Privacy Policy

Controller: GIS Analytics Limited (15093879), 25 Thornhill Bridge Wharf, London N1 0RU, UK. Covers the Zort app and zort-app.com.

1. What We Collect

You give us

• Username, email, profile photo.
• Sign-in credentials or tokens (Apple, Google, email).
• Bet slip photographs. Stored, not discarded after scanning.
• Stakes, odds, selections, outcomes, currency, notes.
• Posts, comments and reactions.
• AskZort messages and chat history.
• Preferences and settings.
• Support messages.

We collect automatically

• Device model, OS version, app version, device identifiers.
• Advertising identifier (IDFA) — only if you permit tracking. Section 5.
• Screens viewed, features used, scan attempts and outcomes.
• Subscription status, renewals, trials, cancellations.
• Crash and performance data.
• Country or region from IP. No GPS or precise location.

From others

• Apple and Google at sign-in, and for subscription status.
• Other users who add you or interact with your content.

2. What We Use It For

• Reading bet slips and tracking bets.
• Statistics, history and insights.
• Social feed, friends, leaderboards.
• AskZort answers.
• Subscriptions and paid access.
• Notifications you enable, and service email.
• Fixing crashes and bugs.
• Measuring our advertising, where permitted.
• Preventing abuse and meeting legal obligations.

We do not sell your data. We do not use your bet slips or betting history to target advertising.

3. AI Processing

Scanning sends your bet slip photograph to an AI provider. The image leaves our systems. Providers, used in fallback order:

• OpenAI — United States.
• Groq — United States.
• Alibaba Cloud — China.
• Apple Vision — on your device. Image does not leave the phone.

AskZort messages go to our service on AWS (United States), falling back to Perplexity (United States). AI insights use OpenAI.

We do not permit these providers to train on your content where that setting is available to us. Assume anything you upload is transmitted outside the UK. If that is not acceptable to you, add bets manually instead of scanning.

4. What You Make Public

• Shared bet slips: readable by anyone holding the link, without signing in. Not secret. Do not share what you would not want seen.
• Feed posts: visible to other users per your visibility settings.
• Leaderboards: username, photo and aggregate performance visible to other users.
• Friends: can see your activity.

Deletion removes our copy. Screenshots and saved copies held by others are outside our control.

5. Advertising and Tracking

There are no advertisements in the Zort app.

We advertise Zort elsewhere and measure whether it works. The Meta (Facebook) SDK is included for that. If you permit tracking at the App Tracking Transparency prompt, we share your advertising identifier (IDFA), app activity and purchase events with Meta Platforms so an install or subscription can be attributed to an advert. Apple calls this tracking. We declare it as tracking on our App Store listing.

Decline and none of that is shared. No feature is withheld for declining. Change your answer any time: iOS Settings → Privacy & Security → Tracking.

Firebase Analytics and Crashlytics (Google) are used for product analytics and crash diagnosis. Google Analytics runs on zort-app.com. Neither builds advertising profiles.

6. Who Receives Your Data

• Google / Firebase — auth, database, storage, analytics, crash reports, push.
• Amazon Web Services — backend, AI orchestration, email.
• OpenAI, Groq, Alibaba Cloud, Perplexity — AI processing (section 3).
• Meta Platforms — ad measurement, only with your permission (section 5).
• RevenueCat — subscriptions and entitlements.
• Apple, Google Play — payments and subscription status. We never see your card details.
• Resend — email delivery.
• Other users — what you publish (section 4).
• Authorities — where required by law, or to protect rights or safety.
• An acquirer — if the company is sold, subject to this policy.

No one else.

7. International Transfers

We are in the UK. Your data goes outside the UK and EEA:

• United States — Google, AWS, OpenAI, Groq, Perplexity, Meta, RevenueCat, Resend.
• China — Alibaba Cloud, when it handles a scan.

US transfers rely on the UK International Data Transfer Addendum, Standard Contractual Clauses, or Data Privacy Framework certification. China has no UK or EU adequacy decision, and its law permits state access on terms differing substantially from UK law. Stated plainly so you can decide whether to upload an image.

8. Retention

• Account and betting data — while your account exists.
• Bet slip images — while the bet exists.
• Chat history — until you clear it.
• Diagnostics — up to 90 days.
• After deletion — removed from live systems promptly, from backups within 30 days, except where law requires retention.

9. Security

Encrypted in transit and at rest. Production access restricted. Access rules enforce that you read only your own data, except what you publish.

No system is perfectly secure. If a breach affects your rights we will tell you and the ICO, as required.

10. Your Rights

Under UK and EU law: access, correction, deletion, restriction, objection, portability, and withdrawal of consent. Withdrawal does not undo prior processing.

• Access and export — app settings.
• Correction — edit in the app.
• Deletion — delete your account in the app, or email us.
• Tracking — iOS Settings → Privacy & Security → Tracking.
• Notifications — app or device settings.

We reply within one month. Unhappy with the answer: complain to the ICO (ico.org.uk) or your local authority.

California: rights to know, delete, correct, and not be discriminated against for exercising them. We do not sell or share personal information as the CCPA/CPRA define those terms.

11. Legal Bases

• Contract — running your account and its features.
• Consent — ad measurement via ATT, and push notifications.
• Legitimate interests — analytics, diagnostics, security.
• Legal obligation — where the law requires it.

12. Age

18 or over only. We do not knowingly collect data from anyone under 18. If we learn we have, the account and its data are deleted. Tell us if you believe a minor is using Zort.

13. Betting

Zort is a record-keeping and analytics tool. It is not a bookmaker. It accepts no bets and holds no stakes. Nothing in it is betting advice. Tips, AI insights and statistics are information only. Bets you place are your decision and your risk. Past results do not predict future ones.

Gambling can be addictive. Free, confidential help: BeGambleAware (begambleaware.org, 0808 8020 133) or GamCare (gamcare.org.uk) in the UK, and equivalent services elsewhere.

14. Notifications

With permission we send notifications about bets, friends' activity, reminders and occasional product news. Turn them off in the app or device settings. Nothing else is affected.

15. Changes

We update this when what we do changes. Material changes — a new data category, processor or purpose — are announced in the app before taking effect, not merely posted here. The date above is the current version.