Matched Betting Profit Tracker Privacy Policy
How the app handles your account, betting records, advertising, subscriptions and diagnostics.
Last Updated: October 9, 2026
Operator and data controller: Nepherius, United Kingdom
Privacy contact: help@nepherius.dev
1. Who We Are and What This Policy Covers
Nepherius operates Matched Betting Profit Tracker (also shown as "MB Profit Tracker", the "App") and decides how the personal information described here is used. This policy covers the Android app, the backend services it uses and any support communications. Contact help@nepherius.dev about this policy or to exercise your data protection rights.
The App is a record-keeping tool. It does not place bets, connect to your bookmaker or exchange accounts, or receive any information from them. The betting figures it holds are only the ones you type in.
2. Summary
- An account is required so your records can sync. You can sign in with email and password or with Google.
- Your betting records stay yours. We do not sell them, share them with bookmakers or exchanges, or use them to target advertising.
- Ads are non-personalised. The free version requests non-personalised ads from Google AdMob. A monthly subscription removes ads.
- Crash reporting is optional. You can turn crash data collection off in Settings.
- You can delete everything in the App from Settings > Reset > Delete Account. See the instructions page.
3. Information We Process
| Information | Source and Use |
|---|---|
| Account and sign-in information | A Firebase account identifier, your email address and sign-in method. If you use Google sign-in, Google also shares the basic profile details it makes available to Firebase Authentication, such as your name and profile picture. If you register with email, Firebase Authentication handles your password; we never see it in plain text. Used to create your account, sign you in, keep your records separate from other users' records and send password-reset emails you request. |
| Account record | Account creation time, account status, whether the account has premium (ad-free) status, the commission rates you set for Betfair, Betdaq, Matchbook and Smarkets, and a count of bets logged since the last ad was shown. Used to run the App, apply your settings and control how often ads appear. |
| Betting records | For each bet you log: the bookmaker, bet type, profit or loss amount and date. If you use the advanced form, the App calculates returns from the odds, stakes and commission you enter. Used to show your daily, monthly and yearly results. |
| Bank balances | The names of the bookmaker and exchange accounts you add, with the current and pending balances you enter. Used to show your available funds. |
| Yearly archive | Monthly profit totals for each year. Used for the statistics screens. |
| Settings stored on your device | Your chosen theme, currency symbol and crash-reporting choice are saved in the App's local storage on your phone. A list of bookmaker names is downloaded from our server and cached on the device to fill the bookmaker picker; this list contains no personal information. |
| Subscription and purchase information | If you subscribe to remove ads, Google Play processes the payment; we never receive your card details. RevenueCat receives your Firebase account identifier as its app user ID, together with Google Play purchase tokens, transaction identifiers, product, entitlement status and renewal or expiry dates. Used to unlock, validate and restore your subscription. |
| Advertising data | On the free version, Google AdMob processes your device's advertising identifier, IP address, device and app information, and ad interactions in order to serve non-personalised ads, limit how often you see the same ad, measure ad performance and prevent fraud. The App requests non-personalised ads only, so ads are selected from context such as the app and approximate location, not from a profile of your interests. |
| Usage analytics | Firebase Analytics records which screens you open and standard app events (such as first open, session start and app updates), together with an app-instance identifier, device model, operating system version, app version, language and approximate location derived from your IP address. Used to understand how the App is used and which areas need improvement. We do not send your betting amounts or bank balances to Analytics. |
| Crash diagnostics | If crash reporting is on (the default), Firebase Crashlytics collects crash reports, stack traces, device and operating-system details and an installation identifier. Failed purchase attempts may also be logged with their error code. Used to find and fix faults. You can turn this off in Settings. |
| Technical information | Our service providers process connection data such as IP addresses, request times and error logs when the App communicates with them. This is needed for the services to work and to keep them secure. |
| Support correspondence | If you contact us, we receive your email address, your message and anything you choose to include. |
The App does not request access to your location, contacts, photos, camera or microphone. It only needs internet access.
4. Your Betting Records
Betting and balance records can reveal your gambling habits and finances, so we limit their use to providing the App to you. They are stored in Cloud Firestore under your account, and access rules are intended to allow only your signed-in account to read or change them.
We do not share your records with bookmakers, betting exchanges, matched-betting services, advertisers or data brokers, and we do not use them to decide which ads you see. We will only look at an individual account's records if you ask us to as part of a support request, or if the law requires it.
5. Why We Use Information and Our Lawful Bases
Under UK data protection law (UK GDPR and the Data Protection Act 2018), and the EU GDPR where it applies, we rely on the following lawful bases:
- Performance of a contract: creating your account, signing you in, storing and syncing your records, applying your settings and providing a subscription you buy.
- Legitimate interests: keeping the App working and secure, fixing crashes, understanding usage so we can improve the App, and showing non-personalised ads so the App can stay free. We have weighed these interests against your privacy and limit what is collected for them.
- Consent: where the law requires consent for storing or reading information on your device, for example for some advertising or analytics technologies in certain regions. You can withdraw consent by turning off crash reporting, subscribing to remove ads, resetting your advertising ID in Android settings or uninstalling the App.
- Legal obligation: keeping records or responding to lawful requests where we are required to.
6. Who Can Receive Information
We do not sell your personal information. We share it only with the service providers that run parts of the App, each under its own terms and privacy policy:
- Google (Firebase): Authentication, Cloud Firestore, Realtime Database, Cloud Functions, Analytics and Crashlytics. Firebase privacy.
- Google Sign-In: only if you choose to sign in with Google. Google privacy policy.
- Google AdMob: advertising on the free version. How Google uses information from apps.
- Google Play: app distribution, payments, in-app reviews and Play's own app statistics.
- RevenueCat: subscription management. RevenueCat privacy policy.
We may also disclose information if required by law, to protect the rights, safety or property of users or others, or as part of a sale or reorganisation of the App, in which case this policy would continue to apply. The Settings screen links to an optional Ko-fi page for tips; if you visit it, Ko-fi handles any information you give it under its own policy.
7. How Long Information Is Kept and How Deletion Works
- Account, bank and archive records are kept while your account exists, until you reset or delete them.
- Individual bet entries are stored with an expiry date 30 days after they are logged and may be removed automatically after that date. Your monthly totals remain in your yearly archive.
- Reset Account (Settings > Reset > Reset Account) deletes your bets, bank balances and statistics but keeps your sign-in account.
- Delete Account (Settings > Reset > Delete Account) deletes your bets, bank balances and archive, then our backend deletes your account record and your Firebase sign-in account. This can take a short time to complete and cannot be undone.
- Data held by providers: analytics and crash data are kept for the retention periods set by Google (for example, Crashlytics keeps crash reports for up to 90 days); RevenueCat and Google Play keep purchase records as needed for billing, tax and fraud-prevention purposes.
- Data on your device is removed when you uninstall the App or clear its storage.
- Support emails are kept for as long as needed to deal with your request and any follow-up.
Deleting the App or signing out does not delete your account. Deleting your account does not cancel a Google Play subscription; cancel it in Google Play first. If you can no longer sign in, email help@nepherius.dev from the address on the account and we will delete it for you.
8. International Processing and Security
Our providers may process information in the UK, the European Economic Area, the United States and other countries where they operate. Where information leaves the UK or EEA, we rely on the safeguards those providers offer, such as adequacy regulations, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
Information is encrypted in transit, and access to stored records is limited to your signed-in account and to us for administration. No system is completely secure, so please use a strong, unique password and keep your device locked.
9. Your Rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct inaccurate information (you can edit or delete most records directly in the App);
- have your information deleted;
- restrict or object to processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw consent where we rely on it, without affecting earlier processing.
To use these rights, email help@nepherius.dev. We may need to confirm you own the account before acting, and we will reply within one month. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk or to your local data protection authority.
10. Age Restriction
The App is for adults aged 18 or over. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
11. Changes to This Policy
We may update this policy when the App or the law changes. We will change the "Last Updated" date above and, for significant changes, let you know in the App or by email where appropriate.
12. Contact
Nepherius, United Kingdom · help@nepherius.dev