Privacy Policy
The short version.
- We collect what we need to run your account and the features you use: your name, email address, what you follow and the Prediction Sets you build.
- Your chat messages go to OpenAI only after you agree to it. Without that agreement the AI chat stays closed, and the rest of Slipio works as normal.
- Speech you dictate to Slippy is turned into text on your device. The audio never leaves it.
- There is no advertising, no advertising identifier and no analytics or crash-reporting service.
- We do not sell your personal data.
- You can download your data and delete your account yourself, in the app or on the web.
1. Who we are
Slipio is a football analytics service. It shows probabilities from statistical models, match and player statistics, and Prediction Sets (groups of model predictions you can build and follow), and it has an AI chat called Slippy. Slipio does not take bets, hold money or pay winnings.
Slipio is operated by MUSMARORTH LIMITED, a company registered in England and Wales under company number 17433939, 37A Tower Road, Epping, CM16 5EN, United Kingdom ("Slipio", "we", "us"). We are the controller of the personal data described in this policy.
Privacy questions and requests: support@slipio.com. We have not appointed a data protection officer or a representative in the European Union.
2. What we collect
| Data | When | Why |
|---|---|---|
| First name, last name and email address | When you create an account | To run your account, sign you in, and send the emails described in Emails we send |
| Password | Email and password accounts | Stored only as a one-way hash, never in readable form, to sign you in |
| Google account details | If you sign in with Google | See Sign in with Google |
| Your agreements and choices | At sign-up, and when you answer about the AI chat or marketing emails | That you accepted the Terms and this policy, and your answers about AI processing and marketing emails, each with the policy version, the time and whether it was on the web or in the app, so we can show what you agreed to and respect what you chose |
| Onboarding answers | If you answer them after sign-up | What you want from Slipio, your experience and your favourite competitions, to tailor what you see first |
| Two-step sign-in | If you turn it on | The secret your authenticator app uses and one-time recovery codes, stored protected, for your account's security |
| Profile and settings | If you set them | Optional country, notification settings, alert settings and quiet hours, and your time zone, so that times and alerts are right for you |
| What you follow and build | When you use those features | Teams, players and competitions you follow, your watchlist, and the Prediction Sets you build, to provide those features |
| Chat messages | When you type or dictate to Slippy | To answer you and let you return to a conversation. See The AI chat and OpenAI |
| Reports of AI replies | If you report a reply | The reply, your reason and any note, so our team can review it and improve the chat |
| Plan and allowance | If you have a plan | Your plan, its dates, and how many Prediction Sets you have used this month, to apply your allowance. Payments: see Payments |
| Sign-in and security records | When you sign in or change security settings | Each session and security event (such as a sign-in or a password change), with the browser or app, the device type and a shortened IP address (for example 203.0.x.x), so you can see your sessions and we can protect your account |
| Server logs | Every time the website, app or API is used | Our servers record the IP address, the time, the address requested (which can include search terms or filters you chose), the result and the browser or app version. Our email service logs the address each email is sent to. We use these logs to run Slipio, fix faults and protect it from abuse |
| Messages to us | If you email us | Your email address and what you write, to answer you |
You need to give your name and email address and accept the Terms to have an account, because we cannot run one without them. Everything else is optional or depends on the features you use. We do not ask for your mobile number.
3. What we do not collect
- Voice recordings. Speech you dictate to Slippy is turned into text on your device. The audio is never sent to us. Only the resulting text is sent, exactly like a typed message.
- Precise location. We do not ask for your device's location. We may use your IP address, at the moment of a request, to choose which country's fixtures to feature. That lookup runs on our own server, and neither your IP address nor the country is stored for it.
- Advertising and tracking. Slipio shows no adverts, does not use an advertising identifier and does not track you across other companies' apps or websites.
- Analytics and crash reports. The Android app and the web app contain no analytics or crash-reporting service.
- Push notification tokens. The current Android app does not register for push notifications.
- Card details. We never see or store your card number. See Payments.
4. Why we use it, and our legal bases
| Purpose | Legal basis |
|---|---|
| Creating and running your account, signing you in, providing the features you use, applying your plan and its allowance, and sending account and service emails | To perform our contract with you (the Terms of Service) |
| Sending your chat messages to OpenAI so the AI can answer | Your consent, which you can withdraw at any time |
| Alert emails and marketing emails | Your consent, given by switching them on, which you can withdraw at any time |
| Keeping Slipio secure, preventing abuse, investigating faults, reviewing reports of AI replies and improving the service | Our legitimate interests in running a safe and reliable service. You can object, see Your choices and rights |
| Keeping payment records and responding to lawful requests | To meet our legal obligations, for example accounting and tax rules |
We do not make decisions about you that have legal or similarly significant effects by automated means. The probabilities and Prediction Sets Slipio shows are about football matches, not about you.
5. The AI chat and OpenAI
Slippy uses a language model from OpenAI to understand your messages and write its replies.
- Before anything is sent, Slipio explains this and asks you to agree. Your answer is recorded with your account. Until you agree, the AI chat stays closed and nothing you write is sent to OpenAI.
- What is sent: the text of your message and your recent messages in that conversation, the stage of the conversation, and the football facts needed to answer (for example the matches and probabilities in your Prediction Set). Your name, email address and account details are not sent.
- Withdrawing: you can withdraw your agreement at any time in Account, then Privacy & Data, then AI Processing, or by emailing support@slipio.com. From then on, nothing more you write is sent to OpenAI and the AI chat closes until you agree again. Withdrawing does not affect what was sent before.
OpenAI processes this text for us as our service provider. OpenAI states that data sent through its API is not used to train its models unless the customer opts in, and that it may keep it for up to 30 days to detect abuse, then deletes it unless the law requires it to be kept longer. We keep your chat messages on our own servers so you can return to a conversation (see How long we keep it).
AI replies can be wrong. You can report any reply from the reply itself.
6. Sign in with Google
If you choose Google sign-in, Google tells us your name, your email address, whether Google has verified that address, and an identifier for your Google account. We use these only to create your Slipio account, sign you in and keep your Google sign-in linked to your account. We ask Google only for this basic profile information: we get no access to your Gmail, contacts, files or any other Google data, we do not receive your profile photo, and we do not use Google user data for advertising or sell it. An account that signs in with Google has no Slipio password.
7. Payments
- On the website, paid plans are processed by Stripe. When you start a plan we give Stripe your name and email address. You enter your card details on Stripe's checkout page, and Stripe processes them under its own privacy policy. We keep the Stripe customer and subscription references, the plan, the amount and currency, the payment status and dates. We never receive your card number.
- In the Android app, plans cannot be bought.
8. Emails we send
- Account and security emails: verifying your address, password resets, email changes, password changes and data exports.
- Plan emails: payment receipts and cancellation confirmations.
- Results of your Prediction Sets: an email when a Prediction Set you built is settled. This is on unless you turn it off in Account, then Notifications.
- Alerts: emails about teams, players and competitions you follow, only if you switch them on. Each one has an unsubscribe link.
- Marketing: only if you agree to it, and you can change your mind in Account, then Marketing.
9. Who we share it with
We do not sell your personal data and we do not share it for advertising. We share it only with the service providers who run parts of Slipio for us, and where the law requires us to.
| Provider | What for | What it receives |
|---|---|---|
| Oracle Cloud Infrastructure | Hosting our servers and database, in the European Union (Italy) | The data we store |
| OpenAI | The AI chat, only after your agreement | The text described in section 5 |
| Google (Google Workspace) | Sending our emails | Your email address and the message |
| Google (Sign in with Google) | Signing in, if you choose it | Handled by Google under its own terms |
| Stripe | Payments for plans bought on the website | Your name, email address and payment details |
Some content loads directly from other companies, which therefore receive your IP address and browser or app details, as with any download:
- team and competition badges and other football images load from the image server of our football data provider, SportMonks;
- on the web, the Google sign-in button loads from Google;
- if you use voice, the speech model is downloaded once to your device from Hugging Face or GitHub.
Football data (fixtures, statistics and prices) comes from sports data providers and contains no information about you. We may also disclose personal data if the law requires it, to protect people's safety or our rights, or to a buyer or successor if the business is sold or reorganised, in which case this policy continues to apply to it.
10. International transfers
Our servers and database are in the European Union. OpenAI, Google and Stripe may process data in the United States and other countries outside the European Economic Area. Where they do, it is protected by the providers' data processing terms, which use the standard contractual clauses approved for these transfers (with the UK Addendum), or the UK Extension to the EU-US Data Privacy Framework. You can ask us for details at support@slipio.com.
11. How long we keep it
| Data | How long |
|---|---|
| Your account, profile, settings, follows, Prediction Sets, chat messages, AI reports and session records | until you delete your account |
| Security events (sign-ins, password and security changes) | 180 days |
| A data export you request | 7 days after it is ready, then deleted |
| Server and email logs | Up to 30 days |
| Payment records | After your account is deleted, kept without your name, email or account for 6 years from the end of the financial year they relate to, because accounting and tax rules require them |
| Database backups | Up to 30 days, then deleted |
When you delete your account, your account and the data linked to it are deleted from our live systems straight away (the details are on Delete your account). Prediction Sets you generated stay in Slipio's records of model performance, reassigned to an anonymous owner with nothing that identifies you. Copies in backups are not edited one by one: they are deleted with the backup itself, within the backup period above, and are used only to restore the service after a failure.
12. Your choices and rights
- Download your data: Account, then Privacy & Data, then Download Your Data. You get a PDF of what Slipio holds about you, with the sections you choose.
- Correct it: Account, then Profile.
- Delete your account: see Delete your account.
- Emails: Account, then Notifications, and Account, then Marketing.
- Withdraw your AI agreement: Account, then Privacy & Data, then AI Processing.
Depending on where you live, you may also have the right to access your personal data, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw a consent at any time. To use any of these rights, email support@slipio.com from your account's email address. We may ask you to confirm that the account is yours before acting, and we will reply within one month.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to a data protection authority, for example the UK Information Commissioner's Office (ico.org.uk), or the authority where you live or work.
13. Cookies and storage on your device
Slipio does not use advertising or analytics cookies, and nothing on your device is used to track you. The web app keeps only what it needs to work:
- your sign-in, in your browser's storage: kept after you close the browser only if you tick "Remember me", otherwise cleared when you close the tab;
- small preferences, such as a panel you closed or the builder mode you chose, and a Prediction Set you are still building;
- during a password reset only, a short-lived security cookie (30 minutes) that ties the reset to your browser.
If you use Google sign-in on the web, Google's sign-in script may set its own cookies under Google's policy. The Android app keeps your sign-in in the device's secure storage (only if you tick "Remember me"), and your preferences, including your answer to the 18+ question, on the device.
14. Adults only
Slipio is for adults aged 18 and over. The Android app asks you to confirm that you are 18 or over before it opens, and by creating an account you confirm that you are. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, tell us at support@slipio.com and we will delete it.
15. Security
Connections to Slipio are encrypted. Passwords are stored only as one-way hashes, two-step sign-in is available, you can see and end your active sessions, and access to personal data is limited to the people who need it to run Slipio. No service can be perfectly secure, but we take reasonable technical and organisational steps to protect your data, and we will tell you and the authorities about a breach where the law requires it.
16. Changes to this policy
If we change this policy, we will publish the new version here with its effective date. If a change is significant, we will tell you in the app or by email before it takes effect.
17. Contact us
MUSMARORTH LIMITED, 37A Tower Road, Epping, CM16 5EN, United Kingdom.
Privacy: support@slipio.com. Support: support@slipio.com.