Privacy policy

Last updated: 31 October 2026

This policy explains what MATCH PULSE (the website aimatchpulse.com and the MATCH PULSE apps for Android and iOS) collects about you, why, and the choices you have. MATCH PULSE is operated by 11 Project Management ("we"), which you can reach at [email protected].

The short version You can use MATCH PULSE without an account. An account is only needed for the Watchlist, alerts and paid plans. We collect only what the service needs: your account details, your settings and saved insights, and the security records that keep accounts safe. We count visits to the website ourselves, as anonymous daily totals: no tracking cookie, no visitor ID, and your IP address is never stored. We do not sell your data, we do not share it with bookmakers, and the apps show no ads and contain no advertising or analytics trackers. You can download all your data or delete your account at any time from your profile. What we collect When you create an account or sign in With Google or Apple: your name and email address from Google or Apple (Apple may give us a private relay address instead of your real one), and your profile picture if the provider shares one. With email and password: your name, email address and password. Your password is stored only as a secure one-way hash; nobody at MATCH PULSE can read it. Your account becomes active only after you open the confirmation link we email you (valid for 24 hours). Settings: language, time zone, display preferences, favourite competitions, chosen market sources and alert choices. Your clubs: the clubs you follow and, for each, the alerts you want (kick-off, goals, line-ups, AI analysis). Your activity: the insights you save to your Watchlist. While you are signed in on the website While a page of the website is open and visible, your browser tells us about once a minute that you are still there and which page you are on. We use this only to see how many signed-in members are using the site right now. We keep only your current page, in our server's memory: no history of the pages you visit is stored, and the record is forgotten an hour after you leave. When you turn on alerts App: a push token for your device, the platform (Android or iOS) and the app version, so we can send the alerts you chose (kick-off, goals, market moves, changes in the analysis). Website: a browser push subscription and your browser type. When you buy a plan Website: payments are handled by Stripe. We receive a customer and subscription reference, the plan, its status and the amount. We never see or store your card details. Apps: purchases are made through Google Play or the App Store and confirmed through RevenueCat, which receives an anonymous account identifier and the purchase receipt. We store the plan, its status and the amount. Automatically Website visits (anonymous): for each page you open on the website we count one view, with the page's address, the kind of device (mobile, tablet or desktop), the site language, where the visit came from (a search engine, a social network, another website, a campaign link, or direct) and how long the page was visible (at most 30 minutes). We also look up the country of your IP address in a database held on our own servers; only the country code is kept, and your IP address itself is neither stored nor sent to anyone. These are kept as daily totals per page; they cannot be linked to you. Automated visits (bots) are not counted. Where you came from: when you arrive from a campaign link or another website, a cookie remembers that source for 30 days. If you create an account or buy a plan, we record which source brought you (for example "newsletter" or "google.com"), so we can see which campaigns work. Nothing else about your browsing is recorded. Security records: active sign-in sessions and a log of sign-ins, sign-up and password-reset requests, with IP address and browser or device type. Error reports: when a request fails on our servers or the website, a technical report with the address requested, IP address, browser or device type and, if you are signed in, your account number, so we can fix it. Country (for what we may show): when the website or the app opens, it asks our server which country you are in. The country is looked up from your IP address in the same database held on our own servers; the IP address is not stored and the country is not linked to you. We use it only to decide whether betting odds are shown: in some countries where gambling or its advertising is restricted, MATCH PULSE shows the analysis without prices or odds. The answer is kept in your browser tab (session storage) or on the device in the app, and nowhere else. When you contact us The message you send through Help & feedback, the email address you give us (if any), the page you sent it from and your browser type. What we do not collect We do not collect your precise location, contacts, photos or files. AI analysis is run once per match from football data only: no personal data is ever sent to the AI providers.

How we use it To provide the service: create your account and sign you in, keep your Watchlist and settings, send the alerts and account emails you need (confirming your email, resetting your password), and give you access to the plan you bought. To keep accounts and the service secure, prevent abuse and fix errors. To understand, in anonymous totals, which pages and campaigns are useful, and to improve the service. To answer your messages. We process your data to perform our agreement with you (your account, plans, alerts and account emails), on the basis of our legitimate interest in keeping the service secure and working and in understanding how it is used in anonymous form, on your consent (push alerts, which you can turn off at any time, and ads on the website where they apply), and where the law requires it (for example, keeping payment records for tax purposes).

Ads The apps show no ads. The website may show ads from Google AdSense to visitors on the Free plan. Where the law requires it, these ads are shown only with your consent; Google's use of data for ads is described in Google's ad policy. You can change your choice at any time with "Privacy and cookie settings" at the bottom of the website, and turn off personalised ads in Google's My Ad Center (myadcenter.google.com). With a Pro plan, or on a match unlocked with a Match Pass, no ads are shown.

Cookies The website uses its own first-party cookies, set by MATCH PULSE itself:

Sign-in cookies that keep you signed in for up to 30 days, and a small cookie that tells the site you are signed in. Sign-in security: when you sign in with Google or Apple, a short-lived cookie protects the sign-in against forgery. It lasts at most 10 minutes and is deleted as soon as you are signed in. Source of your visit: a cookie that remembers, for 30 days, the campaign or website that brought you to MATCH PULSE (see "Where you came from" above). We do not use Google Analytics or any other third-party analytics cookies. On the Free plan, Google AdSense may also set its own cookies to show ads, limit how often you see the same one and measure them; where the law requires it, only with your consent (see "Ads" above). The apps keep your sign-in on the device in its secure storage.

Who we share it with We share data only with the service providers that run MATCH PULSE for us, and only what each one needs:

Hosting and infrastructure: Railway (application hosting, our database and its backups), Cloudflare (network and security). Sign-in: Google and Apple. Account emails: Migadu, which sends our emails (confirming your email, resetting your password). Payments: Stripe (website), Google Play and the App Store, and RevenueCat (app purchases). Push alerts: Expo, Firebase Cloud Messaging (Android), Apple Push Notification service (iOS) and your browser's push service. Ads on the website: Google AdSense, as described above. We may also disclose data if the law requires it. Some of these providers process data outside your country; where they do, they are bound by appropriate safeguards such as the European Commission's standard contractual clauses.

The country of website visits is looked up with the free DB-IP Lite database, which we download and keep on our own servers: your IP address is not sent to DB-IP.

How long we keep it Your account, settings and Watchlist: until you delete your account. Email confirmation links: 24 hours; password reset links: 60 minutes. A sign-up that is never confirmed never becomes an account you can sign in to. Push tokens and subscriptions: until you turn alerts off, they stop working, or you delete your account. Sign-in sessions: deleted 7 days after they expire or are ended. "Who is online now": only in our server's memory, forgotten an hour after your last visit. The source that brought you (campaigns): with your account, until you delete it; the cookie expires after 30 days. Anonymous visit totals: kept as long as they are useful; they contain no personal data. Payment records: kept, without your name or email, for as long as tax and accounting rules require. Security and error records: kept only as long as needed to protect the service and fix problems. Your choices and rights Download your data: Profile → Your data → Download gives you a copy of everything linked to your account. Delete your account: Profile → Delete your account, in the app or on the website. Your name, email, password, sign-ins, Watchlist, settings, push tokens and the record of where you came from are removed at once, and an active Pro subscription bought on the website is cancelled. A subscription bought in the app is managed by Google Play or the App Store: cancel it there to stop renewals. Alerts: turn each alert on or off in your profile, or turn notifications off in your device settings. Cookies: you can delete cookies in your browser at any time; you will then be signed out. Depending on where you live, you may also have the right to access, correct, restrict or object to the processing of your data, and to complain to your data protection authority. Where you live European Economic Area, United Kingdom and Switzerland: you have the rights to access, correct, delete, restrict, object to the processing of and port your data, to withdraw a consent you gave, and to complain to your data protection authority. Our legal bases are those listed under "How we use it". Türkiye: you may use the rights in Article 11 of Law No. 6698 (KVKK) by writing to us. Where the law requires it, we transfer data abroad only with the safeguards it requires. Brazil: you may use the rights in Article 18 of the LGPD by writing to us. California and other US states with privacy laws: you may ask to know, correct or delete your personal information; we do not sell it. On the Free plan, the website's Google AdSense ads may count as "sharing" for advertising; you can opt out with "Privacy and cookie settings" at the bottom of the website. We do not treat you differently for using these rights. Everywhere: Profile → Your data → Download and Profile → Delete your account work in every country. Children MATCH PULSE is intended for adults aged 18 and over. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

Changes We may update this policy as the service changes; the date at the top shows the latest version.

Contact Questions about your data or this policy: [email protected], or see the contact page.