripsoftware.com/contact.html

See also our Terms of Service.

Acid Drip Software

A software studio building data-driven products end to end.

Company

  • About
  • Contact

Products

  • PredictEdge

Legal

  • Privacy Policy
  • Terms of Service

© 2026 Acid Drip Software. All rights reserved.