Effective Date: October 14, 2026
This Privacy Policy describes how Pilot Grape LLC ("we," "our," or "us") collects, uses, shares and stores information when you use SlipTrack. By using SlipTrack, you agree to the practices described in this policy.
If you sign in with Google or Apple, we receive your email address and name from your sign-in provider. With Apple, you can share a relay address instead of your email (Hide My Email), and your name only if you choose to. If you sign in with Google, the app shows your Google profile photo, which your device loads directly from Google. We do not collect passwords, phone numbers, or payment information.
If you join the beta waitlist on sliptrack.net, the form runs on Airtable, which stores what you enter, such as your email address, how you plan to sign in, whether you have an iPhone, the sportsbooks and leagues you use, whether you are 21 or older, and how you heard about SlipTrack. The form is on Airtable's website, so Airtable's privacy policy also applies to it. Your answer to the age question is your own statement; the app runs its own age check before you can use it. We use your entry to decide whom to invite to the beta and to send the invite, and we keep entries whether or not we invite you. If we invite you, your email address is given to Apple's TestFlight so Apple can send the invite, and added to our beta invite list. Deleting a SlipTrack account does not remove a waitlist entry; to remove yours, email hello@sliptrack.net.
If you use SlipTrack as a guest (without signing in), we do not collect account information. To limit abuse of player lookups, our servers store your IP address with a count of your requests. Guests are covered by the analytics described under "Usage data and error reports" below.
For each bet in your account we store what the bet is: teams, players, picks, lines, odds, stake, sportsbook, and result. Bets come into your account in two ways.
Screenshot import. When you import a bet slip, you upload a screenshot from a sportsbook. We store:
SlipSync (sportsbook sync). If you agree to SlipSync and connect a sportsbook, you sign in on the sportsbook's own website inside the app. SlipTrack does not receive or store your sportsbook password. Once you are signed in, the app reads your bet history from the sportsbook and sends it to our servers, where we turn it into bets in your account. For each synced bet we also keep the sportsbook's bet ID and a copy of selected fields from the sportsbook's record (such as stake, odds, selections and player names) to improve how we read sportsbook data. Syncs made before October 12, 2026 may have kept a fuller copy of the sportsbook's record. For sportsbooks we are still adding (currently FanDuel), the app sends your bet history pages to our servers, which keep only reviewed bet fields, plus request details such as the page address, the time and your sportsbook region (for example, your state), and store them to build that support; a daily cleanup deletes them once they are 90 days old. For each sync we keep a detailed log (its status, error codes and a filtered copy of the synced bets), which a daily cleanup deletes once it is 90 days old, and a summary (counts, error codes, and the sportsbook's bet ID of any bet that failed to import) while your account exists. The sportsbook's sign-in session stays in the app on your device. Signing out of sportsbooks or out of SlipTrack clears the sportsbook's cookies; if that fails, the app clears them before the next sportsbook connection. A sportsbook that keeps its sign-in elsewhere in the app's browser storage may stay signed in.
If you agree to share in Bookies, members of booths you create or join see your open bets (picks, players, lines, teams and game, odds, stake, sportsbook, the sportsbook's market text and live progress) and your overall record (wins, bets and profit across all your settled bets). They see you as "Member" and a number, never your name or email; the app receives an internal account number for each member. Booth members also see the booth's name, emoji and invite code. If you have not agreed, members still see that you are in the booth, but not your bets or record.
If you block a member, you and that member no longer see each other's bets. If you report a booth or a member, we store the reason, any note you add, the booth's name and the accounts involved, so we can review it.
When you report a bug, we store what you write, the page and feature area, your device, app version and build, and, if you are signed in, a link to your most recent import and bet. If you are signed in, the text of your report is sent to Anthropic to sort it by severity. Our team is notified in Discord with the severity, area, page, device, app version and a report number, not the text of your report.
If you send feedback through TestFlight, Apple shares with us your feedback email address, your comment, your device and OS version, the build, and a link to any crash log.
When you ask for an AI Insight on a settled bet, we send Anthropic that bet (type, legs, players and picks, lines, sportsbook, stake, odds and result) and your 20 most recently settled bets (type, number of legs, prop types, sportsbook, stake and result). We do not send your name or email.
After you confirm your age and accept the Terms, whether or not you sign in, our analytics provider PostHog receives device and session identifiers, your OS and version, device type, screen size, time zone, app version, and a set of in-app events (for example, that an import finished). Once you sign in, it also receives your internal account number. PostHog is set to anonymize IP addresses.
Before you confirm your age, PostHog receives only anonymous crash reports (the type of error and where in the code it happened), with no account, device or contact identifier.
Our error monitor, Sentry, receives error reports from the app and from our servers. They describe what went wrong and can include your internal account number and, for some sign-in and access errors, your email address.
To find bugs and improve performance, the app can record how you use its screens (taps, scrolls and which screens you visit). Text on screen and anything you type is masked, images are hidden, and network content is not recorded. Recordings are processed by PostHog, our analytics provider, and deleted after 30 days.
We ask your date of birth to confirm you are 21 or older. We keep only the result, the date it was checked and the method, never your date of birth. We record which version of the Terms and Privacy Policy you accepted and when, whether you agreed to SlipSync and to Bookies sharing, and the sportsbooks you choose.
The app keeps some records on your device: your sign-in session, analytics identifiers, your onboarding progress and age-check result, the Terms and Privacy Policy versions you accepted, your league preference, your SlipSync settings, the account that last signed in to a sportsbook, pending sync-attempt records, and the time of your last sync for each sportsbook. If an age check fails on a device, the app blocks the whole device, including other accounts and guest mode, for 24 hours, and keeps a 24-hour block on that account on the device. After the block ends, the stored account number can stay on the device until the next time an account is blocked on that device, or until the app is deleted.
Your bet data is used to display your bet history, track live game outcomes, settle bets automatically, and, if you agree, share your bets with your Bookies booths.
Bet slip screenshots you import and the sportsbook records kept from SlipSync may be used to improve how SlipTrack reads bets. For example, a screenshot of a BetMGM parlay slip helps us train our system to better recognize and read similar slips in the future. This is the primary purpose of retaining screenshot images. To test changes, we may send stored screenshots to Anthropic again, and we may save copies of read slips (picks, odds, stake and sportsbook, without your account) as test cases in our private code repository on GitHub. Market names from synced bets, without any account information, are sent to Anthropic to match them to the markets SlipTrack supports.
We may use or share de-identified or aggregated information that cannot reasonably be linked to you, for example to build industry reports or data products.
We do not sell your personal data, and we do not share it for advertising.
Error and performance data is used to identify and fix bugs, monitor uptime, and maintain service reliability. Automated alerts to our team in Discord can include internal record numbers (for example, bet IDs) and automated summaries of error reports. We may send error report titles to Anthropic to help triage them.
Your data is stored in Supabase, a secure cloud database provider, and the service is hosted on Vercel. Bet slip screenshots are stored in Supabase Storage.
We keep your account data while your account exists. Deleting your account removes it as described in Section 6. Some data has a set retention period:
We have not yet set deletion periods for other records, such as error reports, bug reports from guests, guest records containing IP addresses, and beta waitlist entries. We are setting them and will update this policy when we do.
We do not sell, rent, or trade your personal information to third parties.
We share data with:
SlipTrack integrates with the following third-party services:
You may request access to or deletion of your personal data at any time by contacting us at: hello@sliptrack.net
Upon a verified deletion request, we will remove or anonymize:
Note: Guest data that stays guest-only is not associated with an identifiable user and cannot be individually retrieved or deleted. If you later sign in on the same device, PostHog links your earlier guest analytics to your account.
We will respond to deletion requests within 30 days.
You can delete your account directly from the app: go to Account > Delete account. You'll be asked to confirm before anything is deleted. If you signed in with Apple, that confirmation also asks you to sign in with Apple again. This is required so we can revoke your Apple sign-in authorization.
Deleting your account is permanent. It removes your account and sign-in credentials, your bets and bet history, the bets created from your imported slips and sportsbook syncs, your uploaded slip and bug-report screenshots, your bug reports, your SlipSync sync records, the settings saved to your account, your Bookies group memberships, your blocks, and the reports you filed. If you created a Bookies group that still has other members, the group is handed off to another member rather than deleted; if you were its only member, the group is deleted along with it. On the device you deleted from, the app signs you out and clears the sportsbook sign-in cookies (if clearing fails, the app clears them before the next sportsbook connection); the other records it keeps on your device (Section 1), such as your SlipSync settings, league preference and onboarding record, stay there until you delete the app.
When you delete your account, we keep a record of the Terms and Privacy Policy versions you accepted, your age-check result, and your SlipSync and Bookies agreements, with the dates and the app version, for 7 years so we can respond to legal claims. We have not yet set up deleting it after that. It is linked to an internal account number and, where available, to a protected code derived from the email address your sign-in provider shared with us (with Apple's Hide My Email, that is Apple's relay address), not to the email address itself.
Parsed slip data, including sportsbook ticket identifiers contained inside the parsed JSON, is retained without any account identifier to help us improve slip reading, and the screenshot image it came from is deleted. The same applies to bets that came from SlipSync: we keep the bet data and the sportsbook's bet ID without any account identifier, and delete the copy of the sportsbook's record. We do not use this retained data to identify you. Test slips already saved in our code repository are kept.
Reports that other members filed about you are kept, with your account removed from them. Rate-limit counters for bug reports and for account deletion may keep your internal account number.
If you submitted TestFlight feedback from the same email address you sign in with, that address is removed from your feedback; your comment is kept. The beta invite list keeps your email so you can be re-invited to future beta builds.
If you signed in with Apple, deleting your account also revokes your Apple sign-in authorization. If that revoke fails, your data is still deleted, and the app asks you to confirm with Apple again to finish deleting the account itself.
Bug reports and TestFlight comments sent before October 11, 2026 may remain in an internal feedback log and in team alerts posted to Discord at the time.
Deleting your account in the app does not yet remove analytics data held by PostHog, error reports held by Sentry, or the alerts already posted to Discord. That data is kept under those services' own retention settings; session recordings are deleted after 30 days.
Your data rows are removed immediately. If a later step of the deletion fails, the app tells you, and your sign-in account is removed when you try again. Deleting the underlying screenshot files finishes in the background, usually within 15 minutes, and failed deletions are retried. In rare cases a screenshot file can be neither deleted nor queued for another try, and it then stays in storage after your account is deleted.
We use industry-standard security practices including row-level security on all database tables, authenticated API access, and encrypted data transmission. No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
Bet tracking features within SlipTrack are intended for users 21 years of age or older. We do not knowingly collect personal data from users under 13. If you believe a child under 13 has provided personal information through SlipTrack, contact us and we will delete it promptly.
We may update this Privacy Policy. When we make a material change, we update the dates at the top of this page, and the app asks you to review and accept the updated policy the next time it gets the current policy version from our servers. If the app cannot reach our servers, it keeps using the last version it received until it can.
Do Not Track. SlipTrack does not track you across other companies' apps or websites, and it does not respond to browser Do Not Track signals.
This Privacy Policy is governed by the laws of the State of Wyoming. SlipTrack complies with applicable state and federal privacy laws governing its operation across the United States.
For privacy questions or data requests, contact us at: hello@sliptrack.net