Privacy Policy

Effective from 8 October 2026

This policy explains what personal data we process when you use the Tipste website (tipste.com) and the Tipste apps for Android, iOS and Windows (together the Service), why we do it and what rights you have.

1. Who is responsible

The controller of your personal data is LivePick s.r.o., company ID 08930031, VAT ID CZ08930031, registered office Korunní 1077/31, 702 00 Ostrava, Czech Republic.

For anything related to privacy, write to info@tipste.com.

2. What data we process

You can use the Service without an account

Live scores, statistics, tables and match details are available without signing in. In that case we only process the technical data described below and the settings stored on your device (for example the dark mode or the language).

Account data

e-mail address and password (we store the password only as a one-way hash, never in readable form),
optional profile data you enter yourself: first and last name, username, short bio, country, profile picture,
settings: language, time zone, theme, notification and match alert preferences.

Content you create

favourite matches, filters, folders, templates and metrics you build in the Service,
picks your filters find and their results,
notifications sent to you and their history,
ideas, votes and comments in feature voting, and messages to tipster services if you use them.

Devices and notifications

when you pair a phone: a device identifier, device name, platform and the push notification token issued by Google Firebase Cloud Messaging or Apple Push Notification service,
when you pair Telegram: your Telegram chat ID, display name and profile photo (or, for your own bot, the bot token and the channel name and photo),
app version and platform of the Tipste app you use and when it was last active.

Payments

If you buy a paid plan or AI credits, we keep the order, the amount, the invoice number, the payment state, your country, the IP address used for the payment and the phone number if you entered it. Card or account details are entered directly at the payment provider; we never see or store them.

Technical data

login sessions (IP address, browser or app user agent, time of the last activity) and a log of security relevant actions on your account (login, password change, settings change),
error reports from the Tipste apps (app version, operating system, device model, error message, IP address and, if you are signed in, your account), sent so that we can fix the problem,
cookies described in section 7.

We do not use advertising trackers, we do not sell personal data and we do not build marketing profiles.

3. Why we process it and on what legal basis

Purpose	Legal basis (GDPR)
Creating and running your account, saving your favourites, filters and settings, sending the notifications you switched on	Performance of a contract, Art. 6(1)(b)
Processing payments, issuing and keeping invoices	Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c)
Security of accounts, preventing abuse, fixing errors in the apps	Legitimate interest, Art. 6(1)(f)
AI analysis of a match, only when you request it	Performance of a contract, Art. 6(1)(b)
Newsletters about new features (you can turn them off at any time in the account settings)	Legitimate interest, Art. 6(1)(f), or your consent

4. Who we share data with

We share personal data only with providers that help us run the Service, and only to the extent they need:

Hosting and backups: our servers and database backups are operated by hosting providers in the European Union.
Google Firebase Cloud Messaging (Google Ireland Ltd.) and Apple Push Notification service (Apple Inc.): delivery of push notifications to your phone.
Telegram (Telegram Messenger Inc.): delivery of notifications if you pair Telegram.
Payment providers: Pays.cz (Pays a.s., Czech Republic) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.), only when you make a payment.
AI model providers: when you request an AI analysis, match data and your question are sent to the provider of the language model (currently Google Gemini). We do not send your e-mail or name.
Google Fonts: some public pages load fonts from Google servers, which receive your IP address.
Public authorities, if the law requires it.

5. Transfers outside the EU

Some of the providers above (Google, Apple, Telegram, PayPal) may process data outside the European Economic Area. Such transfers rely on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or on the Standard Contractual Clauses.

6. How long we keep data

Account data and content you created: as long as your account exists. When you ask us to delete your account, we delete it within 7 days (see Delete your account).
Invoices and payment records: 10 years, as required by Czech tax and accounting law. After account deletion they are no longer linked to your e-mail or name.
Login sessions expire automatically; all of them end when you sign out everywhere or delete your account.
App error reports: only as long as needed to find and fix the error; after account deletion they are kept without any link to you.

7. Cookies and local storage

We use only cookies that are necessary for the Service to work:

SESSION: keeps you signed in,
language and theme: remember your language and dark or light mode,
in the mobile apps: an anonymous device identifier, the app version and the device platform, used to pair the phone with your account and to deliver notifications.

The apps also keep some settings in the local storage of your device (for example odds alerts and the order of tabs). We do not use analytics or advertising cookies.

8. Your rights

Under the GDPR you have the right to:

access your data and get a copy of it,
have inaccurate data corrected (most data you can edit yourself in the account settings),
have your data erased, which you can request at any time by asking us to delete your account,
restrict processing and object to processing based on legitimate interest,
data portability,
withdraw consent at any time, where processing is based on consent,
lodge a complaint with the supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

To exercise your rights, write to info@tipste.com. We answer within one month.

9. Deleting your account

To delete your account, e-mail us at info@tipste.com from the address of your account. We delete it within 7 days and confirm it by e-mail. What happens with your data is described on the page Delete your account.

10. Security

All communication with the Service is encrypted (HTTPS). Passwords are stored only as hashes, and access to the servers and backups is restricted to authorised staff.

11. Children

The Service is a general sports information service and is not directed at children under 16. We do not knowingly collect personal data of children under 16. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We may update this policy when the Service or the law changes. We will publish the new version on this page with a new effective date and, in the case of significant changes, inform registered users by e-mail.